Messages in this thread | | | Subject | Re: [PATCH] modsign: Use single PEM file for autogenerated key | From | David Woodhouse <> | Date | Wed, 20 May 2015 16:18:24 +0100 |
| |
On Wed, 2015-05-20 at 15:56 +0100, David Howells wrote: > David Woodhouse <dwmw2@infradead.org> wrote: > > > I am disinclined to put in place any kind of backward-compatibility to > > find and use the old filenames. And I don't much care about changing the > > build system 'interface' for the user. I'm *very* keen to break that > > $(wildcard *.x509) crap anyway, so we might as well do this at the same > > time. > > Should some sort of warning then be emitted if $(wildcard *.x509) *does* turn > up anything? Just so that people don't get unexpectedly surprised when their > auxiliary keys are suddenly ignored.
Would people even notice such a warning?
People who are using long-term keys and inserting them into the kernel build probably ought to be paying attention and know what they're doing. There are relatively few of them, and I think that as long as the change is clearly documented, we should probably be fine.
Besides, *anyone* relying on that horrid wildcard crap should have *expected* it to go away because it was an abomination :)
-- David Woodhouse Open Source Technology Centre David.Woodhouse@intel.com Intel Corporation
| |