trustfence-sign-kernel.sh: don't generate SRK_efuses for DEY sign script
The only script that needs to generate the SRK_efuses is the sign.sh script in the U-Boot code. For the rest of signed non-bootable artifacts this is not required and it was creating the SRK_efuses file on every recipe where the script was called, like linux-dey and others, which eventually resulted in a conflict when copying the artifacts to the shared deploy-image-dir. Signed-off-by: Hector Palacios <hector.palacios@digi.com>
This commit is contained in:
parent
b0ef3ea14f
commit
b1776fcc63
|
|
@ -171,7 +171,6 @@ if [ "${CONFIG_SIGN_MODE}" = "HAB" ]; then
|
||||||
HAB_VER="hab_ver 4"
|
HAB_VER="hab_ver 4"
|
||||||
DIGEST="digest"
|
DIGEST="digest"
|
||||||
DIGEST_ALGO="sha256"
|
DIGEST_ALGO="sha256"
|
||||||
SRK_EFUSES="/dev/null"
|
|
||||||
|
|
||||||
# Other constants
|
# Other constants
|
||||||
GAP_FILLER="0x00"
|
GAP_FILLER="0x00"
|
||||||
|
|
@ -243,8 +242,6 @@ if [ "${CONFIG_SIGN_MODE}" = "HAB" ]; then
|
||||||
"${SCRIPT_PATH}/csf_templates/sign_hab" > csf_descriptor
|
"${SCRIPT_PATH}/csf_templates/sign_hab" > csf_descriptor
|
||||||
fi
|
fi
|
||||||
else
|
else
|
||||||
SRK_EFUSES="$(pwd)/SRK_efuses.bin"
|
|
||||||
|
|
||||||
# Other constants
|
# Other constants
|
||||||
KERNEL_START_OFFSET="0x0"
|
KERNEL_START_OFFSET="0x0"
|
||||||
KERNEL_SIG_BLOCK_OFFSET="0x90"
|
KERNEL_SIG_BLOCK_OFFSET="0x90"
|
||||||
|
|
@ -275,7 +272,7 @@ else
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Generate SRK tables
|
# Generate SRK tables
|
||||||
srktool --${HAB_VER} --certs "${SRK_KEYS}" --table "${SRK_TABLE}" --efuses "${SRK_EFUSES}" --${DIGEST} "${DIGEST_ALGO}"
|
srktool --${HAB_VER} --certs "${SRK_KEYS}" --table "${SRK_TABLE}" --efuses /dev/null --${DIGEST} "${DIGEST_ALGO}"
|
||||||
if [ $? -ne 0 ]; then
|
if [ $? -ne 0 ]; then
|
||||||
echo "[ERROR] Could not generate SRK tables"
|
echo "[ERROR] Could not generate SRK tables"
|
||||||
exit 1
|
exit 1
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue