From f835684365273c5ff1b7c700ddc0f9c1a859363f Mon Sep 17 00:00:00 2001 From: Stewart Smith Date: Thu, 13 Sep 2018 19:10:01 +1000 Subject: TEMPORARY HACK: Disable verifying VERSION Seeing as all the VERSION signing code is taking way too long to get upstream, let's temporarily skip verifying VERSION for now. Signed-off-by: Stewart Smith --- core/flash.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'core') diff --git a/core/flash.c b/core/flash.c index 8f00d85..8e7b90e 100644 --- a/core/flash.c +++ b/core/flash.c @@ -823,7 +823,12 @@ done_reading: * Verify and measure the retrieved PNOR partition as part of the * secure boot and trusted boot requirements */ - secureboot_verify(id, buf, *len); + /* + * FIXME: TEMPORARY HACK: Don't verify VERSION until all bits of code + * to produce a signed VERSION partition are upstream for a while. + */ + if (id != RESOURCE_ID_VERSION) + secureboot_verify(id, buf, *len); trustedboot_measure(id, buf, *len); /* Find subpartition */ -- cgit v1.1