On 2026-10-28T10:31:01+11:00, Ayoub Zaki <[email protected]> wrote:
> lib: rsa/ecdsa: Preserve FIT signing key file-open errors
>
> RSA and ECDSA report every key file-open failure as -ENOENT.
> fit_image_process_sig() and fit_config_process_sig() treat -ENOENT as
> a missing key and return success. An unreadable key can therefore leave
> an image unsigned even though mkimage succeeds.
>
> Return the actual errno so file-open errors make mkimage fail.
> Include the error description in the ECDSA diagnostic to match RSA.
>
> Signed-off-by: Ayoub Zaki <[email protected]>
>
>  lib/ecdsa/ecdsa-libcrypto.c | 7 +++++--
>  lib/rsa/rsa-sign.c          | 6 ++++--
>  2 files changed, 9 insertions(+), 4 deletions(-)

Reviewed-by: Simon Glass <[email protected]>

Reply via email to