fit signing without access to private key
Hi. We want to sign fitImages but our company policies does not allow access to the private signing key from our build machines. Is there a way using e.g. mkimage to
1. Generate the hash of a fitImage configuration section? We will then request a signature for the hash from our enterprise PKI. 2. Incorporate the signature in the fitImage?
BR / Mikael
Hi Mikael,
On Fri, 6 Sept 2024 at 11:06, Mikael Pahmp mikael.pahmp@gmail.com wrote:
Hi. We want to sign fitImages but our company policies does not allow access to the private signing key from our build machines. Is there a way using e.g. mkimage to
- Generate the hash of a fitImage configuration section?
We will then request a signature for the hash from our enterprise PKI. 2. Incorporate the signature in the fitImage?
There is not, but it would be a useful feature. Let me know if you would like some pointers for how to implement this.
Regards, Simon
BR / Mikael
participants (2)
-
Mikael Pahmp -
Simon Glass