From: Jonas Juffinger <[email protected]> When configuration signing is enabled, mkimage does not fill the hash node even if it present. This causes the verification to fail with a "Bad Data Hash' error because the hash exists but it empty.
This patch adds a check to only add the hash node if signing is not enabled. The example FIT from the official documentation also shows the configuration field with only the signature, without the hash field: https://docs.u-boot.org/en/latest/usage/fit/signature.html#signed-configurations Signed-off-by: Jonas Juffinger <[email protected]> --- meta/lib/oe/fitimage.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/lib/oe/fitimage.py b/meta/lib/oe/fitimage.py index d4dacdd508..142a5d60f7 100644 --- a/meta/lib/oe/fitimage.py +++ b/meta/lib/oe/fitimage.py @@ -485,7 +485,7 @@ class ItsNodeRootKernel(ItsNode): f"{default_flag} {', '.join(conf_desc)}", opt_props=opt_props ) - if self._hash_algo: + if self._hash_algo and not self._sign_enable: ItsNodeHash( "hash-1", conf_node, --- base-commit: 6f7a806ece411ab32e4b1c08a0299400bdf3b588 change-id: 20260819-bugfix-dont-add-hash-node-to-signed-fit-images-12ab0c9271ce Best regards, -- Jonas Juffinger <[email protected]>
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#243719): https://lists.openembedded.org/g/openembedded-core/message/243719 Mute This Topic: https://lists.openembedded.org/mt/120826798/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
