commit 38cfcc393d9eea397fa38bd0d65437bdbadb6f99
author Andrew Jeffery <andrew@aj.id.au> Wed Aug 04 12:51:56 2021 +0930
committer Joel Stanley <joel@jms.id.au> Tue Aug 17 02:21:02 2021 +0000
tree 2b6f3df32e45d08f75e2a8345ed7649d870c8c01
parent 82f3daca8f56e8451e1bd94d3ba5228d0456012c

meta-aspeed: u-boot-aspeed-sdk: Use provided signing key by default

Allow configurations to override the SPL signing key if necessary, but
provide a default in case they don't. The provided key is intended a
low-security key.

Change-Id: I756271970b0a55409e40dbd06f1245ada6a3cb73
Signed-off-by: Andrew Jeffery <andrew@aj.id.au>

meta-aspeed/recipes-bsp/u-boot/u-boot-aspeed-sdk_2019.04.bb

diff --git a/meta-aspeed/recipes-bsp/u-boot/u-boot-aspeed-sdk_2019.04.bb b/meta-aspeed/recipes-bsp/u-boot/u-boot-aspeed-sdk_2019.04.bb
index 5646827..45505b0 100644
--- a/meta-aspeed/recipes-bsp/u-boot/u-boot-aspeed-sdk_2019.04.bb
+++ b/meta-aspeed/recipes-bsp/u-boot/u-boot-aspeed-sdk_2019.04.bb
@@ -14,6 +14,10 @@
             file://rsa_pub_oem_dss_key.pem;sha256sum=40132a694a10af2d1b094b1cb5adab4d6b4db2a35e02d848b2b6a85e60738264 \
            "
 
+SOCSEC_SIGN_KEY ?= "${WORKDIR}/rsa_oem_dss_key.pem"
+SOCSEC_SIGN_ALGO ?= "RSA4096_SHA512"
+SOCSEC_SIGN_EXTRA_OPTS ?= "--stack_intersects_verification_region=false"
+
 UBOOT_ENV_SIZE:df-phosphor-mmc = "0x10000"
 UBOOT_ENV:df-phosphor-mmc = "u-boot-env"
 UBOOT_ENV_SUFFIX:df-phosphor-mmc = "bin"