linux-kernel - Re: [PATCH 1/3] X.509: Fix certificate gathering again

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <5566A53C.6020309@suse.cz>
Date:	Thu, 28 May 2015 13:18:52 +0800
From:	Michal Marek <mmarek@...e.cz>
To:	David Howells <dhowells@...hat.com>
CC:	torvalds@...ux-foundation.org, aricart@...nix.com,
	linux-kernel@...r.kernel.org, sedat.dilek@...il.com,
	keyrings@...ux-nfs.org, rusty@...tcorp.com.au,
	linux-security-module@...r.kernel.org, james.l.morris@...cle.com,
	dwmw2@...radead.org
Subject: Re: [PATCH 1/3] X.509: Fix certificate gathering again

Dne 27.5.2015 v 00:15 David Howells napsal(a):
> Hi Michal,
> 
> Could you have a look at the patch at the end of my branch:
> 
> 	http://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git/log/?h=modsign-pkcs7
> 
> It changes things from picking up arbitrary *.x509 files dropped in the kernel
> source and/or build directory to taking a single named PEM file with all the
> additional certs as a string config option.  The PEM file can contain multiple
> certs simply cat'd together.
> 
> If you're okay with that, it obsoletes these patches of yours.

I'm fine with the concept as it indeed solves the problem with the
wildcard matching for good. So please drop the patches that I posted.

The only issue is that the makefile expressions are a bit hairy. For
starters, we already have definitions for $(quote) and $(space) in
kbuild. I'll have a closer look at the config_filename macro and try to
simplify it somehow. But it's just cosmetics, the patch can be merged as
is for now.

Michal
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/