blob: 0e77397c807c18e85faa9d7260370c25a94ec0b7 [file] [log] [blame]
Lionel Debieve13a668d2022-10-05 16:47:03 +02001/*
2 * Copyright (c) 2015-2022, ARM Limited and Contributors. All rights reserved.
3 *
4 * SPDX-License-Identifier: BSD-3-Clause
5 */
6
7#include "tbbr/tbb_ext.h"
8#include "tbbr/tbb_key.h"
9
10#include "tbbr/stm32mp1_tbb_cert.h"
11
12/*
13 * Certificates used in the chain of trust
14 *
15 * The order of the certificates must follow the enumeration specified in
16 * stm32mp1_tbb_cert.h. All certificates are self-signed, so the issuer certificate
17 * field points to itself.
18 */
19static cert_t stm32mp1_tbb_certs[] = {
20 [0] = {
21 .id = STM32MP_CONFIG_CERT,
22 .opt = "stm32mp-cfg-cert",
23 .help_msg = "STM32MP Config Certificate (output file)",
24 .fn = NULL,
25 .cn = "STM32MP config FW Certificate",
26 .key = ROT_KEY,
27 .issuer = STM32MP_CONFIG_CERT,
28 .ext = {
29 TRUSTED_FW_NVCOUNTER_EXT,
30 HW_CONFIG_HASH_EXT,
31 FW_CONFIG_HASH_EXT
32 },
33 .num_ext = 3
34 },
35};
36
37PLAT_REGISTER_COT(stm32mp1_tbb_certs);