Hector Palacios ae327e8dae trustfence: stm: move generation of PKI out of sign script ... Create a new script for the generation of PKI tree for STM platforms and leave the trustfence-sign-artifact script exclusively for signing. The new gen-pki script only requires the platform as an argument and the path to where to save the tree (if it doesn't exist) in CONFIG_SIGN_KEYS_PATH. This commit also reverts commit 13c136dbc5 by getting rid of the trustfence-genpki-native.bb recipe and moving back the PKI generation functions into trustfence.bbclass. This recipe didn't quite guarantee that the PKI was generated on time for the recipes that required the keys to exist, anyway. Instead, the PKI generation function must be called right after do_compile() of recipe tf-a-stm32mp to be ready for do_deploy() where the key is used. Signed-off-by: Hector Palacios <hector.palacios@digi.com>		2023-08-14 09:19:16 +02:00
..
encrypt_ahab	trustfence: add new TRUSTFENCE_SRK_REVOKE_MASK variable	2021-01-13 17:00:29 +01:00
encrypt_hab	trustfence: Add Trustfence support for CCMX8X	2020-02-04 12:20:38 +01:00
sign_ahab	trustfence: add new TRUSTFENCE_SRK_REVOKE_MASK variable	2021-01-13 17:00:29 +01:00
sign_hab	trustfence: [cosmetic] fix typos on cst templates	2020-09-01 11:29:25 +02:00
trustfence-gen-pki-stm.sh	trustfence: stm: move generation of PKI out of sign script	2023-08-14 09:19:16 +02:00
trustfence-sign-artifact-nxp.sh	trustfence: add ccimx6qp platform to the sign tool	2023-06-20 16:46:16 +02:00
trustfence-sign-artifact-stm.sh	trustfence: stm: move generation of PKI out of sign script	2023-08-14 09:19:16 +02:00