diff --git a/meta-integrity/recipes-support/ima-evm-utils/ima-evm-utils/0001-libimaevm-retrieve-correct-algo-for-v2-signature.patch b/meta-integrity/recipes-support/ima-evm-utils/ima-evm-utils/0001-libimaevm-retrieve-correct-algo-for-v2-signature.patch new file mode 100644 index 0000000..25957c1 --- /dev/null +++ b/meta-integrity/recipes-support/ima-evm-utils/ima-evm-utils/0001-libimaevm-retrieve-correct-algo-for-v2-signature.patch @@ -0,0 +1,26 @@ +From c740d114ca213ece820da39ce2ce99fc4d6ae5c7 Mon Sep 17 00:00:00 2001 +From: Yunguo Wei +Date: Thu, 10 Oct 2019 16:40:21 +0800 +Subject: [PATCH] libimaevm: retrieve correct algo for v2 signature + +Signed-off-by: Yunguo Wei +--- + src/libimaevm.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/libimaevm.c b/src/libimaevm.c +index 7c17bf4..3586e02 100644 +--- a/src/libimaevm.c ++++ b/src/libimaevm.c +@@ -939,7 +939,7 @@ static int sign_hash_v2(const char *algo, const unsigned char *hash, + if (!EVP_PKEY_sign_init(ctx)) + goto err; + st = "EVP_get_digestbyname"; +- if (!(md = EVP_get_digestbyname(imaevm_params.hash_algo))) ++ if (!(md = EVP_get_digestbyname(algo))) + goto err; + st = "EVP_PKEY_CTX_set_signature_md"; + if (!EVP_PKEY_CTX_set_signature_md(ctx, md)) +-- +2.7.4 + diff --git a/meta-integrity/recipes-support/ima-evm-utils/ima-evm-utils_git.bb b/meta-integrity/recipes-support/ima-evm-utils/ima-evm-utils_git.bb index bc98ce6..46722b8 100644 --- a/meta-integrity/recipes-support/ima-evm-utils/ima-evm-utils_git.bb +++ b/meta-integrity/recipes-support/ima-evm-utils/ima-evm-utils_git.bb @@ -10,6 +10,7 @@ SRC_URI = "\ file://0001-Don-t-build-man-pages.patch \ file://0001-Install-evmctl-to-sbindir-rather-than-bindir.patch \ file://0001-ima-evm-utils-include-sys-types.h-in-header-to-fix-b.patch \ + file://0001-libimaevm-retrieve-correct-algo-for-v2-signature.patch \ " SRCREV = "3eab1f93b634249c1720f65fcb495b1996f0256e"