Commits · 059f3f2768a8bc460fe814e2bb4bc8cc3078c8ba · Linaro / landing-teams / qcomlt / migration / signlk

Nov 25, 2016
- signlk: make script executable · 059f3f27
  Nico Dechesne (Stage) authored 8 years ago
```
Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
```
  059f3f27
Nov 24, 2016

Nico Dechesne (Stage) authored 8 years ago


The script can now work with bash and POSIX shell (dash).

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>

ab61f20e

signlk: remove unset fields · 55e86bb4

Nico Dechesne (Stage) authored 8 years ago

Some fields in the certificate's DN might not be set (or might be empty). Newer
version of openssl (e.g. 1.1+) have a stricter DN parsing and fail to parse
empty (or too short) fields. For example, we can see such errors:

140708458570880:error:0D07A098:asn1 encoding routines:ASN1_mbstring_ncopy:string
too short:crypto/asn1/a_mbstr.c:102:minsize=1

Removing the empty (or short) fields fixes the openssl error, and XBL is still
able to authenticate the ELF file.

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>

55e86bb4

signlk: use -out when calling openssl · aa847803
Nico Dechesne (Stage) authored 8 years ago
```
Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
```
aa847803
signlk: do not clean tmpdir in debug mode · 4e25c5e7
Nico Dechesne (Stage) authored 8 years ago
```
Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
```
4e25c5e7

signlk: fixup parsing of 'du' · 8aab70a2

Nico Dechesne (Stage) authored 8 years ago


'du' utility from coreutils uses TAB for delimiter, not SPACE, make the parsing
more robust.

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>

8aab70a2

signlk: always invoke make for signer/signlk · 568e4cf7

Nico Dechesne (Stage) authored 8 years ago

Instead of checking if signer/signlk exists , let's unconditionally invoke the
makefile and let the makefile decide if anything need to be rebuilt. This makes
the script a bit more clear, and avoid issues if/when an old version of
signer/signlk might exist.

Also, keep the make output visible, in case something goes bad.

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>

568e4cf7

signlk: set -e · c0de95c4

Nico Dechesne (Stage) authored 8 years ago


* add 'set -e' to find errors throughout script execution

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>

c0de95c4

Nov 21, 2016
- signlk: add --debug option · af7d474d
  Nico Dechesne (Stage) authored 8 years ago
```
Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
```
  af7d474d
- Add support for 8096 to signlk signing tool · b5d5ada2
  Yossi Mansharoff authored 8 years ago and Nico Dechesne (Stage) committed 8 years ago
```
Change-Id: Ia40544ef4fab49ee5402e6f17589cc173f527e9d
```
  b5d5ada2
Nov 16, 2016

LK simple sign tool to work in non secure boot · 0ae7c954

Yossi Mansharoff authored 8 years ago and

Nico Dechesne (Stage) committed 8 years ago

Imported in git from

https://source.codeaurora.org/patches/quic/imm/PATCH_1694964_410c_signlk.tar.gz



Signed-off-by: Yossi Mansharoff <yossim@codeaurora.org>
Change-Id: Ia8823b78c4d9bbe901e6807d4ff03a29c1e496db
Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>

0ae7c954