Messages in this thread | | | Subject | Re: [PATCH] MODSIGN: Change default key details [ver #2] | From | Abelardo Ricart III <> | Date | Tue, 05 May 2015 18:44:28 -0400 |
| |
On Tue, 2015-05-05 at 15:34 +0100, David Howells wrote: > Abelardo Ricart III <aricart@memnix.com> wrote: > > > Here's a (barely tested) patch to show what I mean with the config option. > > The > > default case is to always generate a new key at build > > (MODULE_SIG_BUILDGEN=y) > > and fallback on generating keys during build only if one doesn't exist > > (MODULE_SIG_BUILDGEN=n). > > Does it cope with randconfig? > > David
Well it would only depend on MODULE_SIG, and switching it on and off again would do exactly what it says it's going to do: either regenerate the signing keys every time, or don't if they already exist.
I would have to actually change the logic slightly so it works strictly as intended though. So no, this isn't merge-able at all.
I was more wondering if implementing something to this effect would be okay, so we can strictly define the behavior at build time (no surprises).
| |