Juerg Haefliger e5a2e3c847 scripts/sign-file.c: Add support for signing with a raw signature
This patch adds support for signing a kernel module with a raw
detached PKCS#7 signature/message.

The signature is not converted and is simply appended to the module so
it needs to be in the right format. Using openssl, a valid signature can
be generated like this:
  $ openssl smime -sign -nocerts -noattr -binary -in <module> -inkey \
    <key> -signer <x509> -outform der -out <raw sig>

The resulting raw signature from the above command is (more or less)
identical to the raw signature that sign-file itself can produce like
this:
  $ scripts/sign-file -d <hash algo> <key> <x509> <module>

Signed-off-by: Juerg Haefliger <juerg.haefliger@hpe.com>
Signed-off-by: David Howells <dhowells@redhat.com>
2016-02-18 17:20:48 +00:00
..
2015-12-07 12:42:55 +01:00
2005-04-16 15:20:36 -07:00
2016-01-21 14:10:56 +11:00
2014-08-20 16:03:45 +02:00
2014-08-20 16:03:45 +02:00
2011-08-31 16:12:17 +02:00
2014-08-20 16:03:45 +02:00
2014-08-20 16:03:45 +02:00
2014-08-20 16:03:45 +02:00
2012-06-27 12:44:29 -07:00
2010-03-23 12:26:38 +01:00
2014-12-20 00:01:12 +01:00
2016-01-08 16:34:27 +01:00
2016-01-10 21:49:48 +01:00
2015-10-12 17:46:36 +01:00
2014-08-20 16:03:45 +02:00
2014-08-20 16:03:45 +02:00
2005-04-16 15:20:36 -07:00
2015-08-28 17:04:40 +02:00
2015-08-28 17:04:40 +02:00
2014-08-20 16:03:45 +02:00