[v1] modsign: Add codeSigning EKU to the default

[PATCH v9,3/4] modsign: Add codeSigning EKU to the default

Lee, Chun-Yi posted 1 patch 3 years, 7 months ago

Diff against v1
Download mbox

certs/default_x509.genkey | 1 +
1 file changed, 1 insertion(+)

Expand all Fold all

[PATCH v9,3/4] modsign: Add codeSigning EKU to the default

Posted by Lee, Chun-Yi 3 years, 7 months ago

Add codeSigning EKU to the default X.509 key generation config for the
build time autogenerated kernel key.

Signed-off-by: "Lee, Chun-Yi" <jlee@suse.com>
---
 certs/default_x509.genkey | 1 +
 1 file changed, 1 insertion(+)

diff --git a/certs/default_x509.genkey b/certs/default_x509.genkey
index d4c6628cb8e5..53be501ce57a 100644
--- a/certs/default_x509.genkey
+++ b/certs/default_x509.genkey
@@ -15,3 +15,4 @@ basicConstraints=critical,CA:FALSE
 keyUsage=digitalSignature
 subjectKeyIdentifier=hash
 authorityKeyIdentifier=keyid
+extendedKeyUsage=codeSigning
-- 
2.26.2