Received: by 2002:a05:6a10:22f:0:0:0:0 with SMTP id 15csp4920514pxk; Wed, 30 Sep 2020 15:39:42 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwaxfVcJCDrLL+P2d7HNhyzoCTceHddtU5mgRTXH3zGjoesmrTRB8NcWCWk6xFzNgvBpMzD X-Received: by 2002:a50:ccd2:: with SMTP id b18mr5168194edj.51.1601505582446; Wed, 30 Sep 2020 15:39:42 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1601505582; cv=none; d=google.com; s=arc-20160816; b=Jg1QwCOJIj8JsRIetGtAND7469tsi1pl1Ily8xLpbhJfvYRwHNbBnI7Rqj8wYEaanI L9sl6iOmAsSfWx4vvMmu+uWQ5dzOks0LBYlGCJiitkVeWpYlGEQwkUEEw7McmqO4uI53 RlCjxa8aVdBevzQqSwasXCfHbGovLTH+B//K+LAdaWTLMqZEOGc2BCn3RtpN/zJhVxWh SKApZGGmFh2YH4mteyv6sKZL0IWwiN3I4CxL/XsNmRUwjDw8H6VoEy5VBA1m2ogXanB0 KqjmBSUa37K/2fcUSfvpDMo9Z4u989uWYs1fn1u7IivGKfo0sFy7evxQv5cwVAU5afRt DK0A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:organization:in-reply-to:content-disposition :mime-version:references:message-id:subject:cc:to:from:date :ironport-sdr:ironport-sdr; bh=oCpF1HVHrCEk7ePm/aLYDvv425OHq0zPowbnuCraZYA=; b=vt5FV7wMvDZ2JfnRAkF42hy1fJX250vmHhAsZymNN150DKy88gFzhdIDo5gL1c5IfJ Sk0bsR7SF5ZbHkUiY4Kjekxqo8Q35JFxAp+Ra39059vMylLSBPCvIaJ1rdUe/Qqxd36p DE0ZeNvZSoJDv0TITOT2nVtaVof/XxJOFg+mPDbMSrZsU7XRW1e3Nm+SsrOn5j1ipPqF lqKr6Ly3PrcmYO8OmtJu9XLzqYnj0fBNQsA0akdqhrEMS3q6DE2ThmwG5JnLdQEXb+ei sJIV43/vKbwarHs1NRFmfd5nhFxAQYRHoghJbWdq4N5Njb3X6rQmsXvQJq+rE5zGg63z bITQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id i12si2053760edq.481.2020.09.30.15.38.48; Wed, 30 Sep 2020 15:39:42 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1730337AbgI3U4r (ORCPT + 99 others); Wed, 30 Sep 2020 16:56:47 -0400 Received: from mga18.intel.com ([134.134.136.126]:23369 "EHLO mga18.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725355AbgI3U4r (ORCPT ); Wed, 30 Sep 2020 16:56:47 -0400 IronPort-SDR: AJl9ciYXw0qOSSmN0V0F308+LwT2qcbP5eZ6nDHJAXd/JlAQ7GBMrjJ/AXPD3ccLRG9SM7K4iL KtTGBqKq4XtQ== X-IronPort-AV: E=McAfee;i="6000,8403,9760"; a="150330719" X-IronPort-AV: E=Sophos;i="5.77,322,1596524400"; d="scan'208";a="150330719" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga004.jf.intel.com ([10.7.209.38]) by orsmga106.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 30 Sep 2020 13:56:36 -0700 IronPort-SDR: NvHGGDOzZoP91MVYUOUobGsMZj1qT7PVfHbGfh4LD92FMd0LIPFhQFtiomI3NKWS1J8Wzry1r0 cF157TIG2B2A== X-IronPort-AV: E=Sophos;i="5.77,322,1596524400"; d="scan'208";a="457805822" Received: from petrescv-mobl1.ger.corp.intel.com (HELO localhost) ([10.249.36.73]) by orsmga004-auth.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 30 Sep 2020 13:56:33 -0700 Date: Wed, 30 Sep 2020 23:56:31 +0300 From: Jarkko Sakkinen To: Eric Snowberg Cc: dhowells@redhat.com, dwmw2@infradead.org, masahiroy@kernel.org, michal.lkml@markovi.net, keyrings@vger.kernel.org, linux-kernel@vger.kernel.org, linux-kbuild@vger.kernel.org Subject: Re: [PATCH 2/2] certs: Add ability to preload revocation certs Message-ID: <20200930205631.GA65339@linux.intel.com> References: <20200930201508.35113-1-eric.snowberg@oracle.com> <20200930201508.35113-3-eric.snowberg@oracle.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20200930201508.35113-3-eric.snowberg@oracle.com> Organization: Intel Finland Oy - BIC 0357606-4 - Westendinkatu 7, 02160 Espoo Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Sep 30, 2020 at 04:15:08PM -0400, Eric Snowberg wrote: > Add a new Kconfig option called SYSTEM_REVOCATION_KEYS. If set, > this option should be the filename of a PEM-formated file containing > X.509 certificates to be included in the default blacklist keyring. > > Signed-off-by: Eric Snowberg Acked-by: Jarkko Sakkinen /Jarkko