X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=doc%2Fmkimage.1;h=b48f70bb3cc7a0222d8a21d9d1122e69af2ddf4f;hb=14a66afead568a5c3a6bb49782432bea3b397fb8;hp=f9c733a5e6212e5795dd3210294c5d4a28c226bc;hpb=95d77b4479f9d07aea114fd4253cd665bb48ea10;p=u-boot diff --git a/doc/mkimage.1 b/doc/mkimage.1 index f9c733a5e6..b48f70bb3c 100644 --- a/doc/mkimage.1 +++ b/doc/mkimage.1 @@ -96,6 +96,12 @@ Set XIP (execute in place) flag. .P .B Create FIT image: +.TP +.BI "\-c [" "comment" "]" +Specifies a comment to be added when signing. This is typically a useful +message which describes how the image was signed or some other useful +information. + .TP .BI "\-D [" "dtc options" "]" Provide special options to the device tree compiler that is used to @@ -109,7 +115,7 @@ FIT image. .TP .BI "\-F" Indicates that an existing FIT image should be modified. No dtc -compilation is performed and the -f flag should not be given. +compilation is performed and the \-f flag should not be given. This can be used to sign images with additional keys after initial image creation. @@ -127,6 +133,12 @@ the corresponding public key is written into this file for for run-time verification. Typically the file here is the device tree binary used by CONFIG_OF_CONTROL in U-Boot. +.TP +.BI "\-r +Specifies that keys used to sign the FIT are required. This means that they +must be verified for the image to boot. Without this option, the verification +will be optional (useful for testing but not for release). + .SH EXAMPLES List image information: @@ -151,7 +163,8 @@ Create FIT image with compressed kernel and sign it with keys in the skipping those for which keys cannot be found. Also add a comment. .nf .B mkimage -f kernel.its -k /public/signing-keys -K u-boot.dtb \\\\ --c "Kernel 3.8 image for production devices" kernel.itb +.br +.B -c "Kernel 3.8 image for production devices" kernel.itb .fi .P @@ -161,7 +174,8 @@ with keys that are available in the new directory. Images that request signing with unavailable keys are skipped. .nf .B mkimage -F -k /secret/signing-keys -K u-boot.dtb \\\\ --c "Kernel 3.8 image for production devices" kernel.itb +.br +.B -c "Kernel 3.8 image for production devices" kernel.itb .fi .SH HOMEPAGE