]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commitdiff
kernel-fitimage.bbclass: add padding algorithm property in config nodes
authorLUIS ENRIQUEZ <lenriquez389@gmail.com>
Fri, 22 Jul 2022 09:50:17 +0000 (11:50 +0200)
committerSteve Sakoman <steve@sakoman.com>
Mon, 25 Jul 2022 16:29:46 +0000 (06:29 -1000)
This allows choosing padding algorithm when building fitImage. It may be pkcs-1.5 or pss.

Signed-off-by: LUIS ENRIQUEZ <luis.enriquez@se.com>
From: LUIS ENRIQUEZ <luis.enriquez@se.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/classes/kernel-fitimage.bbclass

index 5f5e9dd444803d0011173fcf6a3d211a825e93aa..7c0d93625be4208a23d4afc317d84ba593a3f0ad 100644 (file)
@@ -56,6 +56,9 @@ FIT_HASH_ALG ?= "sha256"
 # fitImage Signature Algo
 FIT_SIGN_ALG ?= "rsa2048"
 
+# fitImage Padding Algo
+FIT_PAD_ALG ?= "pkcs-1.5"
+
 #
 # Emit the fitImage ITS header
 #
@@ -250,6 +253,7 @@ fitimage_emit_section_config() {
 
        conf_csum="${FIT_HASH_ALG}"
        conf_sign_algo="${FIT_SIGN_ALG}"
+       conf_padding_algo="${FIT_PAD_ALG}"
        if [ "${UBOOT_SIGN_ENABLE}" = "1" ] ; then
                conf_sign_keyname="${UBOOT_SIGN_KEYNAME}"
        fi
@@ -333,6 +337,7 @@ EOF
                         signature-1 {
                                 algo = "${conf_csum},${conf_sign_algo}";
                                 key-name-hint = "${conf_sign_keyname}";
+                                padding = "${conf_padding_algo}";
                                ${sign_line}
                         };
 EOF