2015-02-16 13:07:06

by David Howells

Subject: [PATCH] MODSIGN: Change default key details

Change default key details to be more obviously unspecified.

Reported-by: Linus Torvalds <[email protected]>
Signed-off-by: David Howells <[email protected]>
---

kernel/Makefile | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/kernel/Makefile b/kernel/Makefile
index 1408b3353a3c..11efbfa542a9 100644
--- a/kernel/Makefile
+++ b/kernel/Makefile
@@ -195,9 +195,9 @@ x509.genkey:
@echo >>x509.genkey "x509_extensions = myexts"
@echo >>x509.genkey
@echo >>x509.genkey "[ req_distinguished_name ]"
- @echo >>x509.genkey "O = Magrathea"
- @echo >>x509.genkey "CN = Glacier signing key"
- @echo >>x509.genkey "emailAddress = [email protected]"
+ @echo >>x509.genkey "#O = Unspecified company"
+ @echo >>x509.genkey "CN = Build time autogenerated kernel key"
+ @echo >>x509.genkey "#emailAddress = [email protected]"
@echo >>x509.genkey
@echo >>x509.genkey "[ myexts ]"
@echo >>x509.genkey "basicConstraints=critical,CA:FALSE"

2015-02-20 00:49:58

by James Morris

Subject: Re: [PATCH] MODSIGN: Change default key details

On Mon, 16 Feb 2015, David Howells wrote:

> Change default key details to be more obviously unspecified.
>
> Reported-by: Linus Torvalds <[email protected]>
> Signed-off-by: David Howells <[email protected]>
> ---
>
> kernel/Makefile | 6 +++---
> 1 file changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/kernel/Makefile b/kernel/Makefile
> index 1408b3353a3c..11efbfa542a9 100644
> --- a/kernel/Makefile
> +++ b/kernel/Makefile
> @@ -195,9 +195,9 @@ x509.genkey:
> @echo >>x509.genkey "x509_extensions = myexts"
> @echo >>x509.genkey
> @echo >>x509.genkey "[ req_distinguished_name ]"
> - @echo >>x509.genkey "O = Magrathea"
> - @echo >>x509.genkey "CN = Glacier signing key"
> - @echo >>x509.genkey "emailAddress = [email protected]"
> + @echo >>x509.genkey "#O = Unspecified company"
> + @echo >>x509.genkey "CN = Build time autogenerated kernel key"
> + @echo >>x509.genkey "#emailAddress = [email protected]"
> @echo >>x509.genkey
> @echo >>x509.genkey "[ myexts ]"
> @echo >>x509.genkey "basicConstraints=critical,CA:FALSE"

Acked-by: James Morris <[email protected]>


--
James Morris
<[email protected]>

2015-02-20 01:15:58

by Sedat Dilek

Subject: Re: [PATCH] MODSIGN: Change default key details

Hi,

docs need some update, too?

Regards,
- Sedat -

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/tree/Documentation/module-signing.txt#n118