I linked the part of the system_init where the ssh enabling takes place New software - #41 by zeusjan
This is part of the current firmware (image.cfs) and can’t be found in the sources (they are rather useful for UBoot documentation).
We cannot create the required certificate ourselves. The fw_verify used to check the certificate is a Go program.
I tried looking for certs during the OTA but there are none.
And the more I think about it, the more likely some checksum of the sshd binary went into creating the cert. Hence we can’t simply use any cert we might find.
For now I recreated the SquashFs image and disabled the fw_verify in it.
Alex
