ANDROID: GKI: defconfig: switch to MODULE_SIG_SHA256
Upstream has removed SHA-1 support for module signing so let's switch to
SHA-256. FWIW, we've been using this algorithm implicitly for a while
now anyway, as BoringSSL uses SHA-256 as a default in PKCS7_sign().
Cc: David Benjamin <davidben@google.com>
Fixes: 148519a063 ("module: Remove SHA-1 support for module signing")
Change-Id: Ifebdf11e46cb016c46dd4e160dade70fcc900a76
Signed-off-by: Carlos Llamas <cmllamas@google.com>
This commit is contained in:
1 parent
bf30c300c3
commit
cf2ac0f0dd
5 files changed
+5
-5
No files matched your search
@@ -9,5 +9,5 @@ CONFIG_RANDSTRUCT_NONE=y
|
||||
# CONFIG_SAMPLES is not set
|
||||
# CONFIG_WERROR is not set
|
||||
# CONFIG_MODULE_COMPRESS is not set
|
||||
CONFIG_MODULE_SIG_SHA1=y
|
||||
CONFIG_MODULE_SIG_SHA256=y
|
||||
# CONFIG_UAPI_HEADER_TEST is not set
|
||||
@@ -8,5 +8,5 @@ CONFIG_RANDSTRUCT_NONE=y
|
||||
# CONFIG_SAMPLES is not set
|
||||
# CONFIG_WERROR is not set
|
||||
# CONFIG_MODULE_COMPRESS is not set
|
||||
CONFIG_MODULE_SIG_SHA1=y
|
||||
CONFIG_MODULE_SIG_SHA256=y
|
||||
# CONFIG_UAPI_HEADER_TEST is not set
|
||||
@@ -104,7 +104,7 @@ CONFIG_GENDWARFKSYMS=y
|
||||
CONFIG_MODULE_SCMVERSION=y
|
||||
CONFIG_MODULE_SIG=y
|
||||
CONFIG_MODULE_SIG_PROTECT=y
|
||||
CONFIG_MODULE_SIG_SHA1=y
|
||||
CONFIG_MODULE_SIG_SHA256=y
|
||||
CONFIG_MODPROBE_PATH=""
|
||||
CONFIG_BLK_DEV_ZONED=y
|
||||
CONFIG_BLK_CGROUP_IOPRIO=y
|
||||
|
||||
@@ -9,5 +9,5 @@ CONFIG_RANDSTRUCT_NONE=y
|
||||
# CONFIG_SAMPLES is not set
|
||||
# CONFIG_WERROR is not set
|
||||
# CONFIG_MODULE_COMPRESS is not set
|
||||
CONFIG_MODULE_SIG_SHA1=y
|
||||
CONFIG_MODULE_SIG_SHA256=y
|
||||
# CONFIG_UAPI_HEADER_TEST is not set
|
||||
@@ -102,7 +102,7 @@ CONFIG_GENDWARFKSYMS=y
|
||||
CONFIG_MODULE_SCMVERSION=y
|
||||
CONFIG_MODULE_SIG=y
|
||||
CONFIG_MODULE_SIG_PROTECT=y
|
||||
CONFIG_MODULE_SIG_SHA1=y
|
||||
CONFIG_MODULE_SIG_SHA256=y
|
||||
CONFIG_MODPROBE_PATH=""
|
||||
CONFIG_BLK_DEV_ZONED=y
|
||||
CONFIG_BLK_CGROUP_IOPRIO=y
|
||||
|
||||
Reference in new issue
Block a user