cst: specify the non default keys pair

Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>

1 files changed, 11 insertions, 0 deletions

diff --git a/recipes-devtools/cst/cst_git.bb b/recipes-devtools/cst/cst_git.bb
index dcac949c9..17fc9b381 100644
--- a/recipes-devtools/cst/cst_git.bb
+++ b/recipes-devtools/cst/cst_git.bb
@@ -9,6 +9,10 @@ RDEPENDS_${PN} = "bash"
 
 inherit kernel-arch
 
+# specify the non default keys pair for secure boot if needed
+#SECURE_PRI_KEY = "/path/srk.pri"
+#SECURE_PUB_KEY = "/path/srk.pub"
+
 SRC_URI = "git://source.codeaurora.org/external/qoriq/qoriq-components/cst;nobranch=1 \
 "
 SRCREV = "e04690ba2ca60f56eb126e01496ed0cacbd838d4"
@@ -21,6 +25,13 @@ PARALLEL_MAKE = ""
 
 do_install () {
     oe_runmake install DESTDIR=${D} BIN_DEST_DIR=${bindir}
+    if [ -n "${SECURE_PRI_KEY}" ]; then
+       cp -f ${SECURE_PRI_KEY} ${D}/${bindir}/cst/srk.pri
+       cp -f ${SECURE_PUB_KEY} ${D}/${bindir}/cst/srk.pub
+    elif [ ! -f ${D}/${bindir}/cst/srk.pri -o ! ${D}/${bindir}/cst/srk.pub ]; then
+       cd ${D}/${bindir}/cst  && ./gen_keys 1024
+    fi
+    
 }
 
 FILES_${PN}-dbg += "${bindir}/cst/.debug"