lkml.org 
[lkml]   [2021]   [May]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH v7,3/4] modsign: Add codeSigning EKU when generating X.509 key generation config
    Date
    Add codeSigning EKU to the X.509 key generation config for the build time
    autogenerated kernel key.

    Signed-off-by: "Lee, Chun-Yi" <jlee@suse.com>
    ---
    certs/Makefile | 1 +
    1 file changed, 1 insertion(+)

    diff --git a/certs/Makefile b/certs/Makefile
    index 359239a0ee9e..278e83d23aeb 100644
    --- a/certs/Makefile
    +++ b/certs/Makefile
    @@ -99,6 +99,7 @@ $(obj)/x509.genkey:
    @echo >>$@ "keyUsage=digitalSignature"
    @echo >>$@ "subjectKeyIdentifier=hash"
    @echo >>$@ "authorityKeyIdentifier=keyid"
    + @echo >>$@ "extendedKeyUsage=codeSigning"
    endif # CONFIG_MODULE_SIG_KEY

    $(eval $(call config_filename,MODULE_SIG_KEY))
    --
    2.16.4
    \
     
     \ /
      Last update: 2021-05-21 11:44    [W:3.349 / U:1.100 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site