Received-SPF: pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 2620:137:e000::3:7 as permitted sender) client-ip=2620:137:e000::3:7;
From:   Brian Norris <briannorris@chromium.org>
To:     linux-wireless@vger.kernel.org
Cc:     Chen-Yu Tsai <wens@kernel.org>, wireless-regdb@lists.infradead.org,
        Brian Norris <briannorris@chromium.org>
Subject: [PATCH] wireless-regdb: Makefile: Reproducible signatures
Date:   Thu, 16 Nov 2023 14:18:16 -0800
Message-ID: <20231116221828.301564-1-briannorris@chromium.org>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: bulk

Per openssl-mime(1):

       -noattr
	   Normally when a message is signed a set of attributes are
	   included which include the signing time and supported
	   symmetric algorithms. With this option they are not included.

The signing time hurts reproducibility, even if the same database, key,
and certificate are used.

So, drop the extra attributes from the smime command.

Signed-off-by: Brian Norris <briannorris@chromium.org>
---

 Makefile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Makefile b/Makefile
index 02176ec7b717..ecd23309efb6 100644
--- a/Makefile
+++ b/Makefile
@@ -69,6 +69,7 @@ regulatory.db.p7s: regulatory.db $(REGDB_PRIVKEY) $(REGDB_PUBCERT)
 		-signer $(REGDB_PUBCERT) \
 		-inkey $(REGDB_PRIVKEY) \
 		-in $< -nosmimecap -binary \
+		-noattr \
 		-outform DER -out $@
 
 sha1sum.txt: db.txt
-- 
2.43.0.rc0.421.g78406f8d94-goog