From 07525e1c2ca6854777c97e8642b0fafd9fff63b6 Mon Sep 17 00:00:00 2001 From: Javier Viguera Date: Mon, 18 Sep 2023 17:21:55 +0200 Subject: [PATCH] trustfence: relax the expression to match AHAB based SRK certs Current pattern does not match the SRKs generated for the ccimx93. The ccimx93 does not support subordinated SGK certs, so the name of the SRKs do not contain the "_ca_" pattern. So relax the expression used in the trustfence bbclass to match the SRKs generated for both platforms. # For the ccimx93 $ ls -1 crts/SRK1*crt.pem crts/SRK1_sha512_secp521r1_v3_usr_crt.pem # For the ccimx8x $ ls -1 crts/SRK1*crt.pem crts/SRK1_sha512_secp521r1_v3_ca_crt.pem Signed-off-by: Javier Viguera --- meta-digi-dey/classes/trustfence.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-digi-dey/classes/trustfence.bbclass b/meta-digi-dey/classes/trustfence.bbclass index 19f86bd2f..823151566 100644 --- a/meta-digi-dey/classes/trustfence.bbclass +++ b/meta-digi-dey/classes/trustfence.bbclass @@ -91,7 +91,7 @@ copy_public_key() { if [ "${TRUSTFENCE_SIGN_MODE}" = "HAB" ]; then CERT_IMG="$(echo ${TRUSTFENCE_SIGN_KEYS_PATH}/crts/IMG${KEY_INDEX}*crt.pem)" elif [ "${TRUSTFENCE_SIGN_MODE}" = "AHAB" ]; then - CERT_IMG="$(echo ${TRUSTFENCE_SIGN_KEYS_PATH}/crts/SRK${KEY_INDEX}*_ca_crt.pem)" + CERT_IMG="$(echo ${TRUSTFENCE_SIGN_KEYS_PATH}/crts/SRK${KEY_INDEX}*crt.pem)" else bberror "Unknown TRUSTFENCE_SIGN_MODE value" exit 1