Add FIT image verification with i.MX HAB

Add patches allowing to use HAB for FIT image verification.

Current implementation doesn't stop the boot but throws a message with the image verification status.

Tested with OBS build and SabreLite boot.

debian/patches/apertis/0034-imx-hab-Add-hab-version-command.patch

+From 56dd0aba63154c802c227d491eee658c9c3693e8 Mon Sep 17 00:00:00 2001
+From: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
+Date: Tue, 18 Jun 2019 11:44:45 +0200
+Subject: [PATCH 34/41] imx :hab: Add hab version command
+
+THe RVT data includes a major and minor version in its header
+parameter. Add a new command to print this out.
+
+Signed-off-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
+
+Commit-notes:
+Unfortunately there doesn't seem to be a way to get the minor version of
+the hab ROM. While there is a get_version function pointer in the vector
+table it's documented to only be valid during the ROM phase and a quick
+hack to try and call it on my board always returned 1 :/.
+END
+---
+ arch/arm/include/asm/mach-imx/hab.h |  1 +
+ arch/arm/mach-imx/hab.c             | 21 +++++++++++++++++++++
+ 2 files changed, 22 insertions(+)
+
+diff --git a/arch/arm/include/asm/mach-imx/hab.h b/arch/arm/include/asm/mach-imx/hab.h
+index 95df8842..5c82a148 100644
+--- a/arch/arm/include/asm/mach-imx/hab.h
++++ b/arch/arm/include/asm/mach-imx/hab.h
+@@ -189,6 +189,7 @@ typedef void hapi_clock_init_t(void);
+ #define HAB_CID_ROM 0 /**< ROM Caller ID */
+ #define HAB_CID_UBOOT 1 /**< UBOOT Caller ID*/
+ 
++#define HAB_TAG_RVT          0xDD  /* ROM Vector Table */
+ #define HAB_CMD_HDR          0xD4  /* CSF Header */
+ #define HAB_CMD_WRT_DAT      0xCC  /* Write Data command tag */
+ #define HAB_CMD_CHK_DAT      0xCF  /* Check Data command tag */
+diff --git a/arch/arm/mach-imx/hab.c b/arch/arm/mach-imx/hab.c
+index dbfd692f..2d93ac74 100644
+--- a/arch/arm/mach-imx/hab.c
++++ b/arch/arm/mach-imx/hab.c
+@@ -365,6 +365,21 @@ static int do_hab_failsafe(cmd_tbl_t *cmdtp, int flag, int argc,
+ 	return 0;
+ }
+ 
++static int do_hab_version(cmd_tbl_t *cmdtp, int flag, int argc,
++			  char * const argv[])
++{
++	struct hab_hdr *hdr = (struct hab_hdr *)HAB_RVT_BASE;
++
++	if (hdr->tag != HAB_TAG_RVT) {
++		printf("Unexpected header tag: %x\n", hdr->tag);
++		return CMD_RET_FAILURE;
++	}
++
++	printf("HAB version: %d.%d\n", hdr->par >> 4, hdr->par & 0xf);
++
++	return 0;
++}
++
+ static int do_authenticate_image_or_failover(cmd_tbl_t *cmdtp, int flag,
+ 					     int argc, char * const argv[])
+ {
+@@ -421,6 +436,12 @@ U_BOOT_CMD(
+ 		"ivt_offset - hex offset of IVT in the image"
+ 	  );
+ 
++U_BOOT_CMD(
++		hab_version, 1, 0, do_hab_version,
++		"print HAB major/minor version",
++		""
++	  );
++
+ #endif /* !defined(CONFIG_SPL_BUILD) */
+ 
+ /* Get CSF Header length */
+-- 
+2.24.1
+