Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9c4249c8 authored by David Howells's avatar David Howells Committed by Linus Torvalds
Browse files

modsign: change default key details 



Change default key details to be more obviously unspecified.

Reported-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
Acked-by: default avatarJames Morris <james.l.morris@oracle.com>
Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
parent 9263a06a

Documentation/module-signing.txt

+3 −3
Original line number Diff line number Diff line
@@ -119,9 +119,9 @@ Most notably, in the x509.genkey file, the req_distinguished_name section 
should be altered from the default:



	[ req_distinguished_name ]

	O = Magrathea

	CN = Glacier signing key

	emailAddress = slartibartfast@magrathea.h2g2

	#O = Unspecified company

	CN = Build time autogenerated kernel key

	#emailAddress = unspecified.user@unspecified.company



The generated RSA key size can also be set with:

kernel/Makefile

+3 −3
Original line number Diff line number Diff line
@@ -197,9 +197,9 @@ x509.genkey: 
	@echo >>x509.genkey "x509_extensions = myexts"

	@echo >>x509.genkey

	@echo >>x509.genkey "[ req_distinguished_name ]"

	@echo >>x509.genkey "O = Magrathea"

	@echo >>x509.genkey "CN = Glacier signing key"

	@echo >>x509.genkey "emailAddress = slartibartfast@magrathea.h2g2"

	@echo >>x509.genkey "#O = Unspecified company"

	@echo >>x509.genkey "CN = Build time autogenerated kernel key"

	@echo >>x509.genkey "#emailAddress = unspecified.user@unspecified.company"

	@echo >>x509.genkey

	@echo >>x509.genkey "[ myexts ]"

	@echo >>x509.genkey "basicConstraints=critical,CA:FALSE"