[U-Boot] Verified Boot: Mix and match attack

n the embedded fdt as required for configurations, bootm does only boot configurations and no subimages directly... Regards Johann Neuhauser ___ U-Boot mailing list U-Boot@lists.denx.de https://lists.denx.de/listinfo/u-boot

[U-Boot] U-Boot: Verified Boot: signed configuration and mix and match attack

is the expected behavior? I thought if I had set the public key in in the embedded fdt as required for configurations, bootm does only boot signed configurations and no subimages directly... Best regards Johann Neuhauser DH electronics GmbH

Re: [U-Boot] Converting to SPL_OF_CONTROL

Hello Alex, have you tried to set "u-boot,spl-boot-order" in choosen node? Take a look into: doc/device-tree-bindings/chosen.txt Best regards Johann Neuhauser -Ursprüngliche Nachricht- Von: U-Boot [mailto:u-boot-boun...@lists.denx.de] Im Auftrag von Alex Kiernan Gesendet: M

Re: [U-Boot] [PATCH] SPL: fit signature: don´t strip off signature node and sub nodes from dtb

Patch isn´t needed anymore... Now I add simply the property "u-boot,dm-spl" to my key node in the signature node with fdtput. Thanks. Best regards Johann Neuhauser ___ U-Boot mailing list U-Boot@lists.denx.de https://lists.denx.de/listinfo/u-boot

[U-Boot] [PATCH] SPL: fit signature: don´t strip off signature node and sub nodes from dtb

ing except the mentioned nodes... Probably there is another way to embed a precompiled dtb in the SPL image? The attached patch adds the needed signature and sub nodes for verified boot to cmd_fdtgrep in scripts/Makefile.lib. Best regards Johann Neuhauser DH electronics GmbH 0001-SPL-fit-sig

Re: [U-Boot] U-Boot: Verified Boot: signed configuration and mix and match attack

nly bad thing is here that the source command does only have support for fit sub images and I have to sign the config and the image of my system image if I had a required certificate for images and configs. Probably this behavior should be mentioned in the doc. Many thanks for the clarification. Best regards Johann Neuhauser ___ U-Boot mailing list U-Boot@lists.denx.de https://lists.denx.de/listinfo/u-boot

Re: [U-Boot] Can't boot my FIT image: 'Could not find configuration node'

Dear Grant, I see there is a typo in your kernel node name. In the image section you wrote kerne-0 and in the config section you wrote kernel = "kernel-0"; Probably this is the issue that no config and kernel image is found. Regards, Johann Neuhauser > -Ursprüngli

RE: STM32MP: Can't lock PHK fuses through U-Boot cmd's "stm32key" or "fuse"

> -Original Message- > From: Patrick DELAUNAY [mailto:patrick.delau...@foss.st.com] > Sent: Monday, February 14, 2022 4:21 PM > > Hi, > > > On 2/14/22 12:14, Patrick DELAUNAY wrote: > > Hi Johann, > > Hello Patrick, > > On 2/11/22 15:02,

RE: [PATCH 1/2] stm32mp: bsec: add permanent lock write support

; This patch avoid issue with stm32key command and fuse command > on basic boot for this missing feature of U-Boot BSEC driver. > > Reported-by: Johann Neuhauser > Signed-off-by: Patrick Delaunay > --- > > arch/arm/mach-stm32mp/bsec.c | 90 ++

Compile error with SPL_FIT_FULL_CHECK and SPL_LOAD_FIT_FULL enabled

a clue why the needed function is not compiled in libfdt for the spl build? Many thanks in advance. Best regards, Johann Neuhauser DH electronics GmbH | Am Anger 8 | 83346 Bergen | Germany | Fon: +49 8662 4882 0 Board of Management: Stefan Daxenberger, Helmut Henschke | HRB Traunstein 9602

RE: Compile error with SPL_FIT_FULL_CHECK and SPL_LOAD_FIT_FULL enabled

> -Original Message- > From: Simon Glass [mailto:s...@chromium.org] > Sent: Tuesday, February 8, 2022 6:13 PM > > Hi Johann, > Hi Simon, thanks for your fast answer. > On Tue, 8 Feb 2022 at 08:44, Johann Neuhauser > wrote: > > > > Dear developers an

STM32MP: Can't lock PHK fuses through U-Boot cmd's "stm32key" or "fuse"

en't closed the device already nor have I locked/fused any other fuses. I've implemented a authentication status output inside "arch/arm/mach-stm32mp/spl.c" like in TF-A "plat/st/stm32mp1/bl2_plat_setup.c", which I'll probably mainline into U-Boot. I'm using a STM32MP157C on a

RE: [PATCH] arm: dts: stm32mp1: Drop fastboot and stm32prog trigger gpios on DHCOM

> -Original Message- > From: Marek Vasut [mailto:ma...@denx.de] > Sent: Thursday, June 30, 2022 5:20 PM > > On 6/30/22 16:19, Johann Neuhauser wrote: > > PA13 and PA14 are used for USB power control and can't be used > > to enforce fastboot or stm32pro

[PATCH] arm: dts: stm32mp1: Drop fastboot and stm32prog trigger gpios on DHCOM

the wrong trigger gpios definitions. Signed-off-by: Johann Neuhauser --- arch/arm/dts/stm32mp15xx-dhcom-u-boot.dtsi | 2 -- 1 file changed, 2 deletions(-) diff --git a/arch/arm/dts/stm32mp15xx-dhcom-u-boot.dtsi b/arch/arm/dts/stm32mp15xx-dhcom-u-boot.dtsi index d73967ac1b5d..ee747a52bb7c