From mboxrd@z Thu Jan 1 00:00:00 1970 From: deepak kumar Pradhan Date: Tue, 23 Jul 2019 09:41:12 +0530 Subject: [U-Boot] mkimage unable to assign sign value to fitimage Message-ID: List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de HI , I am using marvell armada 388 clearfog pro device. I am using fitimage to upgrade my device. To make the device bootup secure I want to sign the fitimage and verify the same in u-boot. 1. However I am observing that the mkimage is unable to assign sign value to my fit image. 2. One more issue I am facing that is when I am enabling the CONFIG_FIT and FIT_SIGNATURE, the mkimage is throughing error like below *"mkimage -f fitimage-temp.its -k keys fitimage-kernel-rfs-dtb.itbUnsupported signature algorithm (sha1,rs2048) for 'signature at 1' signature node in 'kernel at 1' image nodemkimage Can't add hashes to FIT blob"* Can someone help me out and uide me what I am doing wrong? Below are the outputs *mkimage -F -k keys bkp-fitimage-initramfs-script.bin * FIT description: U-Boot fitImage for Aprisa NEXT/4.14.54+gitAUTOINC+7c0df4bf46/clearfog Created: Tue Jul 16 12:25:27 2019 Image 0 (kernel at 1) Description: Linux kernel Created: Tue Jul 16 12:25:27 2019 Type: Kernel Image Compression: uncompressed Data Size: 4906704 Bytes = 4791.70 KiB = 4.68 MiB Architecture: ARM OS: Linux Load Address: 0x01314c40 Entry Point: 0x01314c40 Hash algo: crc32 Hash value: 8aeccf3a Hash algo: sha1 Hash value: b8fafa028a78428a90304ab913877d2d0adbfd88 * Sign algo: sha1,rs2048:my_key Sign value: unavailable* Timestamp: unavailable Image 1 (fdt at armada-388-clearfog.dtb) Description: Flattened Device Tree blob Created: Tue Jul 16 12:25:27 2019 Type: Flat Device Tree Compression: uncompressed Data Size: 18373 Bytes = 17.94 KiB = 0.02 MiB Architecture: ARM Hash algo: crc32 Hash value: dbe5de9d Hash algo: sha1 Hash value: c1b29ef3c908ecf4c9e800f573a7c33184954b4f * Sign algo: sha1,rs2048:my_key* * Sign value: unavailable* Timestamp: unavailable -- Deepak Kumar Pradhan