On 2026-07-10T12:36:12, Rasmus Villemoes <[email protected]> wrote: > k3-binman.dtsi: add empty distinguished_name_template > > With the previous commit, "binman: x509_cert: allow and parse > distinguished-name subnode", it is possible for downstream boards to > put more appropriate values in the req_distinguished_name section in > the certificate being generated than the hard-coded TI > values. However, that requires adding a distinguished-name section to > each and every ti-secure or ti-secure-rom binman node. > > In order to avoid lots of repetition and make it easier to just add > the information in one place, add an empty template-dist-name template > which we can inject in every such binman node. That makes no > difference for existing boards, but makes it possible for downstream > boards to simply do > > &distinguished_name_template { > distinguished-name { > C = 'DK'; > ... > }; > }; > > in their -u-boot.dtsi. > > Signed-off-by: Rasmus Villemoes <[email protected]> > > arch/arm/dts/k3-binman.dtsi | 10 ++++++++++ > 1 file changed, 10 insertions(+)
Reviewed-by: Simon Glass <[email protected]>
