Skip to content

KEYS fixes

Dmitry Kasatkin lkml 1 version Applied

Status from this message: Applied.

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest4 patches 13 repliesApplied

Patches in v1 Applied

#Subject and filesSizeRepliesApplied
1/4KEYS: handle error code encoded in pointercrypto/asymmetric_keys/asymmetric_type.c+2 -21 reply
2/4KEYS: provide pure subject key identifier (fingerprint) as key idcrypto/asymmetric_keys/asymmetric_type.c crypto/asymmetric_keys/x509_cert_parser.c crypto/asymmetric_keys/x509_parser.h +2 more+32 -21 reply
3/4module: search the key only by keyidkernel/module_signing.c+5 -119 replies
4/4integrity: do zero padding of the key idsecurity/integrity/digsig_asymmetric.c+1 -10 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/4] KEYS fixes

I reported yesterday problems with new KEYS.
Module signature verification is broken, integrity subsystem verification is broken, kernel oopses.

Here is few fixes.

- Dmitry

Dmitry Kasatkin (4):
KEYS: handle error code encoded in pointer
KEYS: provide pure subject key identifier (fingerprint) as key id
module: search the key only by keyid
integrity: do zero padding of the key id

 crypto/asymmetric_keys/asymmetric_type.c  | 27 ++++++++++++++++++++++++---
 crypto/asymmetric_keys/x509_cert_parser.c |  6 ++++++
 crypto/asymmetric_keys/x509_parser.h      |  1 +
 crypto/asymmetric_keys/x509_public_key.c  |  2 ++
 include/keys/asymmetric-type.h            |  2 +-
 kernel/module_signing.c                   | 16 +++++-----------
 security/integrity/digsig_asymmetric.c    |  2 +-
 7 files changed, 40 insertions(+), 16 deletions(-)
Signature · 1 line
1.9.1

Read the cover letter in its thread