| commit | 23d14898da45547d5d6279e3e44e1b9850d2b32d | [log] [tgz] |
|---|---|---|
| author | George McCollister <george.mccollister@gmail.com> | Fri Jan 06 13:14:17 2017 -0600 |
| committer | Tom Rini <trini@konsulko.com> | Sat Jan 14 16:47:13 2017 -0500 |
| tree | b34c5ae6c177400ed6ed5524266cd2912138a292 | |
| parent | dac15527ce9907dfdccc8eed55a18aa9112c4042 [diff] |
mkimage: Add support for signing with pkcs11 Add support for signing with the pkcs11 engine. This allows FIT images to be signed with keys securely stored on a smartcard, hardware security module, etc without exposing the keys. Support for other engines can be added in the future by modifying rsa_engine_get_pub_key() and rsa_engine_get_priv_key() to construct correct key_id strings. Signed-off-by: George McCollister <george.mccollister@gmail.com>