Re: [PATCH v3] tools: fit: sign all config image references
Tom Rini <[email protected]>
| Newsgroups | org.u-boot-project.lists.u-boot |
|---|---|
| Message-ID | <[email protected]> |
On Mon, 10 Aug 2026 17:43:07 -0600, James Hilliard wrote:
> Target-side configuration verification builds the signed-region list from
> every image-reference property in the selected configuration. Host-side
> signing still uses either the signature node sign-images property or the
> legacy kernel/fdt/script default list.
>
> This lets mkimage generate configuration signatures which U-Boot cannot
> verify when the configuration references other image types, such as
> firmware, loadables or ramdisk entries. It also lets the host and target
> disagree when sign-images names only a subset of the configuration images.
>
> [...]
Applied to u-boot/next, thanks!
[1/1] tools: fit: sign all config image references
commit: f252d228be2b2d180737ad0a851f91749273cbd9
--
Tom