Digi
/
meta-digi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

trustfence-sign-artifact: ccimx8x: preserve original image 

Perform AHAB signing process without altering the original file.

https://jira.digi.com/browse/DEL-7024

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
This commit is contained in:
Gonzalo Ruiz 2020-06-15 11:21:36 +02:00
parent 7143ea9534
commit 82157675d8
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
meta-digi-arm/recipes-digi/trustfence/trustfence-sign-tools/trustfence-sign-artifact.sh
View File

@ -278,12 +278,15 @@ else
# Other constants # Other constants
KERNEL_START_OFFSET="0x0" KERNEL_START_OFFSET="0x0"
KERNEL_SIG_BLOCK_OFFSET="0x90" KERNEL_SIG_BLOCK_OFFSET="0x90"
KERNEL_NAME="${1}"
HAB_VER="ahab" HAB_VER="ahab"
DIGEST="sign_digest" DIGEST="sign_digest"
DIGEST_ALGO="sha512" DIGEST_ALGO="sha512"
# Prepare the image container
mkimage_imx8 -soc "QX" -rev "B0" -c -ap ${UIMAGE_PATH} a35 ${CONFIG_RAM_START} -out temp-mkimg
KERNEL_NAME="$(readlink -e temp-mkimg)"
# Compute the layout: sizes and offsets. # Compute the layout: sizes and offsets.
container_header_offset="${KERNEL_START_OFFSET}" container_header_offset="${KERNEL_START_OFFSET}"
signature_block_offset="${KERNEL_SIG_BLOCK_OFFSET}" signature_block_offset="${KERNEL_SIG_BLOCK_OFFSET}"
@ -342,10 +345,6 @@ if [ "${CONFIG_SIGN_MODE}" = "HAB" ]; then
objcopy -I binary -O binary --pad-to "${sig_len}" --gap-fill="${GAP_FILLER}" "${TARGET}" objcopy -I binary -O binary --pad-to "${sig_len}" --gap-fill="${GAP_FILLER}" "${TARGET}"
else else
# Prepare the image container
mkimage_imx8 -soc "QX" -rev "B0" -c -ap ${UIMAGE_PATH} a35 ${CONFIG_RAM_START} -out temp-mkimg
mv temp-mkimg "${UIMAGE_PATH}"
# Sign the image # Sign the image
CURRENT_PATH="$(pwd)" CURRENT_PATH="$(pwd)"
cst -o "${TARGET}" -i "${CURRENT_PATH}/csf_descriptor" >/dev/null cst -o "${TARGET}" -i "${CURRENT_PATH}/csf_descriptor" >/dev/null
@ -357,4 +356,4 @@ fi
[ "${ENCRYPT}" = "true" ] && ENCRYPTED_MSG="and encrypted " [ "${ENCRYPT}" = "true" ] && ENCRYPTED_MSG="and encrypted "
echo "Signed ${ENCRYPTED_MSG}image ready: ${TARGET}" echo "Signed ${ENCRYPTED_MSG}image ready: ${TARGET}"
rm -f "${SRK_TABLE}" csf_descriptor csf.bin 2> /dev/null rm -f "${SRK_TABLE}" csf_descriptor csf.bin temp-mkimg 2> /dev/null