From c76831d189eae14558d5275b2db62354c07a79ef Mon Sep 17 00:00:00 2001 From: Lukas Funke <lukas.funke@weidmueller.com> Date: Tue, 18 Jul 2023 13:53:12 +0200 Subject: [PATCH] binman: doc: Add documentation for fdt_add_pubkey bintool Add documentation for btool which calls 'fdt_add_pubkey' Signed-off-by: Lukas Funke <lukas.funke@weidmueller.com> Reviewed-by: Simon Glass <sjg@chromium.org> --- tools/binman/bintools.rst | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/tools/binman/bintools.rst b/tools/binman/bintools.rst index dd2a22bd06..9d8f1619f2 100644 --- a/tools/binman/bintools.rst +++ b/tools/binman/bintools.rst @@ -194,3 +194,13 @@ Documentation is available via:: +Bintool: fdt_add_pubkey: Add public key to device tree +------------------------------------------------------ + +This bintool supports running `fdt_add_pubkey` in order to add a public +key coming from a certificate to a device-tree. + +Normally signing is done using `mkimage` in context of `binman sign`. However, +in this process the public key is not added to the stage before u-boot proper. +Using `fdt_add_pubkey` the key can be injected to the SPL independent of +`mkimage` -- 2.39.5