diff options
| author | David Woodhouse | 2015-07-20 22:16:33 +0200 |
|---|---|---|
| committer | David Howells | 2015-08-12 18:01:01 +0200 |
| commit | 84706caae9e06363db4f956cde4f9715ce5c0ef3 (patch) | |
| tree | 282821472d398da61e41035646ab9a20085db816 /kernel/system_certificates.S | |
| parent | sign-file: Generate CMS message as signature instead of PKCS#7 (diff) | |
| download | kernel-qcow2-linux-84706caae9e06363db4f956cde4f9715ce5c0ef3.tar.gz kernel-qcow2-linux-84706caae9e06363db4f956cde4f9715ce5c0ef3.tar.xz kernel-qcow2-linux-84706caae9e06363db4f956cde4f9715ce5c0ef3.zip | |
extract-cert: Cope with multiple X.509 certificates in a single file
This is not required for the module signing key, although it doesn't do any
harm — it just means that any additional certs in the PEM file are also
trusted by the kernel.
But it does allow us to use the extract-cert tool for processing the extra
certs from CONFIG_SYSTEM_TRUSTED_KEYS, instead of that horrid awk|base64
hack.
Also cope with being invoked with no input file, creating an empty output
file as a result.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Diffstat (limited to 'kernel/system_certificates.S')
0 files changed, 0 insertions, 0 deletions