Commit Graph

221 Commits

Author SHA1 Message Date
Alex Gonzalez 26187f47c6 meta-digi-arm: Add weak assignment for Linux and U-Boot
This will allow to override the variable easily.

Signed-off-by: Alex Gonzalez <alex.gonzalez@digi.com>
2017-01-31 17:47:32 +01:00
Javier Viguera 1b387bbe5d meta-digi: revert revisions to AUTOREV
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2017-01-27 12:01:55 +01:00
Javier Viguera 615350dd26 meta-digi: update revisions for dey-2.0-r5.1
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2017-01-27 11:58:29 +01:00
Javier Viguera 7005b0a330 Merge branch 'dey-2.0/master' into dey-2.0/maint
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2017-01-26 18:17:12 +01:00
Alejandro Navarro 2c7e8ade88 mca_tool: update checksums for version 1.2
Signed-off-by: Alejandro Navarro <alejandro.navarro@digi.com>

https://jira.digi.com/browse/DEL-3575
2017-01-25 19:48:05 +01:00
Alejandro Navarro caa932612d mca_tool: update checksums for the new version
Signed-off-by: Alejandro Navarro <alejandro.navarro@digi.com>

https://jira.digi.com/browse/DEL-3499
2017-01-16 16:19:53 +01:00
Diaz de Grenu, Jose 66c85d94b1 Merge tag 'dey-2.0-r4.2' into dey-2.0/master
Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-11-29 13:39:12 +01:00
Diaz de Grenu, Jose ede7b9b6c0 meta-digi: revert revisions to AUTOREV
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-11-25 11:43:09 +01:00
Diaz de Grenu, Jose 6efd9263f3 meta-digi: update revisions for dey-2.0-r4.2
Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-11-25 11:40:48 +01:00
Javier Viguera eed8fd2e63 trustfence-sign-tools: use v2015.04 maintenance branch
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-11-25 11:35:49 +01:00
Hector Palacios aab2290bef mca-tool: update sumchecks for the new version
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2016-11-23 15:53:45 +01:00
Diaz de Grenu, Jose e273a30fac mca-tool: update sumchecks for the new version
Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-11-22 18:50:21 +01:00
Hector Palacios a81f72b99f mca-tool: add application to manage the CC6UL MCA firmware
Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://jira.digi.com/browse/DEL-3093
2016-11-18 11:28:04 +01:00
Diaz de Grenu, Jose af3f883f09 trustfence: [cosmetic] fix usage help
Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-11-09 17:02:52 +01:00
Diaz de Grenu, Jose ed22789224 trustfence: make sign script threadsafe
Ensure that the signing script is not executed in parallel. This is required in
order to avoid problems during PKI generation and CST usage when building with
Yocto or the Android build system.

https://jira.digi.com/browse/DEL-2849

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-11-09 17:02:18 +01:00
Diaz de Grenu, Jose 6aff5b5524 trustfence: fix sign/encryption for very small artifacts
The HAB on the i.MX6/i.MX6UL expects an entrypoint which is used to pass
execution to U-Boot in the ROM code. In later executions of HAB, U-Boot calls
the HAB but ignores this value.

A fixed value of 0x1000 was being used for the entrypoint, which is too big for
really small artifacts, like bootscripts. This commit reduces the value to
0x100. This allows to sign and encrypt artifacts as small as 260 bytes.

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-10-19 19:09:53 +02:00
Diaz de Grenu, Jose 934c819fd9 meta-digi-arm: sign/encrypt bootscript
https://jira.digi.com/browse/DUB-679

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-10-19 10:47:09 +02:00
Diaz de Grenu, Jose 5c4df1ddfd trustfence: add support for signing and encrypting DTBs and ramdisks
This patch introduces some parameters which allow to select the type of image
to be signed. Currently the supported types are:

* linux kernel (-l)
* DTB (-d)
* initramfs (-i)

This also moves the CONFIG_PLATFORM environment variable to a parameter, for
consistency.

https://jira.digi.com/browse/DUB-614
https://jira.digi.com/browse/DUB-615

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-10-19 10:33:08 +02:00
Diaz de Grenu, Jose 6b0fbddf3b meta-digi-arm: trustfence-sign-tools: simplify script usage outside Yocto
* Check number of arguments
* Add platform argument
* Read user configuration from .config file
* Remove unused variable (dek_blob_size)
* Remove noise in output messages

https://jira.digi.com/browse/DEL-2688

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-09-12 18:07:28 +02:00
Diaz de Grenu, Jose c5df62cd05 meta-digi-arm: trustfence-sign-tools: avoid using 'xxd'
When writing the fake IVT table in raw, rely on tac (part of the core-utils
package) instead of on xxd.

https://jira.digi.com/browse/DEL-2688

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-09-12 18:07:28 +02:00
Diaz de Grenu, Jose c8ec33129d meta-digi-arm: trustfence-sign-tools: add sign tools recipe
Add a recipe to include all signing and encryption tools for U-Boot and
kernel images to the SDK. Move existing trustfence kernel scripts to this
new recipe.

This allows to use these scripts not only from the Yocto build system but
also as standalone tools for image signing and encryption.

https://jira.digi.com/browse/DEL-2688

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-09-12 18:07:28 +02:00