Syntax error while signing barebox

haGkiu — Tue, 17 Oct 2023 14:56:06 GMT

Hello,

I am activating the secure boot on imx6 to sign barebox boatloder.

I used cst tool to generate keys.

I created the csf file and when i run the command : ../linux64/bin/cst -o out.img -i csf_file.csf

I get :

error: line 15: syntax error
Undefined error

the csf script is :

[Header]
Version = 4.2
Hash Algorithm = sha256
Engine Configuration = 0
Certificate Format = X509
Signature Format = CMS
Engine = CAAM

[Install SRK]
# Index of the key location in the SRK table to be installed
File = "SRK_1_2_3_4_table.bin"
Source index = 0

[Install CSFK] # HAB4 example
File = "CSF1_1_sha256_4096_65537_v3_usr_crt.pem"

[Authenticate CSF] # HAB4 example

[Unlock]
Engine = CAAM
Features = RNG

[Install Key] # HAB4 example
Verification index = 0
Target index = 2
File = "IMG1_1_sha256_4096_65537_v3_usr_crt.pem"

[Authenticate Data]
Verification index = 2
Blocks = 0x27800400 0x400 0x10000 "image.img"

I don't know what is the syntax error since i followed the CST documentation to write the csf file.

Another question about the images i want to sign : I only have .img images and I don't if it's possible to sign them with the csf file.

Re: Syntax error while signing barebox

AldoG — Tue, 17 Oct 2023 19:01:17 GMT

Hello,

Unfortunately we do not support other bootloaders, we do support uboot so we cannot provide much help on this.

Saludos,
Aldo.