Tool/software:
Hello,
I have been trouble with generating a signed u-boot fitimage and verifying it by the tispl for several weeks now.
Here is my actual configuration with:
U-boot bbappend
UBOOT_FITIMAGE_ENABLE = "1"
SPL_SIGN_ENABLE = "1"
UBOOT_FIT_GENERATE_KEYS = "0"
I also activated those options in the defconfig
+CONFIG_SPL_OF_SEPARATE=y
+CONFIG_SPL_FIT_SIGNATURE=y
+CONFIG_SPL_FIT_FULL_CHECK=y
+CONFIG_SPL_RSA=y
+CONFIG_SPL_FIT_RSASSA_PSS=y
+CONFIG_SPL_PAYLOAD="u-boot-nodtb.bin"
+# CONFIG_SPL_MULTI_DTB_FIT is not set
+# CONFIG_SPL_MULTI_DTB_FIT_NO_COMPRESSION is not set
But I have some problems with mkimage creating the u-boot fitimage, I dont understand well how to give him the right device tree, I didnt find any documentation on the variables for this
And if I try to "bypass" that with copying my u-boot dtb at the place binman expects it to be my tispl is broken, going from 1,2Mo to 300Ko and having this error:
U-Boot SPL 2024.04-ti-g29d0c23d67ee (Nov 29 2024 - 11:41:54 +0000)
SYSFW ABI: 4.0 (firmware rev 0x000a '10.1.8--v10.01.08 (Fiery Fox)')
SPL initial stack usage: 13392 bytes
Trying to boot from MMC1
mmc_load_image_raw_sector: mmc block read error
Partition 1 invalid on device 0
spl_register_fat_device: fat register err - -1
spl_load_image_fat: error reading image tispl.bin, err - -1
SPL: failed to boot from all boot devices
### ERROR ### Please RESET the board ###
If i get the tispl.fit that is generated in build, instead I got this
U-Boot SPL 2024.04-ti-g29d0c23d67ee (Nov 29 2024 - 11:41:54 +0000)
SYSFW ABI: 4.0 (firmware rev 0x000a '10.1.8--v10.01.08 (Fiery Fox)')
SPL initial stack usage: 13392 bytes
Trying to boot from MMC1
Authentication passed
Authentication passed
Authentication passed
Authentication passed
Authentication passed
Starting ATF on ARM64 core...
NOTICE: BL31: v2.11.0(release):v2.11.0-906-g58b25570c9-dirty
NOTICE: BL31: Built : 04:20:32, Nov 1 2024
U-Boot SPL 2024.04-ti-g29d0c23d67ee (Nov 29 2024 - 11:41:54 +0000)
SYSFW ABI: 4.0 (firmware rev 0x000a '10.1.8--v10.01.08 (Fiery Fox)')
SPL initial stack usage: 1904 bytes
i2c_write: error waiting for data ACK (status=0x116)
pca953x gpio@22: Error reading output register
Error (-2): cannot determine file size
Trying to boot from MMC1
## Checking hash(es) for config conf ... OK
## Checking hash(es) for Image uboot ... sha256,rsa2048:spl-key- OK
Warning: Did not detect image signing certificate. Skipping authentication to prevent boot failure. This will fail on Security Enforcing(HS-SE) devices
If you could help me 1. To understand how to proper create an U-boot fitimage and 2. How to sign and verify it with the TISPL, it would be amazing
Best Regards,
Mathys MICHEL
