imgtool: Allow --key to be optional when signing
If the --key is not specified, only the SHA256 hash is added to the TLV.
This is useful for testing configurations, where the crypto has not been
fully configured. Note that this configuration is not secure, and this
only verifies that the image has not been corrupted.
diff --git a/scripts/imgtool.py b/scripts/imgtool.py
index fb09f96..e0a8106 100755
--- a/scripts/imgtool.py
+++ b/scripts/imgtool.py
@@ -35,7 +35,7 @@
img = image.Image.load(args.infile, version=args.version,
header_size=args.header_size,
pad=args.pad)
- key = keys.load(args.key)
+ key = keys.load(args.key) if args.key else None
img.sign(key)
if args.pad:
@@ -75,7 +75,7 @@
getpub.add_argument('-k', '--key', metavar='filename', required=True)
sign = subs.add_parser('sign', help='Sign an image with a private key')
- sign.add_argument('-k', '--key', metavar='filename', required=True)
+ sign.add_argument('-k', '--key', metavar='filename')
sign.add_argument("--align", type=alignment_value, required=True)
sign.add_argument("-v", "--version", type=version.decode_version, required=True)
sign.add_argument("-H", "--header-size", type=intparse, required=True)