mirrors/meta-secure-core
1
0
Fork 0
mirror of https://github.com/jiazhang0/meta-secure-core.git synced 2026-07-16 12:47:00 +00:00
Code Issues Projects Releases Wiki Activity

scripts/create-user-key-store.sh: support to generate the user keys for modsign and extra system trusted key

Browse Source 
Signed-off-by: Jia Zhang <qianyue.zj@alibaba-inc.com>
This commit is contained in:
Jia Zhang
2017-11-21 09:29:33 -05:00
parent 56033f310f
commit a97b3363b6
1 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-signing-key/scripts/create-user-key-store.sh
+26
View File
@@ -97,6 +97,8 @@ MOK_SB_KEYS_DIR="$KEYS_DIR/mok_sb_keys"
SYSTEM_KEYS_DIR="$KEYS_DIR/system_trusted_keys"
IMA_KEYS_DIR="$KEYS_DIR/ima_keys"
RPM_KEYS_DIR="$KEYS_DIR/rpm_keys"
MODSIGN_KEYS_DIR="$KEYS_DIR/modsign_keys"
EXTRA_SYSTEM_KEYS_DIR="$KEYS_DIR/extra_system_trusted_keys"
pem2der() {
local src="$1"
@@ -190,6 +192,24 @@ create_system_user_key() {
"/CN=System Trusted Certificate/"
}
create_modsign_user_key() {
local key_dir="$MODSIGN_KEYS_DIR"
[ ! -d "$key_dir" ] && mkdir -p "$key_dir"
ca_sign "$key_dir" modsign_key "$key_dir" modsign_key \
"/CN=MODSIGN Certificate/"
}
create_extra_system_user_key() {
local key_dir="$EXTRA_SYSTEM_KEYS_DIR"
[ ! -d "$key_dir" ] && mkdir -p "$key_dir"
ca_sign "$key_dir" extra_system_trusted_key "$SYSTEM_KEYS_DIR" system_trusted_key \
"/CN=Extra System Trusted Certificate/"
}
create_ima_user_key() {
local key_dir="$IMA_KEYS_DIR"
@@ -277,6 +297,12 @@ create_user_keys() {
echo "Creating the user key for system"
create_system_user_key
echo "Creating the user key for system extra"
create_extra_system_user_key
echo "Creating the user key for modsign"
create_modsign_user_key
echo "Creating the user key for IMA appraisal"
create_ima_user_key