Carlos Llamas
cf2ac0f0dd
Upstream has removed SHA-1 support for module signing so let's switch to
SHA-256. FWIW, we've been using this algorithm implicitly for a while
now anyway, as BoringSSL uses SHA-256 as a default in PKCS7_sign().
Cc: David Benjamin <davidben@google.com>
Fixes: 148519a063 ("module: Remove SHA-1 support for module signing")
Change-Id: Ifebdf11e46cb016c46dd4e160dade70fcc900a76
Signed-off-by: Carlos Llamas <cmllamas@google.com>
13 lines
374 B
Plaintext
13 lines
374 B
Plaintext
# CONFIG_AFS_FS is not set
|
|
# CONFIG_AF_RXRPC is not set
|
|
# CONFIG_BPFILTER is not set
|
|
# CONFIG_BUILTIN_MODULE_RANGES is not set
|
|
# CONFIG_RANDSTRUCT is not set
|
|
# CONFIG_RANDSTRUCT_FULL is not set
|
|
CONFIG_RANDSTRUCT_NONE=y
|
|
# CONFIG_SAMPLES is not set
|
|
# CONFIG_WERROR is not set
|
|
# CONFIG_MODULE_COMPRESS is not set
|
|
CONFIG_MODULE_SIG_SHA256=y
|
|
# CONFIG_UAPI_HEADER_TEST is not set
|