Binman signing

Hi there,

First of all, I would like to thank you for the tool, I like it a lot.

I've been trying to sign uboot by placing signature section into configurations section. Something like:

{ algo = "sha256,rsa2048"; key-name-hint = "dev"; sign-images = "fdt", "loadables"; }

But I can't find how to sign the second stage uboot, and integrate the public key into uboot spl device tree with binman. Prior to binman I used mkimage to do that, as follows:

mkimage -f uboot.its -K u-boot.dtb -k ./keys -r image.fit

Could not find it in the documentation, I only saw pre-load, but I am not sure that this is what I am looking for.

Would appreciate if you could give some hint on how this could be done.

Thank you for your help

Cheers, Andy