Skip to content

Commit

Permalink
modsign: change default key details
Browse files Browse the repository at this point in the history
Change default key details to be more obviously unspecified.

Reported-by: Linus Torvalds <[email protected]>
Signed-off-by: David Howells <[email protected]>
Acked-by: James Morris <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
  • Loading branch information
dhowells authored and torvalds committed Apr 30, 2015
1 parent 9263a06 commit 9c4249c
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 6 deletions.
6 changes: 3 additions & 3 deletions Documentation/module-signing.txt
Original file line number Diff line number Diff line change
Expand Up @@ -119,9 +119,9 @@ Most notably, in the x509.genkey file, the req_distinguished_name section
should be altered from the default:

[ req_distinguished_name ]
O = Magrathea
CN = Glacier signing key
emailAddress = [email protected]
#O = Unspecified company
CN = Build time autogenerated kernel key
#emailAddress = [email protected]

The generated RSA key size can also be set with:

Expand Down
6 changes: 3 additions & 3 deletions kernel/Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -197,9 +197,9 @@ x509.genkey:
@echo >>x509.genkey "x509_extensions = myexts"
@echo >>x509.genkey
@echo >>x509.genkey "[ req_distinguished_name ]"
@echo >>x509.genkey "O = Magrathea"
@echo >>x509.genkey "CN = Glacier signing key"
@echo >>x509.genkey "emailAddress = [email protected]"
@echo >>x509.genkey "#O = Unspecified company"
@echo >>x509.genkey "CN = Build time autogenerated kernel key"
@echo >>x509.genkey "#emailAddress = [email protected]"
@echo >>x509.genkey
@echo >>x509.genkey "[ myexts ]"
@echo >>x509.genkey "basicConstraints=critical,CA:FALSE"
Expand Down

0 comments on commit 9c4249c

Please sign in to comment.