Re: [GIT PULL] MODSIGN: Use PKCS#7 for module signatures [ver #7]

2015-08-10 Thread James Morris
On Tue, 11 Aug 2015, David Howells wrote: > This is mentioned in the > > MODSIGN: Provide a utility to append a PKCS#7 signature to a module > > commit description. > > Note that the utility is written in C and must be linked against the > OpenSSL crypto library. > > Would it

Re: [GIT PULL] MODSIGN: Use PKCS#7 for module signatures [ver #7]

2015-08-10 Thread David Howells
James Morris wrote: > On Mon, 10 Aug 2015, David Howells wrote: > > > James Morris wrote: > > > > > I get a build failure: > > > > > > HOSTCC scripts/sign-file > > > scripts/sign-file.c:20:25: error: openssl/bio.h: No such file or directory > > > > > > followed by many lines of error. > >

Re: [GIT PULL] MODSIGN: Use PKCS#7 for module signatures [ver #7]

2015-08-10 Thread James Morris
On Mon, 10 Aug 2015, David Howells wrote: > James Morris wrote: > > > I get a build failure: > > > > HOSTCC scripts/sign-file > > scripts/sign-file.c:20:25: error: openssl/bio.h: No such file or directory > > > > followed by many lines of error. > > What openssl do you have installed and d

Re: [GIT PULL] MODSIGN: Use PKCS#7 for module signatures [ver #7]

2015-08-09 Thread David Howells
James Morris wrote: > I get a build failure: > > HOSTCC scripts/sign-file > scripts/sign-file.c:20:25: error: openssl/bio.h: No such file or directory > > followed by many lines of error. What openssl do you have installed and do you have the -devel packages for it installed? In particular

Re: [GIT PULL] MODSIGN: Use PKCS#7 for module signatures [ver #7]

2015-08-09 Thread James Morris
On Sat, 8 Aug 2015, David Howells wrote: > Hi James, > > Can you pull this into security/next please? Its aim is twofold: firstly, > make the module signatures of PKCS#7/CMS format rather than a home-brewed > format and secondly to pave the way for use of the signing code for > firmware signatur

[GIT PULL] MODSIGN: Use PKCS#7 for module signatures [ver #7]

2015-08-07 Thread David Howells
Hi James, Can you pull this into security/next please? Its aim is twofold: firstly, make the module signatures of PKCS#7/CMS format rather than a home-brewed format and secondly to pave the way for use of the signing code for firmware signatures (to follow later). To this end, the patchset effec