Re: u-boot: signature check for u-boot scripts

2023-01-13 Thread Sean Anderson
On 1/12/23 18:43, Simon Glass wrote: > Hi, > > On Thu, 12 Jan 2023 at 09:03, Sean Anderson wrote: >> >> On 1/11/23 01:13, Heiko Schocher wrote: >> > Hello Sean, >> > >> > Thanks for your answer! >> > >> > On 10.01.23 17:27, Sean Anderson wrote: >> >> On 1/10/23 08:18, Heiko Schocher wrote: >> >>>

Re: u-boot: signature check for u-boot scripts

2023-01-12 Thread Heiko Schocher
Hello Sean, YFI: now I know why it made me so much problems => source \#conf does only work since your commit commit bcc85b96b5ff: ("cmd: source: Support specifying config name") which is not on 2023.01 with which I tested for the customer! With current HEAD it works fine! So again, sorry fo

Re: u-boot: signature check for u-boot scripts

2023-01-12 Thread Heiko Schocher
Hello Simon, On 13.01.23 00:43, Simon Glass wrote: > Hi, > > On Thu, 12 Jan 2023 at 09:03, Sean Anderson wrote: >> >> On 1/11/23 01:13, Heiko Schocher wrote: >>> Hello Sean, >>> >>> Thanks for your answer! >>> >>> On 10.01.23 17:27, Sean Anderson wrote: On 1/10/23 08:18, Heiko Schocher wrot

Re: u-boot: signature check for u-boot scripts

2023-01-12 Thread Heiko Schocher
Hello Sean, On 12.01.23 17:03, Sean Anderson wrote: > On 1/11/23 01:13, Heiko Schocher wrote: >> Hello Sean, >> >> Thanks for your answer! >> >> On 10.01.23 17:27, Sean Anderson wrote: >>> On 1/10/23 08:18, Heiko Schocher wrote: Hello Simon, >> [...] While writting this email ... in [3]

Re: u-boot: signature check for u-boot scripts

2023-01-12 Thread Simon Glass
Hi, On Thu, 12 Jan 2023 at 09:03, Sean Anderson wrote: > > On 1/11/23 01:13, Heiko Schocher wrote: > > Hello Sean, > > > > Thanks for your answer! > > > > On 10.01.23 17:27, Sean Anderson wrote: > >> On 1/10/23 08:18, Heiko Schocher wrote: > >>> Hello Simon, > > [...] > >>> While writting this em

Re: u-boot: signature check for u-boot scripts

2023-01-12 Thread Sean Anderson
On 1/11/23 01:13, Heiko Schocher wrote: > Hello Sean, > > Thanks for your answer! > > On 10.01.23 17:27, Sean Anderson wrote: >> On 1/10/23 08:18, Heiko Schocher wrote: >>> Hello Simon, > [...] >>> While writting this email ... in [3] the line >>> >>> require = "conf" >>> >>> poped into my eyes

Re: u-boot: signature check for u-boot scripts

2023-01-10 Thread Heiko Schocher
Hello Sean, Thanks for your answer! On 10.01.23 17:27, Sean Anderson wrote: > On 1/10/23 08:18, Heiko Schocher wrote: >> Hello Simon, [...] >> While writting this email ... in [3] the line >> >> require = "conf" >> >> poped into my eyes and in fit_image_verify_required_sigs() there is >> c

Re: u-boot: signature check for u-boot scripts

2023-01-10 Thread Sean Anderson
On 1/10/23 08:18, Heiko Schocher wrote: > Hello Simon, > > I just digging into the topic "check a signed U-Boot script > before sourcing it" ... > > Therefore I have packed the U-Boot script into a FIT image > and enabled FIT_SIGNATURE. In cmd/source.c > > 136 /* verify integrity

u-boot: signature check for u-boot scripts

2023-01-10 Thread Heiko Schocher
Hello Simon, I just digging into the topic "check a signed U-Boot script before sourcing it" ... Therefore I have packed the U-Boot script into a FIT image and enabled FIT_SIGNATURE. In cmd/source.c 136 /* verify integrity */ 137 if (verify) { 138