linux/meta-secure-core.git/meta-signing-key, branch thud

fix sbsigningtool SRC_URI

2021-08-24T01:19:32+00:00

The SRC_URI git://kernel.ubuntu.com/jk/sbsigntool no longer exists. I've updated the SRC_URI to point to the new location.

key-store: rename ima private key and certificate on target

2018-11-07T06:22:47+00:00

If sample keys are selected, key-store service will deploy IMA private key during first boot, but beople may be confused if we deploy a sample private key like "xxx.crt", so this commit is making sure key/cert on target are consistent with key files on build system. Signed-off-by: Yunguo Wei

meta-signing-key: When deploying keys UEFI keys, deploy DER format

2018-10-25T15:03:40+00:00

Generally speaking, for firmware to import PK/KEK/DB keys they need to be in the binary "DER" format and typically have the "cer" file extension. When deploying our keys, convert what we have to that format and deploy as well for ease of use. Signed-off-by: Tom Rini

libsign: Fix build failure with GCC 8.x

2018-10-08T11:14:22+00:00

Signed-off-by: Yunguo Wei

layer.conf: update LAYERSERIES_COMPAT `sumo' -> `thud'

2018-10-08T06:47:47+00:00

Since `9ec5a8a layer.conf: Drop sumo from LAYERSERIES_CORENAMES' and `9867924 layer.conf: Add thud to LAYERSERIES_CORENAMES' applied in oe-core, update LAYERSERIES_COMPAT `sumo' -> `thud' Signed-off-by: Hongxu Jia

Clean up the stuffs for stable branches

2018-09-21T01:21:37+00:00

The following commits are reverted by the way: - seloader: Fix building for rocko (bc6bbe2) - meta-integrity: rpm: Add back in required patches for rocko (5fa9c85) Because they are only applicable to rocko. Signed-off-by: Jia Zhang

libsign: Fix build faiure due to -fstack-protector-strong

2018-09-18T03:21:43+00:00

SECURITY_LDFLAGS includes -fstack-protector-strong which cannot work with CCLD. To work around this issue, filter out it from LDFLAGS. Signed-off-by: Jia Zhang

libsign: Update to the latest

2018-09-18T03:21:41+00:00

- Use CCLD to build executable and library. Signed-off-by: Jia Zhang

key-store: fix incorrect postpone to first boot

2018-09-05T10:53:58+00:00

After postinst was executed at do_rootfs successfully, there will be no first boot to redo. Since `229f4e9 package.bbclass: add support for pkg_postinst_ontarget()' applied in oe-core, use pkg_postinst_ontarget to instead. Signed-off-by: Hongxu Jia

libsign: Enable nativesdk support

2018-08-25T00:14:56+00:00

Bump up to the current top of libsign so that we can easily get a copy of selsign that can be put into an SDK. Signed-off-by: Tom Rini