Tom Rini a8419d577a meta-integrity, meta-signing-key: Populate the secondary keyring ...

Currently we provide a secondary trusted key that is signed by the
primary key.  We do not however DER encode this certificate.  Update
the key-store recipe to also make a DER encoding of this certificate and
include it in the same package as the PEM version of the certificate.
In the IMA init script, if we have any secondary certificate in a DER
encoding, load them into the secondary keyring before we try and load
the IMA keys.

Signed-off-by: Tom Rini <trini@konsulko.com>

2018-05-17 20:36:23 +08:00

..

files

meta-integrity, meta-signing-key: Populate the secondary keyring

2018-05-17 20:36:23 +08:00

initrdscripts-ima.bb

meta-integrity: init.ima: Switch to using keyctl

2018-05-17 20:36:23 +08:00