Comment 23 for bug 1831942

Revision history for this message
Andy Whitcroft (apw) wrote : Re: support u-boot Flat Image Tree (FIT) signing support

The merge for this has been deployed to dogfood. Added a FIT signable blob to the signing test packages and threw them into a FIT signing PPA on dogfood. This correctly triggered a new key to be generated:

  Generating a 2048 bit RSA private key
  .........................+++
  ...................+++
  writing new private key to '/srv/launchpad.net/ppa-signing-keys/uefi/apw/fit-1/fit/fit.key'

and apparent signing of the supplied object:

  FIT description: kernel, initrd and devicetree
  Created: Wed Jun 19 11:46:09 2019
   Image 0 (kernel@1)
    Description: kernel

These have published out as expected into dists, and appear correctly signed when downloaded. The public key is included as expected.