certificate handling · Maintained

Maintainers

• M David Howells <dhowells@redhat.com>
• M David Woodhouse <dwmw2@infradead.org>

Paths

• F Documentation/admin-guide/module-signing.rst
• F certs/
• F scripts/sign-file.c
• F scripts/ssl-common.h
• F tools/certs/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-crypto (capped at 30), ordered by date desc.

• STALE83d [PATCH v2 16/19] crypto: convert exported symbols in architecture-independent crypto to pluggable symbols
  2026-04-18 · Jay Wang <hidden>
• STALE113d [PATCH v4 1/3] crypto: pkcs7: add flag for validated trust on a signed info block
  2026-03-19 · James Bottomley <James.Bottomley@HansenPartnership.com>
• STALE127d [PATCH v3 1/5] certs: break out pkcs7 check into its own function
  2026-02-25 · James Bottomley <James.Bottomley@HansenPartnership.com>
• STALE148d [PATCH 032/106] crypto: convert exported crypto symbol into pluggable interface for CONFIG_ASYMMETRIC_KEY_TYPE crypto
  2026-02-12 · Jay Wang <hidden>
• STALE152d [PATCH v16 6/7] modsign: Enable ML-DSA module signing
  2026-02-02 · David Howells <dhowells@redhat.com>
• STALE157d Re: [PATCH v15 6/7] modsign: Enable ML-DSA module signing
  2026-02-02 · David Howells <dhowells@redhat.com>
• STALE157d RE: [PATCH v15 6/7] modsign: Enable ML-DSA module signing
  2026-02-01 · Michael Kelley <hidden>
• STALE157d REVIEWED: 5 (5M) [PATCH v15 6/7] modsign: Enable ML-DSA module signing
  2026-01-26 · David Howells <dhowells@redhat.com>
• STALE165d [PATCH v14 5/5] modsign: Enable ML-DSA module signing
  2026-01-21 · David Howells <dhowells@redhat.com>
• STALE167d REVIEWED: 1 (0M) [PATCH v13 09/12] modsign: Enable RSASSA-PSS module signing
  2026-01-20 · David Howells <dhowells@redhat.com>
• STALE167d [PATCH v13 05/12] modsign: Enable ML-DSA module signing
  2026-01-20 · David Howells <dhowells@redhat.com>
• STALE166d REVIEWED: 1 (0M) [PATCH v12 09/10] modsign: Enable RSASSA-PSS module signing
  2026-01-15 · David Howells <dhowells@redhat.com>
• STALE166d [PATCH v12 05/10] modsign: Enable ML-DSA module signing
  2026-01-15 · David Howells <dhowells@redhat.com>
• STALE183d [PATCH v11 8/8] modsign: Enable RSASSA-PSS module signing
  2026-01-05 · David Howells <dhowells@redhat.com>
• STALE183d [PATCH v11 4/8] modsign: Enable ML-DSA module signing
  2026-01-05 · David Howells <dhowells@redhat.com>
• STALE226d [PATCH v2 1/5] certs: break out pkcs7 check into its own function
  2025-11-26 · James Bottomley <James.Bottomley@HansenPartnership.com>
• STALE228d [PATCH v10 8/8] modsign: Enable ML-DSA module signing
  2025-11-20 · David Howells <dhowells@redhat.com>
• STALE227d [PATCH v9 9/9] modsign: Enable ML-DSA module signing
  2025-11-17 · David Howells <dhowells@redhat.com>
• DORMANTno replies [PATCH v8 9/9] modsign: Enable ML-DSA module signing
  2025-11-14 · David Howells <dhowells@redhat.com>
• STALE240d [PATCH v7 8/8] modsign: Enable ML-DSA module signing
  2025-11-07 · David Howells <dhowells@redhat.com>
• STALE246d [PATCH v6 17/17] modsign: Enable ML-DSA module signing
  2025-10-17 · David Howells <dhowells@redhat.com>
• STALE284d [PATCH RFC 009/104] certs/system_keyring: export restrict_link_by_builtin_*trusted
  2025-09-04 · Vegard Nossum <hidden>
• STALE364d [PATCH RFC 4/4] crypto/sm2: support SM2-with-SM3 verification of X.509 certificates
  2025-06-30 · Gu Bowen <hidden>
• STALE473d [RFC PATCH v3 01/13] certs: Remove CONFIG_INTEGRITY_PLATFORM_KEYRING check
  2024-10-17 · Eric Snowberg <eric.snowberg@oracle.com>
• STALE473d [RFC PATCH v3 07/13] keys: Add ability to track intended usage of the public key
  2024-10-17 · Eric Snowberg <eric.snowberg@oracle.com>
• STALE473d [RFC PATCH v3 02/13] certs: Introduce ability to link to a system key
  2024-10-17 · Eric Snowberg <eric.snowberg@oracle.com>
• STALE473d [RFC PATCH v3 06/13] clavis: Populate clavis keyring acl with kernel module signature
  2024-10-17 · Eric Snowberg <eric.snowberg@oracle.com>
• STALE629d [RFC 4/5] sign-file: Add -i option to sign initramfs images
  2024-10-15 · Jeremy Linton <hidden>
• STALE629d [RFC 2/5] KEYS/certs: Start the builtin key and cert system earlier
  2024-10-15 · Jeremy Linton <hidden>
• STALE644d [PATCH v3 14/14] KEYS: Introduce load_pgp_public_keyring()
  2024-09-11 · Roberto Sassu <hidden>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE166d [PATCH v12 05/10] modsign: Enable ML-DSA module signing
  2026-01-15 · David Howells <dhowells@redhat.com>
• STALE152d [PATCH v16 6/7] modsign: Enable ML-DSA module signing
  2026-02-02 · David Howells <dhowells@redhat.com>
• STALE148d [PATCH 032/106] crypto: convert exported crypto symbol into pluggable interface for CONFIG_ASYMMETRIC_KEY_TYPE crypto
  2026-02-12 · Jay Wang <hidden>
• STALE127d [PATCH v3 1/5] certs: break out pkcs7 check into its own function
  2026-02-25 · James Bottomley <James.Bottomley@HansenPartnership.com>
• STALE113d [PATCH v4 1/3] crypto: pkcs7: add flag for validated trust on a signed info block
  2026-03-19 · James Bottomley <James.Bottomley@HansenPartnership.com>
• STALE83d [PATCH v2 16/19] crypto: convert exported symbols in architecture-independent crypto to pluggable symbols
  2026-04-18 · Jay Wang <hidden>