X-Git-Url: https://git.ti.com/gitweb?p=security-development-tools%2Fcore-secdev-k3.git;a=blobdiff_plain;f=scripts%2Fsecure-binary-image.sh;h=36d5da1ac3500eac28a8cb094a1f6ef944ac0f6a;hp=a8080f7acf8d32daa75cca3deb6a0b640c046b6e;hb=HEAD;hpb=1cc93254039b6f6e4f8042dab40744e32e074fb8 diff --git a/scripts/secure-binary-image.sh b/scripts/secure-binary-image.sh index a8080f7..36d5da1 100755 --- a/scripts/secure-binary-image.sh +++ b/scripts/secure-binary-image.sh @@ -72,13 +72,16 @@ HS_IMAGE_SIZE=$(cat $INPUT_FILE | wc -c) # Parameters to get populated into the x509 template HS_SED_OPTS="-e s/TEST_IMAGE_LENGTH/${HS_IMAGE_SIZE}/ " HS_SED_OPTS+="-e s/TEST_IMAGE_SHA_VAL/${HS_SHA_VALUE}/" +TMPX509=$(mktemp) || exit 1 +cat ${PREFIX}/scripts/x509-template.txt | sed ${HS_SED_OPTS} > ${TMPX509} # Generate x509 certificate -cat ${PREFIX}/scripts/x509-template.txt | sed ${HS_SED_OPTS} > temp-x509.txt -openssl req -new -x509 -key ${PREFIX}/keys/custMpk.pem -nodes -outform DER -out temp-x509.cert -config temp-x509.txt -sha512 +TMPCERT=$(mktemp) || exit 1 + +openssl req -new -x509 -key ${PREFIX}/keys/custMpk.pem -nodes -outform DER -out ${TMPCERT} -config ${TMPX509} -sha512 # Append x509 certificate -cat temp-x509.cert $INPUT_FILE > $OUTPUT_FILE +cat ${TMPCERT} $INPUT_FILE > $OUTPUT_FILE # Cleanup -rm -f temp-x509.txt temp-x509.cert +rm -f ${TMPX509} ${TMPCERT}