u-boot-aspeed-sdk: OpenSSL 4.0 support
Backport the relevant commits for OpenSSL 4.0 support from u-boot/master
to our tree, as well as a submitted patch that adds the support. This is
required for an openembedded-core bump that bumped OpenSSL from 3.5.7 to
4.0.2.
Tested: Built p10bmc as well as evb-ast2600 with and without
UBOOT_SIGN_ENABLE + SOCSEC_SIGN_ENABLE enabled. All targets
booted and were updatable in QEMU.
Alexandru Gagniuc (3):
mkimage: Add a 'keyfile' argument for image signing
lib/rsa: Use the 'keyfile' argument from mkimage
lib/rsa: Remove support for OpenSSL < 1.1.0 and libressl < 2.7.0
Chan, Donald (1):
lib/rsa: Use EVP_PKEY instead of RSA
Daniele Alessandrelli (1):
rsa: Return immediately if required-key verification fails
Eddie Kovsky (1):
lib/rsa: add support for OpenSSL Provider API
Heinrich Schuchardt (2):
lib: -Wformat-truncation in rsa_engine_get_priv_key
lib/rsa: don't use NULL as key_id
Jan Luebbe (1):
lib: rsa: avoid overriding the object name when already specified
Philippe Reynes (1):
mkimage: fit: add support to encrypt image with aes
Simon Glass (1):
image: Use constants for 'required' and 'key-name-hint'
Vesa Jääskeläinen (1):
lib: rsa: add support to other openssl engine types than pkcs11
Change-Id: I1d8b3fdd607d476a4f0dd189a13b302771016aac
Signed-off-by: Tan Siewert <tan.siewert@9elements.com>
diff --git a/meta-aspeed/recipes-bsp/u-boot/u-boot-common-aspeed-sdk_2019.04.inc b/meta-aspeed/recipes-bsp/u-boot/u-boot-common-aspeed-sdk_2019.04.inc
index 8261c08..334d81a 100644
--- a/meta-aspeed/recipes-bsp/u-boot/u-boot-common-aspeed-sdk_2019.04.inc
+++ b/meta-aspeed/recipes-bsp/u-boot/u-boot-common-aspeed-sdk_2019.04.inc
@@ -10,7 +10,7 @@
# We use the revision in order to avoid having to fetch it from the
# repo during parse
-SRCREV = "edc4a61d116fc92f3be0daf87d27ee31b68c9b5f"
+SRCREV = "2523223163c176efe0e5415c67b3cc227f6b2677"
SRC_URI = "git://github.com/openbmc/u-boot.git;nobranch=1;protocol=https"
SRC_URI:append:uboot-flash-32768 = " file://u-boot_flash_32M.cfg"
