[U-Boot] generating a script file in FIT_SIGNATURE context

[U-Boot] generating a script file in FIT_SIGNATURE context

[Nicolas LE BAYON]

From: Nicolas LE BAYON
Sent: mardi 11 avril 2017 14:50
To: u-boot at lists.denx.de
Subject: [U-Boot] generating a script file in FIT_SIGNATURE context

Hi all,

In my setup, I have activated FIT (without signature in a first step), and I boot using standard script way (boot.scr), which I generate with the following command :
mkimage -A arm -T script -C none -n "My boot script" -d boot.txt boot.scr
It works fine, and I can "load" and "bootm" the FIT image.

Now I would like to activate fit_signature. When I write manually all the boot.txt script commands in the console, it works fine. So it means that the FIT image is well generated, and the u-boot is well-configured. That's a good point.

But I have some problems to run the generated boot.scr in that case.  I think the script should also be generated with the signature. Do you confirm that?

If this is the case, from your point of view, which fields should I add to my previous command? -F ? -k ? -K? others?

Thanks in advance for your feedback
Best Regards
Nicolas

Hi again,

I think I found the clue.

When CONFIG_FIT_SIGNATURE is not enabled, then CONFIG_IMAGE_FORMAT_LEGACY is automatically enabled, this allow to treat correctly the boot.scr.

If CONFIG_FIT_SIGNATURE is enabled, we have to set CONFIG_IMAGE_FORMAT_LEGACY to be able to keep that.

With this, it seems ok on my side.

Best Regards
Nicolas

[U-Boot] generating a script file in FIT_SIGNATURE context

[Nicolas LE BAYON]

Hi all,

In my setup, I have activated FIT (without signature in a first step), and I boot using standard script way (boot.scr), which I generate with the following command :
mkimage -A arm -T script -C none -n "My boot script" -d boot.txt boot.scr
It works fine, and I can "load" and "bootm" the FIT image.

Now I would like to activate fit_signature. When I write manually all the boot.txt script commands in the console, it works fine. So it means that the FIT image is well generated, and the u-boot is well-configured. That's a good point.

But I have some problems to run the generated boot.scr in that case.  I think the script should also be generated with the signature. Do you confirm that?

If this is the case, from your point of view, which fields should I add to my previous command? -F ? -k ? -K? others?

Thanks in advance for your feedback
Best Regards
Nicolas