Add FIT image verification with i.MX HAB

Add patches allowing to use HAB for FIT image verification.

Current implementation doesn't stop the boot but throws a message with the image verification status.

Tested with OBS build and SabreLite boot.

marked as a Work In Progress

changed the description

added 2 commits

• 60cf44ee - Add kernel verification with i.MX HAB
• e4a971cc - Release u-boot 2019.01+dfsg-7co3

Compare with previous version

unmarked as a Work In Progress

changed the description

changed title from Add kernel verification with i.MX HAB to Add FIT image verification with i.MX HAB

changed the description

added 2 commits

• 5950d6cf - Add FIT image verification with i.MX HAB
• 9a85da9b - Release u-boot 2019.01+dfsg-7co3

Compare with previous version

added 2 commits

• 873b3627 - Add FIT image verification with i.MX HAB
• 9b825230 - Release u-boot 2019.01+dfsg-7co3

Compare with previous version

added 2 commits

• 801b5e21 - Add FIT image verification with i.MX HAB
• 7d51b8e9 - Release u-boot 2019.01+dfsg-7co3

Compare with previous version

resolved all threads

This still has issues; Afaict a closed device will still happily boot an unsigned uImage and if booting a zimage the initramfs + dtb aren't checked which is problematic

mmm... you can't boot unsigned uImage -- it is covered by the same code as for checking the FIT image.

correct, regarding initramfs and dtb -- but this is out of the scope of the initial task.

PS I wanted to do separate verification of binaries, but as far as I remember we agreed it was out of the scope for the WIP I'm working with and move it to later imrovements.

added 2 commits

• 8f4fe9f0 - Add FIT image verification with i.MX HAB
• d2895ab6 - Release u-boot 2019.01+dfsg-7co3

Compare with previous version

resolved all threads

added 2 commits

• 21e681f9 - Add FIT image verification with i.MX HAB
• c06fb335 - Release u-boot 2019.01+dfsg-7co3

Compare with previous version