Add a --subkey switch to kernel signing utility.

This option makes the signing utility just output the kernel subkey (key signature) header which can be used to generate subsequent signed kernel images without needing the firmware root key and using the same kernel signing key. (This feature will be a part of a subsequent CL).

Review URL: http://codereview.chromium.org/2310002
This commit is contained in:
Gaurav Shah
2010-05-27 13:29:20 -07:00
parent d6ff721eb0
commit b85b06bb25
4 changed files with 41 additions and 6 deletions

View File

@@ -54,6 +54,7 @@ uint8_t* GetKernelConfigBlob(const KernelImage* image);
*/
uint8_t* GetKernelBlob(const KernelImage* image, uint64_t* blob_len);
/* Write kernel data from [image] to a file named [input_file].
* If [is_only_vblock] is non-zero, only the verification block is output.
*
@@ -61,7 +62,8 @@ uint8_t* GetKernelBlob(const KernelImage* image, uint64_t* blob_len);
*/
int WriteKernelImage(const char* input_file,
const KernelImage* image,
int is_only_vblock);
int is_only_vblock,
int is_subkey_out);
/* Create a kernel_data blob from its components and fill
* its length into blob_len, plus some information about the bootloader.