The dtb part of this patch was rejected a few years ago[1][2]
It seems to have crept in under another name.
With signatures in U-Boot itself it is difficult to insert signatures
after U-Boot itself is built. The devicetree approach is more flexible,
since it can be updates by Binman or other build processes.
This reverts commit 261b422aed.
[1] https://patchwork.ozlabs.org/project/uboot/patch/20210802014621.2280899-1-sjg@chromium.org/
[2] https://lore.kernel.org/u-boot/CAPnjgZ1UiJVHxe2qD3GrYO2LBrXWazXsqP_HYUabOXjKRiPZDA@mail.gmail.com/
Signed-off-by: Simon Glass <sjg@chromium.org>
12 lines
258 B
Plaintext
12 lines
258 B
Plaintext
// SPDX-License-Identifier: GPL-2.0+
|
|
/*
|
|
* Devicetree file with the public key EFI Signature List(ESL)
|
|
* node. This file is used to generate the dtsi file to be
|
|
* included into the DTB.
|
|
*/
|
|
/ {
|
|
signature {
|
|
capsule-key = /incbin/("ESL_BIN_FILE");
|
|
};
|
|
};
|