Masahiro Yamada e06a61a89c certs: use if_changed to re-generate the key when the key type is changed ...

If the key type of the existing signing key does not match to
CONFIG_MODULE_SIG_KEY_TYPE_*, the Makefile removes it so that it is
re-generated.

Use if_changed so that the key is re-generated when the key type is
changed (that is, the openssl command line is changed).

Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>

2021-12-11 22:09:14 +09:00

..

.gitignore

.gitignore: prefix local generated files with a slash

2021-05-02 00:43:35 +09:00

blacklist_hashes.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

blacklist_nohashes.c

certs/blacklist_nohashes.c: fix const confusion in certs blacklist

2018-02-21 15:35:43 -08:00

blacklist.c

certs: Add ability to preload revocation certs

2021-03-11 16:33:49 +00:00

blacklist.h

certs: Add EFI_CERT_X509_GUID support for dbx entries

2021-03-11 16:31:28 +00:00

common.c

certs: Move load_system_certificate_list to a common function

2021-03-11 16:32:38 +00:00

common.h

certs: Move load_system_certificate_list to a common function

2021-03-11 16:32:38 +00:00

default_x509.genkey

certs: check-in the default x509 config file

2021-12-11 22:09:14 +09:00

Kconfig

certs: move the 'depends on' to the choice of module signing keys

2021-12-11 22:09:14 +09:00

Makefile

certs: use if_changed to re-generate the key when the key type is changed

2021-12-11 22:09:14 +09:00

revocation_certificates.S

certs: Add ability to preload revocation certs

2021-03-11 16:33:49 +00:00

system_certificates.S

ima: ensure IMA_APPRAISE_MODSIG has necessary dependencies

2021-04-26 21:54:23 -04:00

system_keyring.c

integrity-v5.13

2021-05-01 15:32:18 -07:00