u-boot rejects mc_lx2160a_10.37.0.itb because of hash@1 name

[rogermo]

When I enable u-boot's CONFIG_FIT_SIGNATURE, it rejects mc_lx2160a_10.37.0.itb because of the hash@1 name.

Specifically,

parse_mc_firmware_fit_image() is printing "fsl-mc: ERR: Bad firmware image (bad FIT header)"

after running fit_check_format() -> fdt_check_no_at() -> -EADDRNOTAVAIL when finding "hash@1".

I tried mc_lx2160a_10.38.0.itb too but got the same results.

If I disable u-boot's CONFIG_FIT_SIGNATURE then it all works, but that's not a good solution.

Can you please supply the mc firmware without a '@'?

[LFGP]

dear @rogermo unfortunately we can't provide you the mc firmware.

You need to generate the appropriate keys in order to ensure a trustworthy software be executed in the device.

Please review the chapter of "Security" in the LSDK UG or in the LLDP UG.

" Secure boot image validation is done using respective headers for each of the images"