tools/fit_check_sign.c

   1 // SPDX-License-Identifier: GPL-2.0+
   2 /*
   3  * (C) Copyright 2014
   4  * DENX Software Engineering
   5  * Heiko Schocher <hs@denx.de>
   6  *
   7  * Based on:
   8  * (C) Copyright 2008 Semihalf
   9  *
  10  * (C) Copyright 2000-2004
  11  * DENX Software Engineering
  12  * Wolfgang Denk, wd@denx.de
  13  *
  14  * Updated-by: Prafulla Wadaskar <prafulla@marvell.com>
  15  *              FIT image specific code abstracted from mkimage.c
  16  *              some functions added to address abstraction
  17  *
  18  * All rights reserved.
  19  */
  20
  21 #include "mkimage.h"
  22 #include "fit_common.h"
  23 #include <image.h>
  24 #include <u-boot/crc.h>
  25
  26 void usage(char *cmdname)
  27 {
  28         fprintf(stderr, "Usage: %s -f fit file -k key file -c config name\n"
  29                          "          -f ==> set fit file which should be checked'\n"
  30                          "          -k ==> set key .dtb file which contains the key'\n"
  31                          "          -c ==> set the configuration name'\n",
  32                 cmdname);
  33         exit(EXIT_FAILURE);
  34 }
  35
  36 int main(int argc, char **argv)
  37 {
  38         int ffd = -1;
  39         int kfd = -1;
  40         struct stat fsbuf;
  41         struct stat ksbuf;
  42         void *fit_blob;
  43         char *fdtfile = NULL;
  44         char *keyfile = NULL;
  45         char *config_name = NULL;
  46         char cmdname[256];
  47         int ret;
  48         void *key_blob;
  49         int c;
  50
  51         strncpy(cmdname, *argv, sizeof(cmdname) - 1);
  52         cmdname[sizeof(cmdname) - 1] = '\0';
  53         while ((c = getopt(argc, argv, "f:k:c:")) != -1)
  54                 switch (c) {
  55                 case 'f':
  56                         fdtfile = optarg;
  57                         break;
  58                 case 'k':
  59                         keyfile = optarg;
  60                         break;
  61                 case 'c':
  62                         config_name = optarg;
  63                         break;
  64                 default:
  65                         usage(cmdname);
  66                         break;
  67         }
  68
  69         if (!fdtfile) {
  70                 fprintf(stderr, "%s: Missing fdt file\n", *argv);
  71                 usage(*argv);
  72         }
  73         if (!keyfile) {
  74                 fprintf(stderr, "%s: Missing key file\n", *argv);
  75                 usage(*argv);
  76         }
  77
  78         ffd = mmap_fdt(cmdname, fdtfile, 0, &fit_blob, &fsbuf, false, true);
  79         if (ffd < 0)
  80                 return EXIT_FAILURE;
  81         kfd = mmap_fdt(cmdname, keyfile, 0, &key_blob, &ksbuf, false, true);
  82         if (kfd < 0)
  83                 return EXIT_FAILURE;
  84
  85         image_set_host_blob(key_blob);
  86         ret = fit_check_sign(fit_blob, key_blob, config_name);
  87         if (!ret) {
  88                 ret = EXIT_SUCCESS;
  89                 fprintf(stderr, "Signature check OK\n");
  90         } else {
  91                 ret = EXIT_FAILURE;
  92                 fprintf(stderr, "Signature check bad (error %d)\n", ret);
  93         }
  94
  95         (void) munmap((void *)fit_blob, fsbuf.st_size);
  96         (void) munmap((void *)key_blob, ksbuf.st_size);
  97
  98         close(ffd);
  99         close(kfd);
 100         exit(ret);
 101 }