Change default key details to be more obviously unspecified.
Reported-by: Linus Torvalds <[email protected]>
Signed-off-by: David Howells <[email protected]>
---
kernel/Makefile | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/kernel/Makefile b/kernel/Makefile
index 1408b3353a3c..11efbfa542a9 100644
--- a/kernel/Makefile
+++ b/kernel/Makefile
@@ -195,9 +195,9 @@ x509.genkey:
@echo >>x509.genkey "x509_extensions = myexts"
@echo >>x509.genkey
@echo >>x509.genkey "[ req_distinguished_name ]"
- @echo >>x509.genkey "O = Magrathea"
- @echo >>x509.genkey "CN = Glacier signing key"
- @echo >>x509.genkey "emailAddress = [email protected]"
+ @echo >>x509.genkey "#O = Unspecified company"
+ @echo >>x509.genkey "CN = Build time autogenerated kernel key"
+ @echo >>x509.genkey "#emailAddress = [email protected]"
@echo >>x509.genkey
@echo >>x509.genkey "[ myexts ]"
@echo >>x509.genkey "basicConstraints=critical,CA:FALSE"
On Mon, 16 Feb 2015, David Howells wrote:
> Change default key details to be more obviously unspecified.
>
> Reported-by: Linus Torvalds <[email protected]>
> Signed-off-by: David Howells <[email protected]>
> ---
>
> kernel/Makefile | 6 +++---
> 1 file changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/kernel/Makefile b/kernel/Makefile
> index 1408b3353a3c..11efbfa542a9 100644
> --- a/kernel/Makefile
> +++ b/kernel/Makefile
> @@ -195,9 +195,9 @@ x509.genkey:
> @echo >>x509.genkey "x509_extensions = myexts"
> @echo >>x509.genkey
> @echo >>x509.genkey "[ req_distinguished_name ]"
> - @echo >>x509.genkey "O = Magrathea"
> - @echo >>x509.genkey "CN = Glacier signing key"
> - @echo >>x509.genkey "emailAddress = [email protected]"
> + @echo >>x509.genkey "#O = Unspecified company"
> + @echo >>x509.genkey "CN = Build time autogenerated kernel key"
> + @echo >>x509.genkey "#emailAddress = [email protected]"
> @echo >>x509.genkey
> @echo >>x509.genkey "[ myexts ]"
> @echo >>x509.genkey "basicConstraints=critical,CA:FALSE"
Acked-by: James Morris <[email protected]>
--
James Morris
<[email protected]>
Hi,
docs need some update, too?
Regards,
- Sedat -
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/tree/Documentation/module-signing.txt#n118