openssl/lk: Enable signed boot img check
This uses openssl to check the boot image prior
to jumping to kernel to see if it is a signed
kernel image.
Change-Id: I92927fd9317a0f701dab395cc6d39929c64340c1
diff --git a/makefile b/makefile
index da8567d..4c31db2 100644
--- a/makefile
+++ b/makefile
@@ -53,6 +53,11 @@
ifeq ($(EMMC_BOOT),1)
CFLAGS += -D_EMMC_BOOT=1
endif
+
+ifeq ($(SIGNED_KERNEL),1)
+ CFLAGS += -D_SIGNED_KERNEL=1
+endif
+
# When the host arch is ARM, ensure stack protection code is not emitted since
# it's not supported by the bootloader's libc
ifneq ($(shell uname -m | grep "arm.*"),)