Messages in this thread Patch in this message | | | From | "Lee, Chun-Yi" <> | Subject | [PATCH 3/4] modsign: Add codeSigning EKU when generating X.509 key generation config | Date | Tue, 9 Mar 2021 17:10:43 +0800 |
| |
Add codeSigning EKU to the X.509 key generation config for the build time autogenerated kernel key.
Signed-off-by: "Lee, Chun-Yi" <jlee@suse.com> --- certs/Makefile | 1 + 1 file changed, 1 insertion(+)
diff --git a/certs/Makefile b/certs/Makefile index f4c25b67aad9..1ef4d6ca43b7 100644 --- a/certs/Makefile +++ b/certs/Makefile @@ -88,6 +88,7 @@ $(obj)/x509.genkey: @echo >>$@ "keyUsage=digitalSignature" @echo >>$@ "subjectKeyIdentifier=hash" @echo >>$@ "authorityKeyIdentifier=keyid" + @echo >>$@ "extendedKeyUsage=codeSigning" endif # CONFIG_MODULE_SIG_KEY $(eval $(call config_filename,MODULE_SIG_KEY)) -- 2.16.4
| |