[dgarske]

Description

Two small fixes, one for the i.MX 8QuadMax MEK scripts and one in the top-level Makefile.

1. i.MX8QM scripts

imx8qm-flash.sh sdp ran uuu -b sdps, which current uuu releases reject ("sdps is not built-in script"). It now issues the protocol command directly, uuu SDPS: boot -f flash.bin. An optional UUU_PATH passes -m to uuu, so the load goes to the right board when more than one i.MX is in serial download mode.

imx8qm-mkflashbin.sh always runs make keysclean, so every run generates a new signing key and invalidates a FIT already signed on the boot medium. KEEP_KEYS=1 skips the keysclean and builds against the key already in the tree. The default is unchanged. docs/Targets.md documents both.

2. make clean leaves wolfSSL port objects

make clean removed wolfcrypt/src/*.o and wolfcrypt/src/port/Renesas/*.o, but not the other port directories, such as the ARMv8 assembly in port/arm. Those are only removed when the current config lists them in OBJS. Switching between configs in one tree could then fail to link (Transform_Sha512_Len_neon undefined) or link objects built for the previous config. clean now removes wolfcrypt/src/port/*/*.o.

Testing

KEEP_KEYS=1 keeps the signing key across imx8qm-mkflashbin.sh runs, and a default run still generates a new one. The SDPS: boot -f form loaded containers on the i.MX8QM MEK. A build with the ARMv8 assembly enabled followed by make clean now leaves no port objects behind.

[Copilot]

🟢 Approval recommended

No active review issues are recorded for the serial-download fixes, signing-key preservation option, and expanded cleanup.

No open issues 🎉

What changed in this PR

This PR fixes i.MX8QM serial-download loading, adds an option to preserve signing keys, and broadens cleanup of wolfSSL port objects to prevent stale objects across configuration changes.

Changes:

• Uses the direct uuu SDPS: boot command and supports selecting a board through UUU_PATH.
• Adds KEEP_KEYS=1 to preserve existing signing keys while retaining key regeneration by default.
• Extends make clean to remove objects from all immediate wolfSSL port subdirectories.

File	Description
tools/​scripts/​imx8qm/​imx8qm-mkflashbin.sh	Skips key cleanup when KEEP_KEYS=1.
tools/​scripts/​imx8qm/​imx8qm-flash.sh	Corrects the SDP command and adds optional USB-path selection.
Makefile	Broadens cleanup beyond Renesas port objects.
docs/​Targets.md	Documents signing-key preservation and board selection.

_{Review effort: Balanced}

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #978

Scan targets checked: wolfboot-pr-general
Review type: general (no scan target covers the changed files)
Coverage: 4 of 4 in-scope changed file(s) opened by the reviewer

Fenrir result: Approved ✅

No new issues found in the changed files.

Advisory only — this automated result does not count as a GitHub approval.

Review tier: Max