Merge pull request #612 from 3mdeb/develop

Publish "UEFI Secure Booting FreeBSD with Dasharo firmware"
3mdeb · Nov 15, 2024 · 0d30620 · 0d30620
2 parents c55ff08 + 33afd6c
commit 0d30620
Show file tree

Hide file tree

Showing 17 changed files with 409 additions and 9 deletions.
diff --git a/blog/content/post/2021-12-14-secure-jtag-on-imx-soc.md b/blog/content/post/2021-12-14-secure-jtag-on-imx-soc.md
@@ -41,7 +41,7 @@ publicly available.
 - **SoC reference manual**: Setting JTAG in secure mode is a dangerous operation
   \- if you miss something or will be wrong with any fusebit name or the address
   you can enable unexcepted options. Always work with documentation - here is
-  [application note](https://www.nxp.com/docs/en/application-note/AN4686.pdf)
+  [application note](http://web.archive.org/web/20210305000904/https://www.nxp.com/docs/en/application-note/AN4686.pdf)
   about JTAG modes.
 
 - **crucible tool**: JTAG mode and access key are saved in fuse bits - we need
@@ -51,18 +51,18 @@ publicly available.
   fuse fields. With that tool we can burn fuses using their names - it is more
   safety than counting banks and words.
 
-- **JTAG compatible with OpenOCD**: On
-  [NXP sites](https://www.nxp.com/docs/en/application-note/AN4686.pdf) we can
-  read that Secure JTAG is supported only by the Lauterbach environment and
-  ARM-DS5 IDE with DSTREAM debugger. In 3mdeb we are always trying to use
+- **JTAG compatible with OpenOCD**: On [NXP
+  sites](http://web.archive.org/web/20210305000904/https://www.nxp.com/docs/en/application-note/AN4686.pdf)
+  we can read that Secure JTAG is supported only by the Lauterbach environment
+  and ARM-DS5 IDE with DSTREAM debugger. In 3mdeb we are always trying to use
   open-source software. Unfortunately, OpenOCD doesn't officially support Secure
   JTAG in i.MX SoC's, but we found not accepted yet
   [patch](https://review.openocd.org/c/openocd/+/2148/) from 2014 which adds
   support for work with SJC (System JTAG controller) in a secure mode. Required
-  patch work on OpenOCD from
-  [official repository](git://git.code.sf.net/p/openocd/code) if you checkout
-  code with `970a12aef` hash. There is a chance to apply patch in the actual
-  version of OpenOCD, but it needs some code changes. As hardware, we used
+  patch work on OpenOCD from [official
+  repository](git://git.code.sf.net/p/openocd/code) if you checkout code with
+  `970a12aef` hash. There is a chance to apply patch in the actual version of
+  OpenOCD, but it needs some code changes. As hardware, we used
   [ARM-USB-OCD-H](https://www.olimex.com/Products/ARM/JTAG/ARM-USB-OCD-H/)
   (54,95 EUR) from Olimex.