diff options
| author | David Woodhouse | 2015-07-20 22:16:30 +0200 |
|---|---|---|
| committer | David Howells | 2015-08-07 17:26:14 +0200 |
| commit | fb1179499134bc718dc7557c7a6a95dc72f224cb (patch) | |
| tree | 5a0b7e87708c275071f4c3079099854a13eee812 /Makefile | |
| parent | modsign: Extract signing cert from CONFIG_MODULE_SIG_KEY if needed (diff) | |
| download | kernel-qcow2-linux-fb1179499134bc718dc7557c7a6a95dc72f224cb.tar.gz kernel-qcow2-linux-fb1179499134bc718dc7557c7a6a95dc72f224cb.tar.xz kernel-qcow2-linux-fb1179499134bc718dc7557c7a6a95dc72f224cb.zip | |
modsign: Use single PEM file for autogenerated key
The current rule for generating signing_key.priv and signing_key.x509 is
a classic example of a bad rule which has a tendency to break parallel
make. When invoked to create *either* target, it generates the other
target as a side-effect that make didn't predict.
So let's switch to using a single file signing_key.pem which contains
both key and certificate. That matches what we do in the case of an
external key specified by CONFIG_MODULE_SIG_KEY anyway, so it's also
slightly cleaner.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Diffstat (limited to 'Makefile')
| -rw-r--r-- | Makefile | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -1173,8 +1173,8 @@ MRPROPER_DIRS += include/config usr/include include/generated \ arch/*/include/generated .tmp_objdiff MRPROPER_FILES += .config .config.old .version .old_version \ Module.symvers tags TAGS cscope* GPATH GTAGS GRTAGS GSYMS \ - signing_key.priv signing_key.x509 x509.genkey \ - extra_certificates signing_key.x509.keyid \ + signing_key.pem signing_key.priv signing_key.x509 \ + x509.genkey extra_certificates signing_key.x509.keyid \ signing_key.x509.signer vmlinux-gdb.py # clean - Delete most, but leave enough to build external modules |