mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git
synced 2024-12-29 17:22:07 +00:00
certs: simplify $(srctree)/ handling and remove config_filename macro
The complex macro, config_filename, was introduced to do: [1] drop double-quotes from the string value [2] add $(srctree)/ prefix in case the file is not found in $(objtree) [3] escape spaces and more [1] will be more generally handled by Kconfig later. As for [2], Kbuild uses VPATH to search for files in $(objtree), $(srctree) in this order. GNU Make can natively handle it. As for [3], converting $(space) to $(space_escape) back and forth looks questionable to me. It is well-known that GNU Make cannot handle file paths with spaces in the first place. Instead of using the complex macro, use $< so it will be expanded to the file path of the key. Remove config_filename, finally. Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
This commit is contained in:
parent
4db9c2e3d0
commit
b8c96a6b46
@ -15,15 +15,12 @@ endif
|
|||||||
quiet_cmd_extract_certs = CERT $@
|
quiet_cmd_extract_certs = CERT $@
|
||||||
cmd_extract_certs = scripts/extract-cert $(2) $@
|
cmd_extract_certs = scripts/extract-cert $(2) $@
|
||||||
|
|
||||||
ifeq ($(CONFIG_SYSTEM_TRUSTED_KEYRING),y)
|
|
||||||
|
|
||||||
$(eval $(call config_filename,SYSTEM_TRUSTED_KEYS))
|
|
||||||
|
|
||||||
$(obj)/system_certificates.o: $(obj)/x509_certificate_list
|
$(obj)/system_certificates.o: $(obj)/x509_certificate_list
|
||||||
|
|
||||||
$(obj)/x509_certificate_list: scripts/extract-cert $(SYSTEM_TRUSTED_KEYS_SRCPREFIX)$(SYSTEM_TRUSTED_KEYS_FILENAME) FORCE
|
CONFIG_SYSTEM_TRUSTED_KEYS := $(CONFIG_SYSTEM_TRUSTED_KEYS:"%"=%)
|
||||||
$(call if_changed,extract_certs,$(SYSTEM_TRUSTED_KEYS_SRCPREFIX)$(CONFIG_SYSTEM_TRUSTED_KEYS))
|
|
||||||
endif # CONFIG_SYSTEM_TRUSTED_KEYRING
|
$(obj)/x509_certificate_list: $(CONFIG_SYSTEM_TRUSTED_KEYS) scripts/extract-cert FORCE
|
||||||
|
$(call if_changed,extract_certs,$(if $(CONFIG_SYSTEM_TRUSTED_KEYS),$<,""))
|
||||||
|
|
||||||
targets += x509_certificate_list
|
targets += x509_certificate_list
|
||||||
|
|
||||||
@ -72,29 +69,26 @@ $(obj)/x509.genkey:
|
|||||||
|
|
||||||
endif # CONFIG_MODULE_SIG_KEY
|
endif # CONFIG_MODULE_SIG_KEY
|
||||||
|
|
||||||
$(eval $(call config_filename,MODULE_SIG_KEY))
|
CONFIG_MODULE_SIG_KEY := $(CONFIG_MODULE_SIG_KEY:"%"=%)
|
||||||
|
|
||||||
# If CONFIG_MODULE_SIG_KEY isn't a PKCS#11 URI, depend on it
|
# If CONFIG_MODULE_SIG_KEY isn't a PKCS#11 URI, depend on it
|
||||||
ifeq ($(patsubst pkcs11:%,%,$(firstword $(MODULE_SIG_KEY_FILENAME))),$(firstword $(MODULE_SIG_KEY_FILENAME)))
|
ifneq ($(filter-out pkcs11:%, %(CONFIG_MODULE_SIG_KEY)),)
|
||||||
X509_DEP := $(MODULE_SIG_KEY_SRCPREFIX)$(MODULE_SIG_KEY_FILENAME)
|
X509_DEP := $(CONFIG_MODULE_SIG_KEY)
|
||||||
endif
|
endif
|
||||||
|
|
||||||
$(obj)/system_certificates.o: $(obj)/signing_key.x509
|
$(obj)/system_certificates.o: $(obj)/signing_key.x509
|
||||||
|
|
||||||
$(obj)/signing_key.x509: scripts/extract-cert $(X509_DEP) FORCE
|
$(obj)/signing_key.x509: $(X509_DEP) scripts/extract-cert FORCE
|
||||||
$(call if_changed,extract_certs,$(MODULE_SIG_KEY_SRCPREFIX)$(CONFIG_MODULE_SIG_KEY))
|
$(call if_changed,extract_certs,$(if $(X509_DEP),$<,$(CONFIG_MODULE_SIG_KEY)))
|
||||||
endif # CONFIG_MODULE_SIG
|
endif # CONFIG_MODULE_SIG
|
||||||
|
|
||||||
targets += signing_key.x509
|
targets += signing_key.x509
|
||||||
|
|
||||||
ifeq ($(CONFIG_SYSTEM_REVOCATION_LIST),y)
|
|
||||||
|
|
||||||
$(eval $(call config_filename,SYSTEM_REVOCATION_KEYS))
|
|
||||||
|
|
||||||
$(obj)/revocation_certificates.o: $(obj)/x509_revocation_list
|
$(obj)/revocation_certificates.o: $(obj)/x509_revocation_list
|
||||||
|
|
||||||
$(obj)/x509_revocation_list: scripts/extract-cert $(SYSTEM_REVOCATION_KEYS_SRCPREFIX)$(SYSTEM_REVOCATION_KEYS_FILENAME) FORCE
|
CONFIG_SYSTEM_REVOCATION_KEYS := $(CONFIG_SYSTEM_REVOCATION_KEYS:"%"=%)
|
||||||
$(call if_changed,extract_certs,$(SYSTEM_REVOCATION_KEYS_SRCPREFIX)$(CONFIG_SYSTEM_REVOCATION_KEYS))
|
|
||||||
endif
|
$(obj)/x509_revocation_list: $(CONFIG_SYSTEM_REVOCATION_KEYS) scripts/extract-cert FORCE
|
||||||
|
$(call if_changed,extract_certs,$(if $(CONFIG_SYSTEM_REVOCATION_KEYS),$<,""))
|
||||||
|
|
||||||
targets += x509_revocation_list
|
targets += x509_revocation_list
|
||||||
|
@ -195,53 +195,6 @@ why = \
|
|||||||
echo-why = $(call escsq, $(strip $(why)))
|
echo-why = $(call escsq, $(strip $(why)))
|
||||||
endif
|
endif
|
||||||
|
|
||||||
###############################################################################
|
|
||||||
#
|
|
||||||
# When a Kconfig string contains a filename, it is suitable for
|
|
||||||
# passing to shell commands. It is surrounded by double-quotes, and
|
|
||||||
# any double-quotes or backslashes within it are escaped by
|
|
||||||
# backslashes.
|
|
||||||
#
|
|
||||||
# This is no use for dependencies or $(wildcard). We need to strip the
|
|
||||||
# surrounding quotes and the escaping from quotes and backslashes, and
|
|
||||||
# we *do* need to escape any spaces in the string. So, for example:
|
|
||||||
#
|
|
||||||
# Usage: $(eval $(call config_filename,FOO))
|
|
||||||
#
|
|
||||||
# Defines FOO_FILENAME based on the contents of the CONFIG_FOO option,
|
|
||||||
# transformed as described above to be suitable for use within the
|
|
||||||
# makefile.
|
|
||||||
#
|
|
||||||
# Also, if the filename is a relative filename and exists in the source
|
|
||||||
# tree but not the build tree, define FOO_SRCPREFIX as $(srctree)/ to
|
|
||||||
# be prefixed to *both* command invocation and dependencies.
|
|
||||||
#
|
|
||||||
# Note: We also print the filenames in the quiet_cmd_foo text, and
|
|
||||||
# perhaps ought to have a version specially escaped for that purpose.
|
|
||||||
# But it's only cosmetic, and $(patsubst "%",%,$(CONFIG_FOO)) is good
|
|
||||||
# enough. It'll strip the quotes in the common case where there's no
|
|
||||||
# space and it's a simple filename, and it'll retain the quotes when
|
|
||||||
# there's a space. There are some esoteric cases in which it'll print
|
|
||||||
# the wrong thing, but we don't really care. The actual dependencies
|
|
||||||
# and commands *do* get it right, with various combinations of single
|
|
||||||
# and double quotes, backslashes and spaces in the filenames.
|
|
||||||
#
|
|
||||||
###############################################################################
|
|
||||||
#
|
|
||||||
define config_filename
|
|
||||||
ifneq ($$(CONFIG_$(1)),"")
|
|
||||||
$(1)_FILENAME := $$(subst \\,\,$$(subst \$$(quote),$$(quote),$$(subst $$(space_escape),\$$(space),$$(patsubst "%",%,$$(subst $$(space),$$(space_escape),$$(CONFIG_$(1)))))))
|
|
||||||
ifneq ($$(patsubst /%,%,$$(firstword $$($(1)_FILENAME))),$$(firstword $$($(1)_FILENAME)))
|
|
||||||
else
|
|
||||||
ifeq ($$(wildcard $$($(1)_FILENAME)),)
|
|
||||||
ifneq ($$(wildcard $$(srctree)/$$($(1)_FILENAME)),)
|
|
||||||
$(1)_SRCPREFIX := $(srctree)/
|
|
||||||
endif
|
|
||||||
endif
|
|
||||||
endif
|
|
||||||
endif
|
|
||||||
endef
|
|
||||||
#
|
|
||||||
###############################################################################
|
###############################################################################
|
||||||
|
|
||||||
# delete partially updated (i.e. corrupted) files on error
|
# delete partially updated (i.e. corrupted) files on error
|
||||||
|
Loading…
Reference in New Issue
Block a user