[{"id":39545,"web_url":"https://patchwork.libcamera.org/comment/39545/","msgid":"","date":"2026-07-01T08:56:42","subject":"Re: [PATCH v4 3/4] ipa: ipa-sign: Sign IPA according to the\n\tsignature algorithm of the key","submitter":{"id":216,"url":"https://patchwork.libcamera.org/api/people/216/","name":"Barnabás Pőcze","email":"barnabas.pocze@ideasonboard.com"},"content":"2026. 07. 01. 6:07 keltezéssel, Kate Hsuan írta:\n> Sign IPA according to the signature algorithm of the key.\n> \n> Signed-off-by: Kate Hsuan \n> Reviewed-by: Laurent Pinchart \n> ---\n> src/ipa/ipa-sign.sh | 2 +-\n> 1 file changed, 1 insertion(+), 1 deletion(-)\n> \n> diff --git a/src/ipa/ipa-sign.sh b/src/ipa/ipa-sign.sh\n> index 69024213..b7c7c47b 100755\n> --- a/src/ipa/ipa-sign.sh\n> +++ b/src/ipa/ipa-sign.sh\n> @@ -10,4 +10,4 @@ key=\"$1\"\n> input=\"$2\"\n> output=\"$3\"\n> \n> -openssl dgst -sha256 -sign \"${key}\" -out \"${output}\" \"${input}\"\n> +openssl pkeyutl -sign -inkey \"${key}\" -rawin -in \"${input}\" -out \"${output}\"\n\n`-rawin` is not supported by the version on debian 11:\n\n$ podman run --rm -it registry.freedesktop.org/camera/libcamera/debian/bullseye:2026-04-05.0 openssl pkeyutl -rawin\npkeyutl: Option unknown option -rawin\npkeyutl: Use -help for summary.\n\nBut we will drop it in August at the latest, so I think this is fine.\n\nReviewed-by: Barnabás Pőcze ","headers":{"Return-Path":"","X-Original-To":"parsemail@patchwork.libcamera.org","Delivered-To":"parsemail@patchwork.libcamera.org","Received":["from lancelot.ideasonboard.com (lancelot.ideasonboard.com\n\t[92.243.16.209])\n\tby patchwork.libcamera.org (Postfix) with ESMTPS id 0BDB3C3264\n\tfor ;\n\tWed, 1 Jul 2026 08:56:47 +0000 (UTC)","from lancelot.ideasonboard.com (localhost [IPv6:::1])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTP id B256365FA4;\n\tWed, 1 Jul 2026 10:56:46 +0200 (CEST)","from perceval.ideasonboard.com (perceval.ideasonboard.com\n\t[IPv6:2001:4b98:dc2:55:216:3eff:fef7:d647])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTPS id 36F6E65F29\n\tfor ;\n\tWed, 1 Jul 2026 10:56:45 +0200 (CEST)","from [192.168.33.33] (185.221.140.128.nat.pool.zt.hu\n\t[185.221.140.128])\n\tby perceval.ideasonboard.com (Postfix) with ESMTPSA id B25F3E91;\n\tWed, 1 Jul 2026 10:56:00 +0200 (CEST)"],"Authentication-Results":"lancelot.ideasonboard.com; dkim=pass (1024-bit key;\n\tunprotected) header.d=ideasonboard.com header.i=@ideasonboard.com\n\theader.b=\"G2cwAkAz\"; dkim-atps=neutral","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple; d=ideasonboard.com;\n\ts=mail; t=1782896160;\n\tbh=OaHKaLWDExVLVMghOv2yrfszydhIKqS61CxAjraVaNc=;\n\th=Date:Subject:To:References:From:In-Reply-To:From;\n\tb=G2cwAkAzTZG/PqChhD1wR4ZJQTW8IwnNklbcY5zNNjlbXlrapHa7lvUG40VVarP8Y\n\tcD/JsW0qyfN04ccz3RlqJWbFm7JRnFSykRSIo1uZm+wWc5wPew1EvWPU6vFewMll8a\n\t0eCOUSfde1u5XnizHhm+sTG8S3OSTL0nja1JKoec=","Message-ID":"","Date":"Wed, 1 Jul 2026 10:56:42 +0200","MIME-Version":"1.0","User-Agent":"Mozilla Thunderbird","Subject":"Re: [PATCH v4 3/4] ipa: ipa-sign: Sign IPA according to the\n\tsignature algorithm of the key","To":"Kate Hsuan , libcamera-devel@lists.libcamera.org,\n\tKieran Bingham ,\n\tLaurent Pinchart ","References":"<20260701040721.145659-1-hpa@redhat.com>\n\t<20260701040721.145659-4-hpa@redhat.com>","From":"=?utf-8?q?Barnab=C3=A1s_P=C5=91cze?= ","Content-Language":"en-US, hu-HU","In-Reply-To":"<20260701040721.145659-4-hpa@redhat.com>","Content-Type":"text/plain; charset=UTF-8; format=flowed","Content-Transfer-Encoding":"8bit","X-BeenThere":"libcamera-devel@lists.libcamera.org","X-Mailman-Version":"2.1.29","Precedence":"list","List-Id":"","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","Errors-To":"libcamera-devel-bounces@lists.libcamera.org","Sender":"\"libcamera-devel\" "}},{"id":39553,"web_url":"https://patchwork.libcamera.org/comment/39553/","msgid":"<20260701144633.GF3433808@killaraus.ideasonboard.com>","date":"2026-07-01T14:46:33","subject":"Re: [PATCH v4 3/4] ipa: ipa-sign: Sign IPA according to the\n\tsignature algorithm of the key","submitter":{"id":2,"url":"https://patchwork.libcamera.org/api/people/2/","name":"Laurent Pinchart","email":"laurent.pinchart@ideasonboard.com"},"content":"On Wed, Jul 01, 2026 at 10:56:42AM +0200, Barnabás Pőcze wrote:\n> 2026. 07. 01. 6:07 keltezéssel, Kate Hsuan írta:\n> > Sign IPA according to the signature algorithm of the key.\n> > \n> > Signed-off-by: Kate Hsuan \n> > Reviewed-by: Laurent Pinchart \n> > ---\n> > src/ipa/ipa-sign.sh | 2 +-\n> > 1 file changed, 1 insertion(+), 1 deletion(-)\n> > \n> > diff --git a/src/ipa/ipa-sign.sh b/src/ipa/ipa-sign.sh\n> > index 69024213..b7c7c47b 100755\n> > --- a/src/ipa/ipa-sign.sh\n> > +++ b/src/ipa/ipa-sign.sh\n> > @@ -10,4 +10,4 @@ key=\"$1\"\n> > input=\"$2\"\n> > output=\"$3\"\n> > \n> > -openssl dgst -sha256 -sign \"${key}\" -out \"${output}\" \"${input}\"\n> > +openssl pkeyutl -sign -inkey \"${key}\" -rawin -in \"${input}\" -out \"${output}\"\n> \n> `-rawin` is not supported by the version on debian 11:\n> \n> $ podman run --rm -it registry.freedesktop.org/camera/libcamera/debian/bullseye:2026-04-05.0 openssl pkeyutl -rawin\n> pkeyutl: Option unknown option -rawin\n> pkeyutl: Use -help for summary.\n> \n> But we will drop it in August at the latest, so I think this is fine.\n\nAgreed.\n\n> Reviewed-by: Barnabás Pőcze ","headers":{"Return-Path":"","X-Original-To":"parsemail@patchwork.libcamera.org","Delivered-To":"parsemail@patchwork.libcamera.org","Received":["from lancelot.ideasonboard.com (lancelot.ideasonboard.com\n\t[92.243.16.209])\n\tby patchwork.libcamera.org (Postfix) with ESMTPS id 07AC0C3306\n\tfor ;\n\tWed, 1 Jul 2026 14:46:37 +0000 (UTC)","from lancelot.ideasonboard.com (localhost [IPv6:::1])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTP id 2AA7965FB3;\n\tWed, 1 Jul 2026 16:46:36 +0200 (CEST)","from perceval.ideasonboard.com (perceval.ideasonboard.com\n\t[213.167.242.64])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTPS id C029665FA2\n\tfor ;\n\tWed, 1 Jul 2026 16:46:34 +0200 (CEST)","from killaraus.ideasonboard.com\n\t(2001-14ba-70f3-e800--a06.rev.dnainternet.fi\n\t[IPv6:2001:14ba:70f3:e800::a06])\n\tby perceval.ideasonboard.com (Postfix) with ESMTPSA id CB38A1E76;\n\tWed, 1 Jul 2026 16:45:49 +0200 (CEST)"],"Authentication-Results":"lancelot.ideasonboard.com; dkim=pass (1024-bit key;\n\tunprotected) header.d=ideasonboard.com header.i=@ideasonboard.com\n\theader.b=\"NigR2gYq\"; dkim-atps=neutral","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple; d=ideasonboard.com;\n\ts=mail; t=1782917150;\n\tbh=iPvC1ATV7gmrrRkw/n405Wp0FYxBttUDeAN5L+L7AaM=;\n\th=Date:From:To:Cc:Subject:References:In-Reply-To:From;\n\tb=NigR2gYqbHKo4+YMpZCtMdxUu3QUilnQHokFyhlBNGebR5S80iBncaZzLFMlT8UPA\n\tPf84LNOVfMJB9GYSnmyL+U1dHL+gFwWOb66cMoRTovxIxYasuL936O8ym2M9ukLhuM\n\txLDv4GBVblP+imZ4Q0qkd8b0q4hxNl0Ls2GqEKQ4=","Date":"Wed, 1 Jul 2026 17:46:33 +0300","From":"Laurent Pinchart ","To":"=?utf-8?q?Barnab=C3=A1s_P=C5=91cze?= ","Cc":"Kate Hsuan , libcamera-devel@lists.libcamera.org,\n\tKieran Bingham ","Subject":"Re: [PATCH v4 3/4] ipa: ipa-sign: Sign IPA according to the\n\tsignature algorithm of the key","Message-ID":"<20260701144633.GF3433808@killaraus.ideasonboard.com>","References":"<20260701040721.145659-1-hpa@redhat.com>\n\t<20260701040721.145659-4-hpa@redhat.com>\n\t","MIME-Version":"1.0","Content-Type":"text/plain; charset=utf-8","Content-Disposition":"inline","Content-Transfer-Encoding":"8bit","In-Reply-To":"","X-BeenThere":"libcamera-devel@lists.libcamera.org","X-Mailman-Version":"2.1.29","Precedence":"list","List-Id":"","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","Errors-To":"libcamera-devel-bounces@lists.libcamera.org","Sender":"\"libcamera-devel\" "}}]