ANDROID: GKI: defconfig: switch to MODULE_SIG_SHA256

Upstream has removed SHA-1 support for module signing so let's switch to
SHA-256. FWIW, we've been using this algorithm implicitly for a while
now anyway, as BoringSSL uses SHA-256 as a default in PKCS7_sign().

Cc: David Benjamin <davidben@google.com>
Fixes: 148519a063 ("module: Remove SHA-1 support for module signing")
Change-Id: Ifebdf11e46cb016c46dd4e160dade70fcc900a76
Signed-off-by: Carlos Llamas <cmllamas@google.com>
This commit is contained in:
Carlos Llamas authored and Treehugger Robot committed 2026-03-09 12:21:26 -07:00
1 parent bf30c300c3
commit cf2ac0f0dd
5 files changed
+5 -5

No files matched your search

+1 -1
View File
@@ -9,5 +9,5 @@ CONFIG_RANDSTRUCT_NONE=y
# CONFIG_SAMPLES is not set
# CONFIG_WERROR is not set
# CONFIG_MODULE_COMPRESS is not set
CONFIG_MODULE_SIG_SHA1=y
CONFIG_MODULE_SIG_SHA256=y
# CONFIG_UAPI_HEADER_TEST is not set
+1 -1
View File
@@ -8,5 +8,5 @@ CONFIG_RANDSTRUCT_NONE=y
# CONFIG_SAMPLES is not set
# CONFIG_WERROR is not set
# CONFIG_MODULE_COMPRESS is not set
CONFIG_MODULE_SIG_SHA1=y
CONFIG_MODULE_SIG_SHA256=y
# CONFIG_UAPI_HEADER_TEST is not set
+1 -1
View File
@@ -104,7 +104,7 @@ CONFIG_GENDWARFKSYMS=y
CONFIG_MODULE_SCMVERSION=y
CONFIG_MODULE_SIG=y
CONFIG_MODULE_SIG_PROTECT=y
CONFIG_MODULE_SIG_SHA1=y
CONFIG_MODULE_SIG_SHA256=y
CONFIG_MODPROBE_PATH=""
CONFIG_BLK_DEV_ZONED=y
CONFIG_BLK_CGROUP_IOPRIO=y
+1 -1
View File
@@ -9,5 +9,5 @@ CONFIG_RANDSTRUCT_NONE=y
# CONFIG_SAMPLES is not set
# CONFIG_WERROR is not set
# CONFIG_MODULE_COMPRESS is not set
CONFIG_MODULE_SIG_SHA1=y
CONFIG_MODULE_SIG_SHA256=y
# CONFIG_UAPI_HEADER_TEST is not set
+1 -1
View File
@@ -102,7 +102,7 @@ CONFIG_GENDWARFKSYMS=y
CONFIG_MODULE_SCMVERSION=y
CONFIG_MODULE_SIG=y
CONFIG_MODULE_SIG_PROTECT=y
CONFIG_MODULE_SIG_SHA1=y
CONFIG_MODULE_SIG_SHA256=y
CONFIG_MODPROBE_PATH=""
CONFIG_BLK_DEV_ZONED=y
CONFIG_BLK_CGROUP_IOPRIO=y