diff mbox series

[v9,3/4] modsign: Add codeSigning EKU to the default

Message ID 20220825142314.8406-4-jlee@suse.com (mailing list archive)
State New
Headers show
Series Check codeSigning extended key usage extension | expand

Commit Message

Lee, Chun-Yi Aug. 25, 2022, 2:23 p.m. UTC 
Add codeSigning EKU to the default X.509 key generation config for the
build time autogenerated kernel key.

Signed-off-by: "Lee, Chun-Yi" <jlee@suse.com>
---
 certs/default_x509.genkey | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/certs/default_x509.genkey b/certs/default_x509.genkey
index d4c6628cb8e5..53be501ce57a 100644
--- a/certs/default_x509.genkey
+++ b/certs/default_x509.genkey
@@ -15,3 +15,4 @@  basicConstraints=critical,CA:FALSE
 keyUsage=digitalSignature
 subjectKeyIdentifier=hash
 authorityKeyIdentifier=keyid
+extendedKeyUsage=codeSigning