Skip to content
Snippets Groups Projects
Commit 55e86bb4 authored by Nico Dechesne (Stage)'s avatar Nico Dechesne (Stage)
Browse files

signlk: remove unset fields


Some fields in the certificate's DN might not be set (or might be empty). Newer
version of openssl (e.g. 1.1+) have a stricter DN parsing and fail to parse
empty (or too short) fields. For example, we can see such errors:

140708458570880:error:0D07A098:asn1 encoding routines:ASN1_mbstring_ncopy:string
too short:crypto/asn1/a_mbstr.c:102:minsize=1

Removing the empty (or short) fields fixes the openssl error, and XBL is still
able to authenticate the ELF file.

Signed-off-by: default avatarNicolas Dechesne <nicolas.dechesne@linaro.org>
parent aa847803
Branches 64bit
No related tags found
No related merge requests found
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment