Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1213950 > unrolled thread
| Started by | David Howells <dhowells@redhat.com> |
|---|---|
| First post | 2015-08-26 17:10 +0200 |
| Last post | 2015-08-26 23:30 +0200 |
| Articles | 2 — 2 participants |
Back to article view | Back to linux.kernel
[[RFC] PATCH] Documentation/Changes: Now need OpenSSL devel packages for module signing David Howells <dhowells@redhat.com> - 2015-08-26 17:10 +0200
Re: [[RFC] PATCH] Documentation/Changes: Now need OpenSSL devel packages for module signing Stephen Rothwell <sfr@canb.auug.org.au> - 2015-08-26 23:30 +0200
| From | David Howells <dhowells@redhat.com> |
|---|---|
| Date | 2015-08-26 17:10 +0200 |
| Subject | [[RFC] PATCH] Documentation/Changes: Now need OpenSSL devel packages for module signing |
| Message-ID | <q1KuS-Rx-17@gated-at.bofh.it> |
The module signing script (sign-file) used to be a wrapper around the openssl program. It has now been replaced by a C program that uses the crypto library from the OpenSSL package meaning that the OpenSSL devel packages are necessary to provide the devel library link and the header files. This would be openssl-devel on Fedora and libssl-dev on Debian. Reported-by: Stephen Rothwell <sfr@canb.auug.org.au> Signed-off-by: David Howells <dhowells@redhat.com> --- Documentation/Changes | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/Documentation/Changes b/Documentation/Changes index 646cdaa6e9d1..6d8863004858 100644 --- a/Documentation/Changes +++ b/Documentation/Changes @@ -43,6 +43,7 @@ o udev 081 # udevd --version o grub 0.93 # grub --version || grub-install --version o mcelog 0.6 # mcelog --version o iptables 1.4.2 # iptables -V +o openssl & libcrypto 1.0.1k # openssl version Kernel compilation @@ -79,6 +80,17 @@ BC You will need bc to build kernels 3.10 and higher +OpenSSL +------- + +Module signing and external certificate handling use the OpenSSL program and +crypto library to do key creation and signature generation. + +You will need openssl to build kernels 3.7 and higher if module signing is +enabled. You will also need openssl development packages to build kernels 4.3 +and higher. + + System utilities ================ @@ -295,6 +307,10 @@ Binutils -------- o <ftp://ftp.kernel.org/pub/linux/devel/binutils/> +OpenSSL +------- +o <https://www.openssl.org/> + System utilities **************** @@ -392,4 +408,3 @@ o <http://oprofile.sf.net/download/> NFS-Utils --------- o <http://nfs.sourceforge.net/> - -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
[toc] | [next] | [standalone]
| From | Stephen Rothwell <sfr@canb.auug.org.au> |
|---|---|
| Date | 2015-08-26 23:30 +0200 |
| Message-ID | <q1QqB-RP-1@gated-at.bofh.it> |
| In reply to | #1213950 |
Hi David, On Wed, 26 Aug 2015 16:00:33 +0100 David Howells <dhowells@redhat.com> wrote: > > The module signing script (sign-file) used to be a wrapper around the > openssl program. It has now been replaced by a C program that uses the > crypto library from the OpenSSL package meaning that the OpenSSL devel > packages are necessary to provide the devel library link and the header > files. > > This would be openssl-devel on Fedora and libssl-dev on Debian. > > Reported-by: Stephen Rothwell <sfr@canb.auug.org.au> > Signed-off-by: David Howells <dhowells@redhat.com> Looks good to me. Thanks for that. Acked-by: Stephen Rothwell <sfr@canb.auug.org.au> -- Cheers, Stephen Rothwell sfr@canb.auug.org.au -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
[toc] | [prev] | [standalone]
Back to top | Article view | linux.kernel
csiph-web