Skip to content

Backport 27891 ([perso] add host hook for SKU cert customization) #29342

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pamaury merged 1 commit into from
Feb 21, 2026
+9 −3
Merged

Backport 27891 ([perso] add host hook for SKU cert customization) #29342

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 6 additions & 1 deletion sw/device/silicon_creator/manuf/extensions/default_ft_ext_lib.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,13 @@
// SPDX-License-Identifier: Apache-2.0

use anyhow::Result;
use arrayvec::ArrayVec;
use util_lib::response::PersonalizeResponse;

pub fn ft_ext(_response: &PersonalizeResponse) -> Result<Option<String>> {
pub fn ft_inject_certs_ext(endorsed_cert_concat: ArrayVec<u8, 5120>) -> Result<ArrayVec<u8, 5120>> {
Ok(endorsed_cert_concat)
}

pub fn ft_post_boot_ext(_response: &PersonalizeResponse) -> Result<Option<String>> {
Ok(None)
}
5 changes: 3 additions & 2 deletions sw/host/provisioning/ft_lib/src/lib.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ use cert_lib::{
CaConfig, CaKey, EndorsedCert, parse_and_endorse_x509_cert, validate_cert_chain,
validate_cwt_dice_chain,
};
use ft_ext_lib::ft_ext;
use ft_ext_lib::{ft_inject_certs_ext, ft_post_boot_ext};
use opentitanlib::app::{TransportWrapper, UartRx};
use opentitanlib::console::spi::SpiConsoleDevice;
use opentitanlib::io::console::ConsoleError;
Expand Down Expand Up @@ -515,6 +515,7 @@ fn provision_certificates(

// Execute extension hook.
let t0 = Instant::now();
endorsed_cert_concat = ft_inject_certs_ext(endorsed_cert_concat)?;
response.stats.log_elapsed_time("perso-ft-ext", t0);

// Authenticate WAS HMAC.
Expand Down Expand Up @@ -710,7 +711,7 @@ pub fn check_slot_b_boot_up(
let error_code_msg = r"BFV:.*\r\n";

// Optional text requried by certain SKUs.
let owner_ext_string = ft_ext(response)?;
let owner_ext_string = ft_post_boot_ext(response)?;

// Compile the full regex anchor including possible error messages and
// expected owner FW messages.
Expand Down
Loading