23 lines
920 B
Plaintext
23 lines
920 B
Plaintext
|
FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:"
|
||
|
|
FILESEXTRAPATHS:prepend := "${THISDIR}/files:"
|
||
|
|
|
||
|
|
SRC_URI:append:p10bmc = " file://ibm.json file://ips.json file://keys/"
|
||
|
|
SRC_URI:append:p10bmc = " file://p10bmc.cfg"
|
||
|
|
|
||
|
|
OTPTOOL_CONFIGS:p10bmc = "${WORKDIR}/ibm.json ${WORKDIR}/ips.json"
|
||
|
|
OTPTOOL_KEY_DIR:p10bmc = "${WORKDIR}/keys/"
|
||
|
|
|
||
|
|
# !!! Do not copy p10bmc's use of little-endian key ordering !!!
|
||
|
|
#
|
||
|
|
# The prefered order for production silicon is big-endian. Little-endian is necessary for p10bmc
|
||
|
|
# platforms due to development history involving pre-production AST2600 silicon. More discussion
|
||
|
|
# here:
|
||
|
|
#
|
||
|
|
# https://gerrit.openbmc-project.xyz/c/openbmc/openbmc/+/50716
|
||
|
|
SOCSEC_SIGN_EXTRA_OPTS = "--rsa_key_order=little"
|
||
|
|
|
||
|
|
do_deploy:prepend:p10bmc() {
|
||
|
|
# otptool needs access to the public and private socsec signing keys in the keys/ directory
|
||
|
|
openssl rsa -in ${SOCSEC_SIGN_KEY} -pubout > ${WORKDIR}/keys/rsa_pub_oem_dss_key.pem
|
||
|
|
}
|