mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-09-14 21:49:33 +02:00
Code Issues Packages Projects Releases Wiki Activity

uboot-sign: Split off kernel-fitimage variables

Browse Source 
In preparation for the next commit, split off several

(From OE-Core rev: 60c1a170f1f8c11bc8f42026debf121433b39115)

Signed-off-by: Sean Anderson <sean.anderson@seco.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Sean Anderson
2022-10-21 19:37:25 -04:00
committed by Richard Purdie
parent deb6b92d44
commit 930dc57fc8
3 changed files with 32 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
meta/classes-recipe/kernel-fitimage.bbclass
View File

@@ -65,6 +65,31 @@ python __anonymous () {
# Description string # Description string
FIT_DESC ?= "Kernel fitImage for ${DISTRO_NAME}/${PV}/${MACHINE}" FIT_DESC ?= "Kernel fitImage for ${DISTRO_NAME}/${PV}/${MACHINE}"
# Kernel fitImage Hash Algo
FIT_HASH_ALG ?= "sha256"
# Kernel fitImage Signature Algo
FIT_SIGN_ALG ?= "rsa2048"
# Kernel / U-Boot fitImage Padding Algo
FIT_PAD_ALG ?= "pkcs-1.5"
# Generate keys for signing Kernel fitImage
FIT_GENERATE_KEYS ?= "0"
# Size of private keys in number of bits
FIT_SIGN_NUMBITS ?= "2048"
# args to openssl genrsa (Default is just the public exponent)
FIT_KEY_GENRSA_ARGS ?= "-F4"
# args to openssl req (Default is -batch for non interactive mode and
# -new for new certificate)
FIT_KEY_REQ_ARGS ?= "-batch -new"
# Standard format for public key certificate
FIT_KEY_SIGN_PKCS ?= "-x509"
# Sign individual images as well # Sign individual images as well
FIT_SIGN_INDIVIDUAL ?= "0" FIT_SIGN_INDIVIDUAL ?= "0"

3
meta/classes-recipe/uboot-config.bbclass
View File

@@ -80,6 +80,9 @@ SPL_MKIMAGE_DTCOPTS ??= ""
UBOOT_MKIMAGE ?= "uboot-mkimage" UBOOT_MKIMAGE ?= "uboot-mkimage"
UBOOT_MKIMAGE_SIGN ?= "${UBOOT_MKIMAGE}" UBOOT_MKIMAGE_SIGN ?= "${UBOOT_MKIMAGE}"
# Signature activation - this requires KERNEL_IMAGETYPE = "fitImage"
UBOOT_SIGN_ENABLE ?= "0"
# Arguments passed to mkimage for signing # Arguments passed to mkimage for signing
UBOOT_MKIMAGE_SIGN_ARGS ?= "" UBOOT_MKIMAGE_SIGN_ARGS ?= ""
SPL_MKIMAGE_SIGN_ARGS ?= "" SPL_MKIMAGE_SIGN_ARGS ?= ""

19
meta/classes-recipe/uboot-sign.bbclass
View File

@@ -43,8 +43,7 @@ inherit uboot-config
# Enable use of a U-Boot fitImage # Enable use of a U-Boot fitImage
UBOOT_FITIMAGE_ENABLE ?= "0" UBOOT_FITIMAGE_ENABLE ?= "0"
# Signature activation - these require their respective fitImages # Signature activation - this requires UBOOT_FITIMAGE_ENABLE = "1"
UBOOT_SIGN_ENABLE ?= "0"
SPL_SIGN_ENABLE ?= "0" SPL_SIGN_ENABLE ?= "0"
# Default value for deployment filenames. # Default value for deployment filenames.
@@ -71,36 +70,26 @@ SPL_NODTB_SYMLINK ?= "u-boot-spl-nodtb-${MACHINE}.bin"
# U-Boot fitImage description # U-Boot fitImage description
UBOOT_FIT_DESC ?= "U-Boot fitImage for ${DISTRO_NAME}/${PV}/${MACHINE}" UBOOT_FIT_DESC ?= "U-Boot fitImage for ${DISTRO_NAME}/${PV}/${MACHINE}"
# Kernel / U-Boot fitImage Hash Algo # U-Boot fitImage Hash Algo
FIT_HASH_ALG ?= "sha256"
UBOOT_FIT_HASH_ALG ?= "sha256" UBOOT_FIT_HASH_ALG ?= "sha256"
# Kernel / U-Boot fitImage Signature Algo # U-Boot fitImage Signature Algo
FIT_SIGN_ALG ?= "rsa2048"
UBOOT_FIT_SIGN_ALG ?= "rsa2048" UBOOT_FIT_SIGN_ALG ?= "rsa2048"
# Kernel / U-Boot fitImage Padding Algo # Generate keys for signing U-Boot fitImage
FIT_PAD_ALG ?= "pkcs-1.5"
# Generate keys for signing Kernel / U-Boot fitImage
FIT_GENERATE_KEYS ?= "0"
UBOOT_FIT_GENERATE_KEYS ?= "0" UBOOT_FIT_GENERATE_KEYS ?= "0"
# Size of private keys in number of bits # Size of private keys in number of bits
FIT_SIGN_NUMBITS ?= "2048"
UBOOT_FIT_SIGN_NUMBITS ?= "2048" UBOOT_FIT_SIGN_NUMBITS ?= "2048"
# args to openssl genrsa (Default is just the public exponent) # args to openssl genrsa (Default is just the public exponent)
FIT_KEY_GENRSA_ARGS ?= "-F4"
UBOOT_FIT_KEY_GENRSA_ARGS ?= "-F4" UBOOT_FIT_KEY_GENRSA_ARGS ?= "-F4"
# args to openssl req (Default is -batch for non interactive mode and # args to openssl req (Default is -batch for non interactive mode and
# -new for new certificate) # -new for new certificate)
FIT_KEY_REQ_ARGS ?= "-batch -new"
UBOOT_FIT_KEY_REQ_ARGS ?= "-batch -new" UBOOT_FIT_KEY_REQ_ARGS ?= "-batch -new"
# Standard format for public key certificate # Standard format for public key certificate
FIT_KEY_SIGN_PKCS ?= "-x509"
UBOOT_FIT_KEY_SIGN_PKCS ?= "-x509" UBOOT_FIT_KEY_SIGN_PKCS ?= "-x509"
# Functions on this bbclass can apply to either U-boot or Kernel, # Functions on this bbclass can apply to either U-boot or Kernel,