From 6d0385f31cc4f19df8fc51b56bb08af7c9c0922a Mon Sep 17 00:00:00 2001
From: John Crispin <john@phrozen.org>
Date: Sun, 23 May 2021 09:59:53 +0200
Subject: [PATCH 07/11] certificates: add ability to persistently store
 certificates

Signed-off-by: John Crispin <john@phrozen.org>
---
 target/linux/ath79/dts/qca9563_tplink_cpe710-v1.dts       | 7 ++++++-
 .../files/arch/arm/boot/dts/qcom-ipq4019-xx8300.dtsi      | 3 +--
 .../linux/ramips/dts/mt7628an_tplink_8m-split-uboot.dtsi  | 7 ++++++-
 .../linux/realtek/dts/rtl8392_edgecore_ecs4100-12ph.dts   | 8 ++++++--
 4 files changed, 19 insertions(+), 6 deletions(-)

diff --git a/target/linux/ath79/dts/qca9563_tplink_cpe710-v1.dts b/target/linux/ath79/dts/qca9563_tplink_cpe710-v1.dts
index 830c3d30b8..71c6381f86 100644
--- a/target/linux/ath79/dts/qca9563_tplink_cpe710-v1.dts
+++ b/target/linux/ath79/dts/qca9563_tplink_cpe710-v1.dts
@@ -86,7 +86,12 @@
 			partition@70000 {
 				compatible = "denx,uimage";
 				label = "firmware";
-				reg = <0x070000 0xf50000>;
+				reg = <0x070000 0xf40000>;
+			};
+
+			partition@fb0000 {
+				label = "certificates";
+				reg = <0xfb0000 0x10000>;
 			};
 
 			partition@fc0000 {
diff --git a/target/linux/ipq40xx/files/arch/arm/boot/dts/qcom-ipq4019-xx8300.dtsi b/target/linux/ipq40xx/files/arch/arm/boot/dts/qcom-ipq4019-xx8300.dtsi
index 8f971e505c..0f1f083a5b 100644
--- a/target/linux/ipq40xx/files/arch/arm/boot/dts/qcom-ipq4019-xx8300.dtsi
+++ b/target/linux/ipq40xx/files/arch/arm/boot/dts/qcom-ipq4019-xx8300.dtsi
@@ -229,9 +229,8 @@
 			};
 
 			partition@b880000 {
-				label = "syscfg";
+				label = "certificates";
 				reg = <0xb880000 0x4680000>;
-				read-only;
 			};
 		};
 	};
diff --git a/target/linux/ramips/dts/mt7628an_tplink_8m-split-uboot.dtsi b/target/linux/ramips/dts/mt7628an_tplink_8m-split-uboot.dtsi
index b6ce7b1f56..471be72001 100644
--- a/target/linux/ramips/dts/mt7628an_tplink_8m-split-uboot.dtsi
+++ b/target/linux/ramips/dts/mt7628an_tplink_8m-split-uboot.dtsi
@@ -43,7 +43,12 @@
 			partition@50000 {
 				compatible = "tplink,firmware";
 				label = "firmware";
-				reg = <0x50000 0x770000>;
+				reg = <0x50000 0x760000>;
+			};
+
+			partition@7b0000 {
+				label = "certificates";
+				reg = <0x7b0000 0x10000>;
 			};
 
 			partition@7c0000 {
diff --git a/target/linux/realtek/dts/rtl8392_edgecore_ecs4100-12ph.dts b/target/linux/realtek/dts/rtl8392_edgecore_ecs4100-12ph.dts
index 303b79ac83..7a228aea86 100644
--- a/target/linux/realtek/dts/rtl8392_edgecore_ecs4100-12ph.dts
+++ b/target/linux/realtek/dts/rtl8392_edgecore_ecs4100-12ph.dts
@@ -176,11 +176,15 @@
 				reg = <0x100000 0x100000>;
 				read-only;
 			};
-			partition@b260000 {
+			partition@200000 {
 				label = "firmware";
-				reg = <0x200000 0xe00000>;
+				reg = <0x200000 0xdf0000>;
 				compatible = "openwrt,uimage", "denx,uimage";
 			};
+			partition@ff0000 {
+				label = "certificates";
+				reg = <0xff0000 0x10000>;
+			};
 		};
 	};
 };
-- 
2.25.1