Hi Sascha, thank you for your response and the information about the key handling for the FIT image. i will be try it. Best regards Maik Am 12.11.2019 um 12:51 schrieb Sascha Hauer: > Hi Maik, > > On Wed, Aug 21, 2019 at 04:21:44PM +0200, Maik Otto wrote: >> the habv4-imx6-gencsf.h is necessary in the board flash header to build >> a signed barebox > Applied now. Please note that in the meantime it is no longer necessary > to put the public key for the FIT image into the device tree source > file. We can now specify the path to the key (or alternatively, a > PKCS#11 URI) in Kconfig using the CONFIG_CRYPTO_RSA_KEY option: > > 9341918ba8 fit-image: Use compiled-in keys > b39100bcea rsa: Allow to directly compile in rsa public keys > > What I missed to mention explicitly is that CONFIG_CRYPTO_RSA_KEY can > be specified as "__ENV__FOOBAR". When done like this the path (or > PKCS#11 URI) is taken from the environment variable FOOBAR. This is > done to help build systems which then no longer have to patch the > CONFIG_CRYPTO_RSA_KEY option in the barebox config file. > > You might want to give it a try, it could simplify your workflow with > the keys. > > Sascha > _______________________________________________ barebox mailing list barebox@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/barebox
