Skip to content

Commit a6a5c08

Browse files
doc/redame-zephyr:
Public key is handled by the build-system since a while. This patch reflect this in the documentation. Signed-off-by: Andrzej Puzdrowski <[email protected]> Co-authored-by: Francesco Domenico Servidio <[email protected]>
1 parent 7500156 commit a6a5c08

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

docs/readme-zephyr.md

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -145,15 +145,14 @@ The argument to `-t` should be the desired key type. See the
145145

146146
The generated keypair above contains both the public and the private
147147
key. It is necessary to extract the public key and insert it into the
148-
bootloader. The keys live in `boot/zephyr/keys.c`, and can be
149-
extracted using imgtool:
148+
bootloader. Use the ``CONFIG_BOOT_SIGNATURE_KEY_FILE`` Kconfig option to
149+
provide the path to the key file so the build system can extract
150+
the public key in a format usable by the C compiler.
151+
The generated public key is saved in `build/zephyr/autogen-pubkey.h`, which is included
152+
by the `boot/zephyr/keys.c`.
150153

151-
```
152-
$ ./scripts/imgtool.py getpub -k mykey.pem
153-
```
154-
155-
This will output the public key as a C array that can be dropped
156-
directly into the `keys.c` file.
154+
Currently, the Zephyr RTOS port limits its support to one keypair at the time,
155+
although MCUboot's key management infrastructure supports multiple keypairs.
157156

158-
Once this is done, this new keypair file (`mykey.pem` in this
157+
Once MCUboot is built, this new keypair file (`mykey.pem` in this
159158
example) can be used to sign images.

0 commit comments

Comments
 (0)