Skip to content

optee: add support of Trusted Applications signing keys

Julien Masson requested to merge (removed):jmasson/optee-ta into main

When we build Trusted Applications (TA) from OP-TEE, the TA are signed and verified by OP-TEE.

The user has 3 choices concerning the private/public TA keys:

  1. Add absolute path in yaml config:
secure:
  ta_key: /home/julien/Documents/ta.pem
  ta_pub_key: /home/julien/Documents/ta_pub.pem
  1. Copy TA keys in KEYS directory:
${BUILD}/.keys/ta.pem
${BUILD}/.keys/ta_pub.pem
  1. Use default key found in optee-os: keys/default_ta.pem

These 3 options are checked in this order.

Merge request reports