From: Daniel Golle <daniel@makrotopia.org>
Date: Mon, 6 Aug 2018 19:20:57 +0000 (+0200)
Subject: image: use ucert to append signature
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=acf10d392fe3e65caa84aeb73ba6e85886289edd;p=openwrt%2Fstaging%2Fjow.git

image: use ucert to append signature

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(backported from 848b455d2e9441361f6e010f9b95ab8a7dccbae1)
---

diff --git a/include/image-commands.mk b/include/image-commands.mk
index 28b39c310e..01040138a4 100644
--- a/include/image-commands.mk
+++ b/include/image-commands.mk
@@ -309,6 +309,12 @@ metadata_json = \
 
 define Build/append-metadata
 	$(if $(SUPPORTED_DEVICES),-echo $(call metadata_json,$(SUPPORTED_DEVICES)) | fwtool -I - $@)
+	[ -s "$(BUILD_KEY)" -a -s "$(BUILD_KEY).ucert" ] && { \
+		cp "$(BUILD_KEY).ucert" "$@.ucert" ;\
+		usign -S -m "$@" -s "$(BUILD_KEY)" -x "$@.sig" ;\
+		ucert -A -c "$@.ucert" -x "$@.sig" ;\
+		fwtool -S "$@.ucert" "$@" ;\
+	}
 endef
 
 define Build/kernel2minor