Hi Maik, On Wed, Aug 21, 2019 at 04:21:44PM +0200, Maik Otto wrote: > the habv4-imx6-gencsf.h is necessary in the board flash header to build > a signed barebox Applied now. Please note that in the meantime it is no longer necessary to put the public key for the FIT image into the device tree source file. We can now specify the path to the key (or alternatively, a PKCS#11 URI) in Kconfig using the CONFIG_CRYPTO_RSA_KEY option: 9341918ba8 fit-image: Use compiled-in keys b39100bcea rsa: Allow to directly compile in rsa public keys What I missed to mention explicitly is that CONFIG_CRYPTO_RSA_KEY can be specified as "__ENV__FOOBAR". When done like this the path (or PKCS#11 URI) is taken from the environment variable FOOBAR. This is done to help build systems which then no longer have to patch the CONFIG_CRYPTO_RSA_KEY option in the barebox config file. You might want to give it a try, it could simplify your workflow with the keys. Sascha -- Pengutronix e.K. | | Steuerwalder Str. 21 | http://www.pengutronix.de/ | 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 | Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 | _______________________________________________ barebox mailing list barebox@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/barebox
