tools/fit_check_sign.c

   1 // SPDX-License-Identifier: GPL-2.0+
   2 /*
   3  * (C) Copyright 2014
   4  * DENX Software Engineering
   5  * Heiko Schocher <hs@denx.de>
   6  *
   7  * Based on:
   8  * (C) Copyright 2008 Semihalf
   9  *
  10  * (C) Copyright 2000-2004
  11  * DENX Software Engineering
  12  * Wolfgang Denk, wd@denx.de
  13  *
  14  * Updated-by: Prafulla Wadaskar <prafulla@marvell.com>
  15  *              FIT image specific code abstracted from mkimage.c
  16  *              some functions added to address abstraction
  17  *
  18  * All rights reserved.
  19  */
  20
  21 #include "mkimage.h"
  22 #include "fit_common.h"
  23 #include <image.h>
  24 #include <u-boot/crc.h>
  25
  26 void usage(char *cmdname)
  27 {
  28         fprintf(stderr, "Usage: %s -f fit file -k key file\n"
  29                          "          -f ==> set fit file which should be checked'\n"
  30                          "          -k ==> set key file which contains the key'\n",
  31                 cmdname);
  32         exit(EXIT_FAILURE);
  33 }
  34
  35 int main(int argc, char **argv)
  36 {
  37         int ffd = -1;
  38         int kfd = -1;
  39         struct stat fsbuf;
  40         struct stat ksbuf;
  41         void *fit_blob;
  42         char *fdtfile = NULL;
  43         char *keyfile = NULL;
  44         char *config_name = NULL;
  45         char cmdname[256];
  46         int ret;
  47         void *key_blob;
  48         int c;
  49
  50         strncpy(cmdname, *argv, sizeof(cmdname) - 1);
  51         cmdname[sizeof(cmdname) - 1] = '\0';
  52         while ((c = getopt(argc, argv, "f:k:c:")) != -1)
  53                 switch (c) {
  54                 case 'f':
  55                         fdtfile = optarg;
  56                         break;
  57                 case 'k':
  58                         keyfile = optarg;
  59                         break;
  60                 case 'c':
  61                         config_name = optarg;
  62                         break;
  63                 default:
  64                         usage(cmdname);
  65                         break;
  66         }
  67
  68         if (!fdtfile) {
  69                 fprintf(stderr, "%s: Missing fdt file\n", *argv);
  70                 usage(*argv);
  71         }
  72         if (!keyfile) {
  73                 fprintf(stderr, "%s: Missing key file\n", *argv);
  74                 usage(*argv);
  75         }
  76
  77         ffd = mmap_fdt(cmdname, fdtfile, 0, &fit_blob, &fsbuf, false, true);
  78         if (ffd < 0)
  79                 return EXIT_FAILURE;
  80         kfd = mmap_fdt(cmdname, keyfile, 0, &key_blob, &ksbuf, false, true);
  81         if (kfd < 0)
  82                 return EXIT_FAILURE;
  83
  84         image_set_host_blob(key_blob);
  85         ret = fit_check_sign(fit_blob, key_blob, config_name);
  86         if (!ret) {
  87                 ret = EXIT_SUCCESS;
  88                 fprintf(stderr, "Signature check OK\n");
  89         } else {
  90                 ret = EXIT_FAILURE;
  91                 fprintf(stderr, "Signature check Bad (error %d)\n", ret);
  92         }
  93
  94         (void) munmap((void *)fit_blob, fsbuf.st_size);
  95         (void) munmap((void *)key_blob, ksbuf.st_size);
  96
  97         close(ffd);
  98         close(kfd);
  99         exit(ret);
 100 }