| Message ID | 20210128001521.266883-5-joel@jms.id.au |
|---|---|
| State | New |
| Headers | show |
| Series | FIT verification | expand |
On Thu, 28 Jan 2021, at 10:45, Joel Stanley wrote: > This turns on FIT signature verification for the OpenBMC SPL > configuration, for both the SPL and u-boot. > > This enables rsa and sha algorithms for verifying the signature of the > u-boot FIT when loading it. > > FIT_IMAGE_TINY is selected to save approx 3KB from the image size. > > Signed-off-by: Joel Stanley <joel@jms.id.au> Acked-by: Andrew Jeffery <andrew@aj.id.au>
diff --git a/configs/ast2600_openbmc_spl_emmc_defconfig b/configs/ast2600_openbmc_spl_emmc_defconfig index 26e8790cef87..6daf6343478b 100644 --- a/configs/ast2600_openbmc_spl_emmc_defconfig +++ b/configs/ast2600_openbmc_spl_emmc_defconfig @@ -36,6 +36,9 @@ CONFIG_ARMV7_BOOT_SEC_DEFAULT=y CONFIG_ARMV7_PSCI_NR_CPUS=2 CONFIG_NR_DRAM_BANKS=1 CONFIG_FIT=y +CONFIG_FIT_SIGNATURE=y +CONFIG_SPL_FIT_SIGNATURE=y +CONFIG_SPL_LOAD_FIT=y CONFIG_USE_BOOTARGS=y CONFIG_BOOTARGS="console=ttyS4,115200n8 root=/dev/ram rw" CONFIG_USE_BOOTCOMMAND=y @@ -49,6 +52,7 @@ CONFIG_BOARD_EARLY_INIT_F=y CONFIG_SPL_SYS_MALLOC_SIMPLE=y CONFIG_SPL_STACK_R=y CONFIG_SPL_SEPARATE_BSS=y +CONFIG_SPL_FIT_IMAGE_TINY=y CONFIG_SPL_DM_RESET=y CONFIG_SPL_RAM_SUPPORT=y CONFIG_SPL_RAM_DEVICE=y
This turns on FIT signature verification for the OpenBMC SPL configuration, for both the SPL and u-boot. This enables rsa and sha algorithms for verifying the signature of the u-boot FIT when loading it. FIT_IMAGE_TINY is selected to save approx 3KB from the image size. Signed-off-by: Joel Stanley <joel@jms.id.au> --- v3: Move SPL_FIT_IMAGE_TINY to this patch --- configs/ast2600_openbmc_spl_emmc_defconfig | 4 ++++ 1 file changed, 4 insertions(+)