diff options
| author | Manish V Badarkhe <Manish.Badarkhe@arm.com> | 2021-01-26 10:55:49 +0000 |
|---|---|---|
| committer | Manish V Badarkhe <Manish.Badarkhe@arm.com> | 2021-01-27 13:48:35 +0000 |
| commit | 294e26566b9a7871f90f2712e631a0b8d9f24beb (patch) | |
| tree | 6cf716280f5144a41e57e1a077b6e81892a3aa4f | |
| parent | 70311692f11c29eec34ec03ea87f6581ccc0fd52 (diff) | |
| download | arm-trusted-firmware-294e26566b9a7871f90f2712e631a0b8d9f24beb.tar.gz | |
tools: cert_create: Create only requested certificates
The certification tool creates all the certificates mentioned
statically in the code rather than taking explicit certificate
requests from the command line parameters.
Code is optimized to avoid unnecessary attempts to create
non-requested certificates.
Signed-off-by: Manish V Badarkhe <Manish.Badarkhe@arm.com>
Change-Id: I78feac25bc701bf8f08c6aa5a2e1590bec92d0f2
| -rw-r--r-- | tools/cert_create/src/main.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/tools/cert_create/src/main.c b/tools/cert_create/src/main.c index d5abe4917..8a5337742 100644 --- a/tools/cert_create/src/main.c +++ b/tools/cert_create/src/main.c @@ -473,6 +473,11 @@ int main(int argc, char *argv[]) cert = &certs[i]; + if (cert->fn == NULL) { + /* Certificate not requested. Skip to the next one */ + continue; + } + /* Create a new stack of extensions. This stack will be used * to create the certificate */ CHECK_NULL(sk, sk_X509_EXTENSION_new_null()); @@ -534,7 +539,7 @@ int main(int argc, char *argv[]) } /* Create certificate. Signed with corresponding key */ - if (cert->fn && !cert_new(hash_alg, cert, VAL_DAYS, 0, sk)) { + if (!cert_new(hash_alg, cert, VAL_DAYS, 0, sk)) { ERROR("Cannot create %s\n", cert->cn); exit(1); } |