Currently we include MBEDTLS_CONFIG_FILE directly and if a custom config file is used it will included. However from mbedtls-3.x onwards it discourages usage of MBEDTLS_CONFIG_FILE include directly, so to resolve this and keep 2.28 compatibility include version.h which would include the custom config file if present and also would expose us with mbedtls-major-version number which could be used for selecting features and functions for mbedtls 2.28 or 3.3 Change-Id: I029992311be2a38b588ebbb350875b03ea29acdb Signed-off-by: Govindraj Raja <govindraj.raja@arm.com>
SAVE_KEYS is set to '0' by default, causing cert_create to show the 'Key filename not specified' message on each run even though this is perfectly normal. Show the message only in the VERBOSE log level. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Change-Id: I472cdec2670055ab0edd99d172f79d01ad575972
When FIP is programmed in a disk partition, fiptool cannot be used directly; this forces the user to temporarily copy the partition to a file, apply fiptool and copy back the file. This is caused by fstat() that returns zero file size on a block special file, thus making fiptool commands info, update, unpack and remove to exit. For either Linux host or Linux target, recover the partition size with ioctl() and use it as FIP file size. E.g.: fiptool info /dev/disk/by-partlabel/fip-a fiptool info /dev/mtdblock4 While there, rework two identical error log messages to provide more details about the failure and update the date in copyright. Signed-off-by: Antonio Borneo <antonio.borneo@foss.st.com> Change-Id: I7cab60e577422d94c24ba7e39458f58bcebc2336
* changes: fix(layerscape): unlock write access SMMU_CBn_ACTLR fix(nxp-ddr): add checking return value feat(lx2): enable OCRAM ECC fix(nxp-tools): fix coverity issue fix(nxp-ddr): fix coverity issue fix(nxp-ddr): fix underrun coverity issue fix(nxp-drivers): fix sd secure boot failure feat(lx2): support more variants fix(lx2): init global data before using it fix(ls1046a): 4 keys secureboot failure resolved fix(nxp-crypto): fix secure boot assert inclusion fix(nxp-crypto): fix coverity issue fix(nxp-drivers): fix fspi coverity issue fix(nxp-drivers): fix tzc380 memory regions config fix(layerscape): fix nv_storage assert checking fix(nxp-ddr): apply Max CDD values for warm boot fix(nxp-ddr): use CDDWW for write to read delay fix(layerscape): fix errata a008850
Check the value is not NULL. Signed-off-by: Jiafei Pan <Jiafei.Pan@nxp.com> Change-Id: If753e9875153a8e31498addf89202c953abf64ef
In the generated sp_gen.mk, add a dependency to the image described in the sp_layout.json file to make sure that the pkg file is re-generated if the SP image is updated. Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org> Change-Id: Id936f907d6baa6b0627c4bb9608323e5157c7a9b
Change-Id: I1d99ea46ad527993ee786c34a67f94d74470f960 Signed-off-by: Lauren Wehrmeister <lauren.wehrmeister@arm.com>
Updated cert_tool to be able to select brainpool P256r/t1 or NIST prim256v1 curve for certificates signature. Change-Id: I6e800144697069ea83660053b8ba6e21c229243a Signed-off-by: Nicolas Toromanoff <nicolas.toromanoff@st.com> Signed-off-by: Lionel Debieve <lionel.debieve@foss.st.com>
When updated to work with OpenSSL 3.0, the host tools lost their compatibility with previous versions (1.x) of OpenSSL. This is mainly due to the fact that 1.x APIs became deprecated in 3.0 and therefore their use cause compiling errors. In addition, updating for a newer version of OpenSSL meant improving the stability against security threats. However, although version 1.1.1 is now deprecated, it still receives security updates, so it would not imply major security issues to keep compatibility with it too. This patch adds backwards compatibility with OpenSSL 1.x versions by adding back 1.x API code. It defines a macro USING_OPENSSL3, which will select the appropriate OpenSSL API version depending on the OpenSSL library path chosen (which is determined by the already-existing OPENSSL_DIR variable). In addition, cleanup items were packed in functions and moved to the proper modules in order to make the code more maintainable and legible. Signed-off-by: Juan Pablo Conde <juanpablo.conde@arm.com> Change-Id: I8deceb5e419edc73277792861882404790ccd33c