Messages in this thread | | | From | Rusty Russell <> | Subject | Re: [RFC][PATCH 2/2] modsig: differentiate between ephemeral and persistent key names | Date | Mon, 03 Dec 2012 11:56:39 +1030 |
| |
Mimi Zohar <zohar@linux.vnet.ibm.com> writes: > Using the same name for ephemeral and "persistent" keys results > in deleting the "persistent" key. This patch renames the normal > kbuild asymmetric key pair name to "default_signing_key" and the > ephemeral key pair name to "ephemeral_signing_key".
I like the idea: I was always uncomfortable with the mixing of persistent and temporary keys. But it's a bit misguided, because surely persistent keys don't belong in the build tree at all.
How about we do something like:
# Default to temporary keys MODKEYPREFIX = ./temp_signing_key
MODSECKEY = $(MODKEYPREFIX).priv MODPUBKEY = $(MODKEYPREFIX).x509
Then encourage people to do:
make MODKEYPREFIX=...
We could also use a config option to set the path, but that's probably less convenient.
Cheers, Rusty.
| |