From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter Korsgaard Date: Thu, 14 Dec 2017 09:51:08 +0100 Subject: [U-Boot] [linux-sunxi] Re: [PATCH v3 1/5] sunxi: a64: Enable FIT Signature In-Reply-To: (Jagan Teki's message of "Thu, 14 Dec 2017 13:46:52 +0530") References: <1513144986-13619-1-git-send-email-jagan@amarulasolutions.com> <20171213153947.sbtu7b5hudy7xhpn@flea.lan> <877etq4nl0.fsf@dell.be.48ers.dk> Message-ID: <87374d4rr7.fsf@dell.be.48ers.dk> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de >>>>> "Jagan" == Jagan Teki writes: > On Wed, Dec 13, 2017 at 9:38 PM, Peter Korsgaard wrote: >>>>>>> "Maxime" == Maxime Ripard writes: >> >> Hi, >> >> >> +++ b/arch/arm/mach-sunxi/Kconfig >> >> @@ -179,6 +179,7 @@ config MACH_SUN50I >> >> select SUNXI_DRAM_DW_32BIT >> >> select FIT >> >> select SPL_LOAD_FIT >> >> + imply FIT_SIGNATURE >> >> > I'm really not sure we should force it by default. How much code size >> > is it adding? >> >> Not only that, enabling FIT_SIGNATURE support disables support for the >> legacy images (uImage / boot.scr) for security reasons, so it may very >> well break existing setups. > Sorry, I didn't get why legacy images will disable with fit? It > depends how user can go with it, whether he want legacy or fit both > will work. Not when you enable CONFIG_FIT_SIGNATURE. That option disables support for the legacy images. -- Bye, Peter Korsgaard