Jan Stancek 467d60eddf sign-file,extract-cert: avoid using deprecated ERR_get_error_line() ...

ERR_get_error_line() is deprecated since OpenSSL 3.0.

Use ERR_peek_error_line() instead, and combine display_openssl_errors()
and drain_openssl_errors() to a single function where parameter decides
if it should consume errors silently.

Signed-off-by: Jan Stancek <jstancek@redhat.com>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Tested-by: R Nageswara Sastry <rnsastry@linux.ibm.com>
Reviewed-by: Neal Gompa <neal@gompa.dev>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>

2024-09-20 19:49:52 +03:00

..

.gitignore

certs: fix and refactor CONFIG_SYSTEM_BLACKLIST_HASH_LIST build

2022-06-15 21:52:32 +03:00

blacklist_hashes.c

certs: unify blacklist_hashes.c and blacklist_nohashes.c

2022-07-27 21:17:59 +09:00

blacklist.c

certs: don't try to update blacklist keys

2023-02-13 10:11:20 +02:00

blacklist.h

certs: Add EFI_CERT_X509_GUID support for dbx entries

2021-03-11 16:31:28 +00:00

check-blacklist-hashes.awk

certs: move scripts/check-blacklist-hashes.awk to certs/

2022-07-27 21:17:59 +09:00

default_x509.genkey

certs: check-in the default x509 config file

2021-12-11 22:09:14 +09:00

extract-cert.c

sign-file,extract-cert: avoid using deprecated ERR_get_error_line()

2024-09-20 19:49:52 +03:00

Kconfig

This update includes the following changes:

2023-11-02 16:15:30 -10:00

Makefile

sign-file,extract-cert: move common SSL helper functions to a header

2024-09-20 19:49:52 +03:00

revocation_certificates.S

certs: Add ability to preload revocation certs

2021-03-11 16:33:49 +00:00

system_certificates.S

certs: include certs/signing_key.x509 unconditionally

2022-03-03 08:16:19 +09:00

system_keyring.c

certs: Reference revocation list for all keyrings

2023-08-17 20:12:41 +00:00