HI ,
I am using marvell armada 388 clearfog pro device. I am using fitimage to upgrade my device. To make the device bootup secure I want to sign the fitimage and verify the same in u-boot. 1. However I am observing that the mkimage is unable to assign sign value to my fit image. 2. One more issue I am facing that is when I am enabling the CONFIG_FIT and FIT_SIGNATURE, the mkimage is throughing error like below
*"mkimage -f fitimage-temp.its -k keys fitimage-kernel-rfs-dtb.itbUnsupported signature algorithm (sha1,rs2048) for 'signature@1' signature node in 'kernel@1' image nodemkimage Can't add hashes to FIT blob"*
Can someone help me out and uide me what I am doing wrong?
Below are the outputs *mkimage -F -k keys bkp-fitimage-initramfs-script.bin * FIT description: U-Boot fitImage for Aprisa NEXT/4.14.54+gitAUTOINC+7c0df4bf46/clearfog Created: Tue Jul 16 12:25:27 2019 Image 0 (kernel@1) Description: Linux kernel Created: Tue Jul 16 12:25:27 2019 Type: Kernel Image Compression: uncompressed Data Size: 4906704 Bytes = 4791.70 KiB = 4.68 MiB Architecture: ARM OS: Linux Load Address: 0x01314c40 Entry Point: 0x01314c40 Hash algo: crc32 Hash value: 8aeccf3a Hash algo: sha1 Hash value: b8fafa028a78428a90304ab913877d2d0adbfd88
* Sign algo: sha1,rs2048:my_key Sign value: unavailable* Timestamp: unavailable Image 1 (fdt@armada-388-clearfog.dtb) Description: Flattened Device Tree blob Created: Tue Jul 16 12:25:27 2019 Type: Flat Device Tree Compression: uncompressed Data Size: 18373 Bytes = 17.94 KiB = 0.02 MiB Architecture: ARM Hash algo: crc32 Hash value: dbe5de9d Hash algo: sha1 Hash value: c1b29ef3c908ecf4c9e800f573a7c33184954b4f * Sign algo: sha1,rs2048:my_key* * Sign value: unavailable* Timestamp: unavailable