David Howells 283e8ba2df MODSIGN: Change from CMS to PKCS#7 signing if the openssl is too old ... The sign-file.c program actually uses CMS rather than PKCS#7 to sign a file since that allows the target X.509 certificate to be specified by subjectKeyId rather than by issuer + serialNumber. However, older versions of the OpenSSL crypto library (such as may be found in CentOS 5.11) don't support CMS. Assume everything prior to OpenSSL-1.0.0 doesn't support CMS and switch to using PKCS#7 in that case. Further, the pre-1.0.0 OpenSSL only supports PKCS#7 signing with SHA1, so give an error from the sign-file script if the caller requests anything other than SHA1. The compiler gives the following error with an OpenSSL crypto library that's too old: HOSTCC scripts/sign-file scripts/sign-file.c:23:25: fatal error: openssl/cms.h: No such file or directory #include <openssl/cms.h> Reported-by: Vinson Lee <vlee@twopensource.com> Signed-off-by: David Howells <dhowells@redhat.com> Acked-by: David Woodhouse <David.Woodhouse@intel.com>		2015-09-25 16:31:46 +01:00
..
basic	kbuild: fixdep: drop meaningless hash table initialization	2015-08-24 16:36:08 +02:00
coccinelle	Merge branch 'akpm' (patches from Andrew)	2015-09-08 17:52:23 -07:00
dtc	scripts/dtc: Update to upstream version 9d3649bd3be245c9	2015-04-29 17:17:27 -05:00
gdb	scripts/gdb: remove useless global instruction	2015-06-30 19:44:58 -07:00
genksyms	genksyms: Regenerate parser	2015-08-20 14:57:47 +02:00
kconfig	Merge branch 'kconfig' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild	2015-09-08 14:17:38 -07:00
ksymoops	…
mod	Merge branch 'kbuild' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild	2015-09-08 14:12:19 -07:00
package	deb-pkg: add source package	2015-09-04 11:25:03 +02:00
selinux	selinux: explicitly declare the role "base_r"	2015-07-13 13:32:00 -04:00
tracing	…
.gitignore	scripts: add extract-cert and sign-file to .gitignore	2015-08-27 03:59:11 +10:00
Kbuild.include	Merge branch 'kbuild' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild	2015-09-08 14:12:19 -07:00
Lindent	scripts/Lindent: handle missing indent gracefully	2015-09-04 16:54:41 -07:00
Makefile	modsign: Use extract-cert to process CONFIG_SYSTEM_TRUSTED_KEYS	2015-08-12 17:01:01 +01:00
Makefile.asm-generic	…
Makefile.build	…
Makefile.clean	…
Makefile.dtbinst	…
Makefile.extrawarn	kbuild: Fix clang detection	2015-09-04 13:14:10 +02:00
Makefile.fwinst	…
Makefile.headersinst	…
Makefile.help	…
Makefile.host	…
Makefile.kasan	kasan: Makefile: shut up warnings if CONFIG_COMPILE_TEST=y	2015-04-17 09:03:59 -04:00
Makefile.lib	…
Makefile.modbuiltin	…
Makefile.modinst	modsign: Abort modules_install when signing fails	2015-08-07 16:26:13 +01:00
Makefile.modpost	…
Makefile.modsign	…
analyze_suspend.py	…
asn1_compiler.c	ASN.1: Copy string names to tokens in ASN.1 compiler	2015-08-07 16:26:13 +01:00
bloat-o-meter	…
bootgraph.pl	…
check_extable.sh	…
checkincludes.pl	…
checkkconfigsymbols.py	scripts/checkkconfigsymbols.py: support default statements	2015-08-03 17:16:58 -07:00
checkpatch.pl	checkpatch: add constant comparison on left side test	2015-09-10 13:29:01 -07:00
checkstack.pl	…
checksyscalls.sh	x86/asm/entry: Move the arch/x86/syscalls/ definitions to arch/x86/entry/syscalls/	2015-06-04 07:37:37 +02:00
checkversion.pl	…
cleanfile	…
cleanpatch	…
coccicheck	…
config	…
conmakehash.c	…
decode_stacktrace.sh	scripts: decode_stacktrace: fix ARM architecture decoding	2015-09-04 16:54:41 -07:00
decodecode	…
depmod.sh	…
diffconfig	…
docproc.c	…
export_report.pl	…
extract-cert.c	KEYS: Remove unnecessary header #inclusions from extract-cert.c	2015-09-25 16:31:45 +01:00
extract-ikconfig	…
extract-vmlinux	…
gcc-goto.sh	…
gcc-ld	…
gcc-version.sh	…
gcc-x86_32-has-stack-protector.sh	…
gcc-x86_64-has-stack-protector.sh	…
gen_initramfs_list.sh	…
get_maintainer.pl	get_maintainer: fix perl 5.22/5.24 deprecated/incompatible "\C" use	2015-06-25 17:00:39 -07:00
gfp-translate	…
headerdep.pl	…
headers.sh	…
headers_check.pl	…
headers_install.sh	…
kallsyms.c	…
kernel-doc	kerneldoc: Convert error messages to GNU error message format	2015-09-04 16:54:41 -07:00
kernel-doc-xml-ref	scripts/kernel-doc: Adding cross-reference links to html documentation.	2015-08-16 22:11:16 -06:00
ld-version.sh	…
link-vmlinux.sh	scripts: link-vmlinux: Don't pass page offset to kallsyms if XIP Kernel	2015-05-21 19:17:44 +08:00
makelst	…
markup_oops.pl	…
mkcompile_h	…
mkmakefile	…
mksysmap	mksysmap: Add h8300 local symbol pattern	2015-06-23 13:35:47 +09:00
mkuboot.sh	…
mkversion	…
module-common.lds	…
namespace.pl	…
objdiff	…
patch-kernel	…
pnmtologo.c	…
profile2linkerlist.pl	…
recordmcount.c	…
recordmcount.h	…
recordmcount.pl	…
setlocalversion	…
show_delta	…
sign-file.c	MODSIGN: Change from CMS to PKCS#7 signing if the openssl is too old	2015-09-25 16:31:46 +01:00
sortextable.c	ARCv2: extable: Enable sorting at build time	2015-06-22 14:06:56 +05:30
sortextable.h	…
spelling.txt	scripts/spelling.txt: add some typo-words	2015-09-04 16:54:41 -07:00
stackdelta	scripts: add stackdelta script	2015-08-28 17:04:40 +02:00
stackusage	scripts: add stackusage script	2015-08-28 17:04:40 +02:00
tags.sh	Merge branch 'misc' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild	2015-09-08 14:23:13 -07:00
unifdef.c	…
ver_linux	…
xen-hypercalls.sh	…
xz_wrap.sh	…