lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Thu, 25 Aug 2022 22:23:13 +0800 From: "Lee, Chun-Yi" <joeyli.kernel@...il.com> To: David Howells <dhowells@...hat.com> Cc: Herbert Xu <herbert@...dor.apana.org.au>, "David S . Miller" <davem@...emloft.net>, Ben Boeckel <me@...boeckel.net>, Randy Dunlap <rdunlap@...radead.org>, Malte Gell <malte.gell@....de>, Varad Gautam <varad.gautam@...e.com>, Jarkko Sakkinen <jarkko@...nel.org>, Mimi Zohar <zohar@...ux.ibm.com>, keyrings@...r.kernel.org, linux-crypto@...r.kernel.org, linux-kernel@...r.kernel.org, "Lee, Chun-Yi" <jlee@...e.com> Subject: [PATCH v9,3/4] modsign: Add codeSigning EKU to the default Add codeSigning EKU to the default X.509 key generation config for the build time autogenerated kernel key. Signed-off-by: "Lee, Chun-Yi" <jlee@...e.com> --- certs/default_x509.genkey | 1 + 1 file changed, 1 insertion(+) diff --git a/certs/default_x509.genkey b/certs/default_x509.genkey index d4c6628cb8e5..53be501ce57a 100644 --- a/certs/default_x509.genkey +++ b/certs/default_x509.genkey @@ -15,3 +15,4 @@ basicConstraints=critical,CA:FALSE keyUsage=digitalSignature subjectKeyIdentifier=hash authorityKeyIdentifier=keyid +extendedKeyUsage=codeSigning -- 2.26.2
Powered by blists - more mailing lists