Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
Sender: Valdis Kletnieks <valdis@vt.edu>
From:   "Valdis Kl=?utf-8?Q?=c4=93?=tnieks" <valdis.kletnieks@vt.edu>
To:     David Howells <dhowells@redhat.com>
Cc:     David Woodhouse <dwmw2@infradead.org>, keyrings@vger.kernel.org,
        linux-kernel@vger.kernel.org
Subject: Re: 'make O=' indigestion with module signing
In-Reply-To: <2026575.1615539696@warthog.procyon.org.uk>
References: <134696.1615510534@turing-police> <109018.1615463088@turing-police> <91190.1615444370@turing-police> <972381.1615459754@warthog.procyon.org.uk> <1486567.1615464259@warthog.procyon.org.uk>
 <2026575.1615539696@warthog.procyon.org.uk>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="==_Exmh_1615539999_20296P";
         micalg=pgp-sha1; protocol="application/pgp-signature"
Content-Transfer-Encoding: 7bit
Date:   Fri, 12 Mar 2021 04:06:39 -0500
Message-ID: <159991.1615539999@turing-police>
Precedence: bulk

--==_Exmh_1615539999_20296P
Content-Type: text/plain; charset=us-ascii

On Fri, 12 Mar 2021 09:01:36 +0000, David Howells said:

> Possibly I can add something like:
>
> 	clean-files := signing_key.pem x509.genkey
>
> inside the
>
> 	ifeq ($(CONFIG_MODULE_SIG_KEY),"certs/signing_key.pem")
> 	...
> 	endif

Would that remove them on a 'make clean', or only a 'make mrproper'?
The latter sounds like the correct solution to me, as the signing key should
have (roughly) the same lifetime rules as the .config file.

--==_Exmh_1615539999_20296P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Comment: Exmh version 2.9.0 11/07/2018
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=80QW
-----END PGP SIGNATURE-----

--==_Exmh_1615539999_20296P--