Re: [PATCH] binman: add CST backend selection for i.MX8M signing

[Marek Vasut]

On 2/13/26 6:53 PM, Simon Glass wrote:

Hello Simon,

@@ -161,8 +165,14 @@ class Entry_nxp_imx8mcst(Entry_mkimage):
          with open(cfg_fname, 'w') as cfgf:
              config.write(cfgf)

+        # SSL is the default backend, PKCS11 backend is optional
+        if self.backend == "pkcs11":
+            cst_backend = "pkcs11"
+        else:
+            cst_backend = "ssl"
+
          output_fname = 
tools.get_output_filename(f'nxp.csf-output-blob.{uniq}')
-        args = ['-i', cfg_fname, '-o', output_fname]
+        args = ['-i', cfg_fname, '-o', output_fname, '-b', cst_backend]
          if self.cst.run_cmd(*args) is not None:
              outdata = tools.read_file(output_fname)
              # fixme: 0x2000 should be CONFIG_CSF_SIZE
--
2.51.0

This should be documented somewhere, likely in the comment for this
entry type, so it ends up visible in the docs.

I will send a V2 with documentation.

Also, this code path will need a test, please.

How do you propose to test this ?