Commit 2092322b31cc ("boot: Add fit_config_get_hash_list() to build
signed node list") removed printing the list of hashed nodes during
verification. Add it back to have a chance to compare the list when
debugging.

Signed-off-by: Ludwig Nussel <[email protected]>
---

 boot/image-fit-sig.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/boot/image-fit-sig.c b/boot/image-fit-sig.c
index f426ead13c0..e7a768b9add 100644
--- a/boot/image-fit-sig.c
+++ b/boot/image-fit-sig.c
@@ -476,6 +476,10 @@ static int fit_config_check_sig(const void *fit, int 
noffset, int conf_noffset,
                return -1;
        }
 
+       debug("Hash nodes (%d):\n", count);
+       for (int i = 0; i < count; ++i)
+               debug("   '%s'\n", node_inc[i]);
+
        /*
         * Each node can generate one region for each sub-node. Allow for
         * 7 sub-nodes (hash-1, signature-1, etc.) and some extra.
-- 
2.43.0

base-commit: ba7bf918dafcd093ad733b07ba490baeb20cf5da
branch: patch-signatures

Reply via email to