From 712907b1c35c1ab90ed1b9a70465ba7b07819ed7 Mon Sep 17 00:00:00 2001 From: Gabriel Valcazar Date: Tue, 22 Mar 2022 10:54:05 +0100 Subject: [PATCH] trustfence: add artifact authentication to U-Boot in signed image builds Signed image support in U-Boot has been split into two separate configurations: one that adds artifact authentication support and another that signs the U-Boot binary at the end of the build. Reflect this change in meta-digi. https://onedigi.atlassian.net/browse/DEL-7862 Signed-off-by: Gabriel Valcazar --- meta-digi-dey/classes/trustfence.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-digi-dey/classes/trustfence.bbclass b/meta-digi-dey/classes/trustfence.bbclass index c244a0d5a..1ba821755 100644 --- a/meta-digi-dey/classes/trustfence.bbclass +++ b/meta-digi-dey/classes/trustfence.bbclass @@ -58,7 +58,7 @@ python () { d.setVar("TRUSTFENCE_DEK_PATH", d.getVar("TRUSTFENCE_SIGN_KEYS_PATH", True) + "/dek.bin"); if (d.getVar("TRUSTFENCE_SIGN", True) == "1"): - d.appendVar("UBOOT_EXTRA_CONF", "CONFIG_SIGN_IMAGE=y ") + d.appendVar("UBOOT_EXTRA_CONF", "CONFIG_SIGN_IMAGE=y CONFIG_AUTH_ARTIFACTS=y ") if (d.getVar("TRUSTFENCE_READ_ONLY_ROOTFS", True) == "1"): d.appendVar("UBOOT_EXTRA_CONF", "CONFIG_AUTHENTICATE_SQUASHFS_ROOTFS=y ") if d.getVar("TRUSTFENCE_SIGN_KEYS_PATH", True):