imx-code-signing-tool fails on v2024dev2

Affected images versions

v2024dev2

Unaffected images versions

• all versions up to XXX (replace XXX with the build id of the most recent Apertis images where this bug cannot be reproduced)
• not relevant (explain why)
• v2022 (explain why)

Background

Tool cst from imx-code-signing-tool is used during image building to sign iMX6 u-boot binaries

https://gitlab.apertis.org/infrastructure/apertis-image-recipes/-/jobs/2507871

2023/06/14 12:31:48 ==== Sign U-Boot ====
[   11.662751] cst[373]: segfault at 0 ip 0000000000000000 sp 00007ffdb31d8ea8 error 14 in cst[5608bb418000+4000] likely on CPU 1 (core 1, socket 0)
[   11.669059] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
2023/06/14 12:31:48 u-boot-dtb.imx" | Segmentation fault
2023/06/14 12:31:48 Action `Sign U-Boot` failed at stage Run, error: exit status 139
[   11.703889] EXT4-fs (vda1): unmounting filesystem.

Root cause

This tool relies on OpenSSL to sign the binaries which in previous Apertis release was 1.1.1, but from v2024dev2 is 3.0.8, so probably some adaptations are needed. This needs to be confirmed.

Outcomes

TBD

Management data

This section is for management only, it should be the last one in the description.

/cc @andrunko @em @sagar @sudarshan @wlozano

Phabricator link: https://phabricator.apertis.org/T9819