lkml.org 
[lkml]   [2015]   [May]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    SubjectRe: [PATCH] MODSIGN: Change default key details [ver #2]
    From
    On Sat, May 2, 2015 at 2:46 AM, Abelardo Ricart III <aricart@memnix.com> wrote:
    > endif
    >
    > -signing_key.priv signing_key.x509: x509.genkey
    > +signing_key.priv signing_key.x509: | x509.genkey

    Hmm. Thinking some more about this, I'm not entirely convinced.

    With this change, if we change kernel/Makefile to have a different
    keysigning authority etc, it won't re-generate the keys, because the
    old keys still exist. No? That would be wrong.

    I'd much rather see "x509.genkey" be generated with a move-if-changed
    pattern, so that it only changes if (a) it didn't exist before or (b)
    it actually has new content.

    On a tangentially related issue: I figured out why I get those (very
    annoying) "X.509 certificate list changed" messages. I made it print
    out *what* changed:

    X.509 certificate list changed from ./signing_key.x509 to signing_key.x509

    Note the "./" difference.

    Linus


    \
     
     \ /
      Last update: 2015-05-04 04:21    [W:2.372 / U:0.056 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site