Code signing tool for i.MX8 3.3.1

[jeslinpauljoseph]

we are using code signing tool 3.3.1, on ubuntu 20.04 and it was working fine.

Now we upgraded the HOST PC ubuntu to 24.04 and use the same code signing tool 3.3.1, but with ubuntu 24.04 we are getting the crash in CST. Is CST support ubuntu 24.04? or do we need to do anything to make it compatible to ubuntu 24.04?

[jeslinpauljoseph]

Hi @Harvey021 

Thanks for the Immediate response.

We will try try with new CST tool 4.0.1. In mean time can you clarify below queries,

1. In 4.0.1 tool documentation mentioned  "A Linux distribution. CST is supported on Ubuntu versions from 18.04 to 22.04. However, it may also work on other Linux distributions." Is it tested and verified in ubuntu24.04? Or we need to experiment and confirm?

2. We already have devices in market which uses the old CST tool for signing the image etc. Now if we upgraded to new CST tool and created a signed image with same keys etc, hope there won't be any issue in secure boot sign verification. Can  you confirm this?

Thanks and regards,

Jeslin Paul

[Harvey021]

Hi @jeslinpauljoseph 

1. I think that 4.0.1 is not fully tested for 24.04.

2. I did use the same key with different versions of CST to sign.

Hi @marouene_boubakri 

Could you please help and confirm from Jeslin Paul?

Regards

Harvey

[marouene_boubakri]

Hi @Harvey021,

Thanks for reaching out. CST version 3.3.1 was released several years ago and was likely built against older system libraries, including libc.

Since Ubuntu 24.04 introduces newer versions of these libraries, it's quite possible that the crash you're seeing is due to incompatibilities at the binary level.

If you want to continue using CST 3.3.1 on Ubuntu 24.04, we recommend recompiling it from source on the new system.

This will ensure it's properly linked against the updated libraries and should resolve the crash issue.

Best
Maro

[Harvey021]

Thank you @marouene_boubakri  

About the keys generated by old version of CST, shouldn't be an issue for newer CST as long as the keys are valid?

@jeslinpauljoseph 

Best regards

Harvey

[marouene_boubakri]

Yes, there should be no issue.

Br
Maro

[Harvey021]

The version was released some years ago and mostly not tested on 24.04. Would suggest not to use the Host newer than 22.04, or to use the newer CST tool - 4.0.1, which can be downloaded from IMX_CST_TOOL_NEW 

Regards

Harvey