trustfence-sign-kernel.sh: don't generate SRK_efuses for DEY sign script

The only script that needs to generate the SRK_efuses is the sign.sh
script in the U-Boot code. For the rest of signed non-bootable artifacts
this is not required and it was creating the SRK_efuses file on every
recipe where the script was called, like linux-dey and others, which
eventually resulted in a conflict when copying the artifacts to the shared
deploy-image-dir.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
This commit is contained in:
Hector Palacios 2020-02-11 18:45:17 +01:00
parent b0ef3ea14f
commit b1776fcc63
1 changed files with 1 additions and 4 deletions

View File

@ -171,7 +171,6 @@ if [ "${CONFIG_SIGN_MODE}" = "HAB" ]; then
HAB_VER="hab_ver 4" HAB_VER="hab_ver 4"
DIGEST="digest" DIGEST="digest"
DIGEST_ALGO="sha256" DIGEST_ALGO="sha256"
SRK_EFUSES="/dev/null"
# Other constants # Other constants
GAP_FILLER="0x00" GAP_FILLER="0x00"
@ -243,8 +242,6 @@ if [ "${CONFIG_SIGN_MODE}" = "HAB" ]; then
"${SCRIPT_PATH}/csf_templates/sign_hab" > csf_descriptor "${SCRIPT_PATH}/csf_templates/sign_hab" > csf_descriptor
fi fi
else else
SRK_EFUSES="$(pwd)/SRK_efuses.bin"
# Other constants # Other constants
KERNEL_START_OFFSET="0x0" KERNEL_START_OFFSET="0x0"
KERNEL_SIG_BLOCK_OFFSET="0x90" KERNEL_SIG_BLOCK_OFFSET="0x90"
@ -275,7 +272,7 @@ else
fi fi
# Generate SRK tables # Generate SRK tables
srktool --${HAB_VER} --certs "${SRK_KEYS}" --table "${SRK_TABLE}" --efuses "${SRK_EFUSES}" --${DIGEST} "${DIGEST_ALGO}" srktool --${HAB_VER} --certs "${SRK_KEYS}" --table "${SRK_TABLE}" --efuses /dev/null --${DIGEST} "${DIGEST_ALGO}"
if [ $? -ne 0 ]; then if [ $? -ne 0 ]; then
echo "[ERROR] Could not generate SRK tables" echo "[ERROR] Could not generate SRK tables"
exit 1 exit 1