[PATCH v4 0/8] Allow multiple keyspecs in one environment variable

[Sascha Hauer]

On Tue, 17 Mar 2026 16:19:44 +0100, Jonas Rebmann wrote:
> This contains the actual change to keytoc as well a migration Note.
> 
> Allowing any number of public keys to be provided via a single
> environment variable eases integration in more complex setups where
> multiple public keys per keyring are managed externally.
> 
> During testing, it was found that handling of fit-hint env variables was
> broken since 2025.12. Since this is a legacy feature this series
> includes a patch that fixes the bug in the handling of fit-hint env
> variables as well as a patch that removes the feature.
> 
> [...]

Applied, thanks!

[1/8] scripts: include: Add string_util.h for strsep_unescaped
      https://git.pengutronix.de/cgit/barebox/commit/?id=7f971d0c543b (link may not be stable)
[2/8] crypto: keytoc: Improve readability
      https://git.pengutronix.de/cgit/barebox/commit/?id=6c863153dcc6 (link may not be stable)
[3/8] crypto: keytoc: Move special handling of legacy pkcs11 format to parse_keyspec
      https://git.pengutronix.de/cgit/barebox/commit/?id=4dbe43c9c0e5 (link may not be stable)
[4/8] crypto: keytoc: Parse all keyspecs before writing to stdout
      https://git.pengutronix.de/cgit/barebox/commit/?id=f63827c7478c (link may not be stable)
[5/8] crypto: keytoc: Split env-provided full keyspec on spaces
      https://git.pengutronix.de/cgit/barebox/commit/?id=bcf316ce1495 (link may not be stable)
[6/8] Documentation: migration-guides: Document change in keyspec env vars
      https://git.pengutronix.de/cgit/barebox/commit/?id=594abefb8251 (link may not be stable)
[7/8] crypto: keytoc: Allow fields to start with underscore
      https://git.pengutronix.de/cgit/barebox/commit/?id=e6e36288c9f2 (link may not be stable)
[8/8] crypto: keytoc: Deprecate fit-hint from env variable
      https://git.pengutronix.de/cgit/barebox/commit/?id=5207773f43a6 (link may not be stable)

Best regards,
-- 
Sascha Hauer <s.hauer at pengutronix.de>