[PATCH v8,3/4] modsign: Add codeSigning EKU when generating X.509 key generation config
From: Lee, Chun-Yi <hidden>
Date: 2021-05-24 02:16:53
Also in:
keyrings, lkml
Subsystem:
certificate handling, the rest · Maintainers:
David Howells, David Woodhouse, Linus Torvalds
Add codeSigning EKU to the X.509 key generation config for the build time autogenerated kernel key. Signed-off-by: "Lee, Chun-Yi" <jlee@suse.com> --- certs/Makefile | 1 + 1 file changed, 1 insertion(+)
diff --git a/certs/Makefile b/certs/Makefile
index 359239a0ee9e..278e83d23aeb 100644
--- a/certs/Makefile
+++ b/certs/Makefile@@ -99,6 +99,7 @@ $(obj)/x509.genkey: @echo >>$@ "keyUsage=digitalSignature" @echo >>$@ "subjectKeyIdentifier=hash" @echo >>$@ "authorityKeyIdentifier=keyid" + @echo >>$@ "extendedKeyUsage=codeSigning" endif # CONFIG_MODULE_SIG_KEY $(eval $(call config_filename,MODULE_SIG_KEY))
--
2.16.4