Hi Adrian,

Thanks for your reply.
I was not aware of a version from meta-oe, but that fits my needs.
You are right, it is strange that there are two variants.
On the other hand, oe-core does not have the signing class either and therefor 
must not be compatible.
Maybe one day meta-oe fitimage class inherits from kernel-fit-image class and 
adds the compatibility for signing class.
Your resigning idea looks doable, but I would prefer to not introduce a stub 
key.

Regards, Denis

-----Ursprüngliche Nachricht-----
Von: Freihofer, Adrian <[email protected]>
Gesendet: Donnerstag, 4. Dezember 2025 16:02
An: Denis OSTERLAND-HEIM <[email protected]>; 
[email protected]
Betreff: [EXT] Re: [EXT] [OE-core] [PATCH v7 11/20] kernel-fit-image.bbclass: 
add a new FIT image implementation

[EXTERNAL EMAIL]


Hi Denis

I'm not entirely sure which FIT image implementation you are using: the one 
from oe-core or the one from meta-openembedded. Since you are asking me 
personally, I assume it is the one from oe-core.

I suspect that the classes from meta-openembedded are not compatible with the 
FIT image implementation in oe-core. But I'm probably not the right person to 
answer this question, as I don't even understand why a second FIT image 
implementation was necessary instead of improving the one in oe-core. From my 
perspective, it would probably be better to extend the run_mkimage_sign 
function in oe-core with PKCS#11 support than to maintain a second FIT image 
implementation in meta-openembedded.

Another approach is to perform the signing within bitbake using a key from a 
file. Signing with a more secure PKCS#11 backend can be performed as a 
re-signing, which is done independently of bitbake as the final step in the 
release process.

Regards,
Adrian
Diehl Metering GmbH, Donaustrasse 120, 90451 Nuernberg
Sitz der Gesellschaft: Ansbach, Registergericht: Ansbach HRB 69
Geschaeftsfuehrer: Dr. Christof Bosbach (Sprecher), Dipl.-Dolm. Annette 
Geuther, Dipl.-Kfm. Reiner Edel, Jean-Claude Luttringer

Bitte denken Sie an die Umwelt, bevor Sie diese E-Mail drucken. Diese E-Mail 
kann vertrauliche Informationen enthalten. Sollten die in dieser E-Mail 
enthaltenen Informationen nicht für Sie bestimmt sein, informieren Sie bitte 
unverzueglich den Absender per E-Mail und loeschen Sie diese E-Mail in Ihrem 
System. Jede unberechtigte Form der Reproduktion, Bekanntgabe, Aenderung, 
Verteilung und/oder Publikation dieser E-Mail ist strengstens untersagt. 
Informationen zum Datenschutz finden Sie auf unserer 
Homepage<https://www.diehl.com/metering/de/impressum-und-rechtliche-hinweise/>.

Before printing, think about environmental responsibility.This message may 
contain confidential information. If you are not authorized to receive this 
information please advise the sender immediately by reply e-mail and delete 
this message without making any copies. Any form of unauthorized use, 
publication, reproduction, copying or disclosure of the e-mail is not 
permitted. Information about data protection can be found on our 
homepage<https://www.diehl.com/metering/en/data-protection/>.
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#227334): 
https://lists.openembedded.org/g/openembedded-core/message/227334
Mute This Topic: https://lists.openembedded.org/mt/113443931/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to