Re: [PATCH 00/20] MODSIGN: Use PKCS#7 for module signatures [ver #5]

2015-05-28 Thread David Howells
David Howells wrote: > Additionally, the last four patches are provisionally added to support > firmware The last five, that is. David -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majord...@vger.kernel.org More majordomo info at http

Re: [PATCH 00/20] MODSIGN: Use PKCS#7 for module signatures [ver #5]

2015-05-28 Thread David Woodhouse
On Thu, 2015-05-28 at 16:46 +0100, David Howells wrote: > > Additionally, the last four patches are provisionally added to support > firmware > signing, but will need further modification (ie. registration of OIDs) before > they can be committed, but are included for comment: I'd quite like to s

[PATCH 00/20] MODSIGN: Use PKCS#7 for module signatures [ver #5]

2015-05-28 Thread David Howells
Here's a set of patches that does the following: (1) Extracts both parts of an X.509 AuthorityKeyIdentifier (AKID) extension. We already extract the bit that can match the subjectKeyIdentifier (SKID) of the parent X.509 cert, but we currently ignore the bits that can match the iss