On Wed, May 27, 2026 at 8:58 AM Mathieu Dubois-Briand <
[email protected]> wrote:

> On Tue May 26, 2026 at 11:40 AM CEST, Marta Rybczynska via
> lists.openembedded.org wrote:
> > From: Marta Rybczynska <[email protected]>
> >
> > The SPL FIT signing path was signing individual images, but not the
> configuration.
> >
> > Introduce signing of configuration with images under a separate option
> SPL_SIGN_CONF,
> > enabled by default. It implies changes in the DTB content.
> >
> > The old behaviour is possible with SPL_SIGN_INDIVIDUAL, but should be
> removed in
> > a subsequent patch.
> >
> > Signed-off-by: Marta Rybczynska <[email protected]>
>
> Hi Marta,
>
> Thanks for the new version. I believe we still have two selftest
> failures because of it:
>
> 2026-05-26 16:34:33,908 - oe-selftest - INFO -
> fitimage.UBootFitImageTests.test_sign_standalone_uboot_atf_tee_fit_image
> (subunit.RemotedTestCase)
> 2026-05-26 16:34:33,909 - oe-selftest - INFO -  ... FAIL
> ...
> ERROR: u-boot-1_2026.04-r0 do_uboot_assemble_fitimage: Execution of
> '/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/build-st-2700759/tmp/work/qemuarm-poky-linux-gnueabi/u-boot/2026.04/temp/run.do_uboot_assemble_fitimage.3572291'
> failed with exit code 1
> ...
> | Signature written to 'u-boot-fitImage', node
> '/configurations/conf/signature'
> | Public key written to 'spl/u-boot-spl.dtb', node
> '/signature/key-spl-oe-selftest'
> | Signature check bad (error 1)
> | Verifying Hash Integrity for node 'conf'...
> sha256,rsa2048:spl-oe-selftest+
> | sha256,rsa2048:spl-oe-selftest-
> |  error!
> | Verification failed for '(null)' hash node in 'conf' config node
> | Failed to verify required signature 'key-spl-cascaded-oe-selftest'
> | WARNING: exit code 1 from a shell command.
> ...
> 2026-05-26 16:35:33,469 - oe-selftest - INFO -
> fitimage.UBootFitImageTests.test_sign_standalone_uboot_fit_image
> (subunit.RemotedTestCase)
> 2026-05-26 16:35:33,469 - oe-selftest - INFO -  ... FAIL
> ...
> ERROR: u-boot-1_2026.04-r0 do_uboot_assemble_fitimage: Execution of
> '/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/build-st-2700759/tmp/work/qemuarm-poky-linux-gnueabi/u-boot/2026.04/temp/run.do_uboot_assemble_fitimage.3689059'
> failed with exit code 1
> ...
> | Signature written to 'u-boot-fitImage', node
> '/configurations/conf/signature'
> | Public key written to 'spl/u-boot-spl.dtb', node
> '/signature/key-spl-oe-selftest'
> | Signature check bad (error 1)
> | Verifying Hash Integrity for node 'conf'...
> sha256,rsa2048:spl-oe-selftest+
> | sha256,rsa2048:spl-oe-selftest-
> |  error!
> | Verification failed for '(null)' hash node in 'conf' config node
> | Failed to verify required signature 'key-spl-cascaded-oe-selftest'
> | WARNING: exit code 1 from a shell command.
>
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/23/builds/3999
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/35/builds/3905
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/48/builds/3770
>
> Can you have a look at the issue?


Looking into it. Those tests work in my setup. To be continued.

Regards,
Marta
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#237634): 
https://lists.openembedded.org/g/openembedded-core/message/237634
Mute This Topic: https://lists.openembedded.org/mt/119493479/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to