On Fri, 21 Apr 2023 at 06:32, Neha Malcom Francis n-francis@ti.com wrote:
The ti-secure entry contains certificate for binaries that will be loaded or booted by system firmware whereas the ti-secure-rom entry contains certificate for binaries that will be booted by ROM. Support for both these types of certificates is necessary for booting of K3 devices.
Signed-off-by: Neha Malcom Francis n-francis@ti.com
board/ti/keys/custMpk.pem | 51 ++++ board/ti/keys/ti-degenerate-key.pem | 10 + tools/binman/btool/openssl.py | 244 +++++++++++++++++ tools/binman/entries.rst | 65 +++++ tools/binman/etype/ti_secure.py | 82 ++++++ tools/binman/etype/ti_secure_rom.py | 250 ++++++++++++++++++ tools/binman/etype/x509_cert.py | 87 +++++- tools/binman/ftest.py | 52 ++++ tools/binman/test/279_ti_secure.dts | 17 ++ tools/binman/test/280_ti_secure_rom.dts | 17 ++ .../test/281_ti_secure_rom_combined.dts | 25 ++ .../test/282_ti_secure_rom_combined_a.dts | 24 ++ .../test/283_ti_secure_rom_combined_b.dts | 24 ++ .../test/284_ti_secure_rom_combined_c.dts | 21 ++ tools/binman/test/285_ti_secure_a.dts | 17 ++ tools/binman/test/286_ti_secure_b.dts | 18 ++ tools/binman/test/288_ti_secure_rom_a.dts | 19 ++ tools/binman/test/289_ti_secure_rom_b.dts | 18 ++ 18 files changed, 1033 insertions(+), 8 deletions(-) create mode 100644 board/ti/keys/custMpk.pem create mode 100644 board/ti/keys/ti-degenerate-key.pem create mode 100644 tools/binman/etype/ti_secure.py create mode 100644 tools/binman/etype/ti_secure_rom.py create mode 100644 tools/binman/test/279_ti_secure.dts create mode 100644 tools/binman/test/280_ti_secure_rom.dts create mode 100644 tools/binman/test/281_ti_secure_rom_combined.dts create mode 100644 tools/binman/test/282_ti_secure_rom_combined_a.dts create mode 100644 tools/binman/test/283_ti_secure_rom_combined_b.dts create mode 100644 tools/binman/test/284_ti_secure_rom_combined_c.dts create mode 100644 tools/binman/test/285_ti_secure_a.dts create mode 100644 tools/binman/test/286_ti_secure_b.dts create mode 100644 tools/binman/test/288_ti_secure_rom_a.dts create mode 100644 tools/binman/test/289_ti_secure_rom_b.dts
Reviewed-by: Simon Glass sjg@chromium.org
Same comment about warnings/errors