smallsolar/u-boot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

mkimage: ecdsa: password for signing from environment

Browse Source 
Use a variable (MKIMAGE_SIGN_PASSWORD) like already done for RSA to
allow the signing process to run in batch.

Signed-off-by: Stefano Babic <sbabic@denx.de>
This commit is contained in:
Stefano Babic
2023-05-25 10:18:05 +02:00
committed by Tom Rini
parent 5f024d10bb
commit 50195a2346
1 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
lib/ecdsa/ecdsa-libcrypto.c
View File

@@ -111,16 +111,30 @@ static size_t ecdsa_key_size_bytes(const EC_KEY *key)
return EC_GROUP_order_bits(group) / 8;
}
static int default_password(char *buf, int size, int rwflag, void *u)
{
strncpy(buf, (char *)u, size);
buf[size - 1] = '\0';
return strlen(buf);
}
static int read_key(struct signer *ctx, const char *key_name)
{
FILE *f = fopen(key_name, "r");
const char *key_pass;
if (!f) {
fprintf(stderr, "Can not get key file '%s'\n", key_name);
return -ENOENT;
}
ctx->evp_key = PEM_read_PrivateKey(f, NULL, NULL, NULL);
key_pass = getenv("MKIMAGE_SIGN_PASSWORD");
if (key_pass) {
ctx->evp_key = PEM_read_PrivateKey(f, NULL, default_password, (void *)key_pass);
} else {
ctx->evp_key = PEM_read_PrivateKey(f, NULL, NULL, NULL);
}
fclose(f);
if (!ctx->evp_key) {
fprintf(stderr, "Can not read key from '%s'\n", key_name);