tmakin/ack-tegra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Revert "crypto: pkcs7 - remove sha1 support"

Browse Source 
This reverts commit 16ab7cb582.

The original commit breaks the build as BoringSSL still only supports
SHA1, which the commit removed support for when signing kernel modules.
Until BoringSSL is fixed, this needs to be reverted :(

Bug: 316589225
Change-Id: I6a3de48b549779a26280f4e30a487dd6437d8a73
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
This commit is contained in:
Greg Kroah-Hartman
2023-12-15 16:57:17 +00:00
parent f418eba968
commit fa422bbb51
8 changed files with 107 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kernel/module/Kconfig
+5
View File
@@ -263,6 +263,10 @@ choice
possible to load a signed module containing the algorithm to check
the signature on that module.
config MODULE_SIG_SHA1
bool "Sign modules with SHA-1"
select CRYPTO_SHA1
config MODULE_SIG_SHA256
bool "Sign modules with SHA-256"
select CRYPTO_SHA256
@@ -292,6 +296,7 @@ endchoice
config MODULE_SIG_HASH
string
depends on MODULE_SIG || IMA_APPRAISE_MODSIG
default "sha1" if MODULE_SIG_SHA1
default "sha256" if MODULE_SIG_SHA256
default "sha384" if MODULE_SIG_SHA384
default "sha512" if MODULE_SIG_SHA512