[ima-evm-utils,v3,0/4] Update README and examples and add EC key support

Message

Stefan Berger April 26, 2023, 10:35 p.m. UTC

Update the README and add example scripts for RSA keys to use more up-to-date
values for key sizes and hash being used and adjust the OpenSSL config files so
that the created keys can be used with the .machine keyring. Add EC key and cert
support scripts and describe EC key and certificate generation in the README.

Regards,
   Stefan

Stefan Berger (4):
  Update default key sizes and hash to up-to-date values
  Update OpenSSL config files for support for .machine keyring
  Add openssl command line examples for creation of EC keys
  Add example scripts for EC key and certs generation

 Makefile.am                      |  8 ++++++-
 README                           | 41 +++++++++++++++++++++++++-------
 examples/ima-gen-local-ca-ecc.sh | 29 ++++++++++++++++++++++
 examples/ima-gen-local-ca.sh     |  4 ++--
 examples/ima-genkey-ecc.sh       | 34 ++++++++++++++++++++++++++
 examples/ima-genkey-self-ecc.sh  | 29 ++++++++++++++++++++++
 examples/ima-genkey-self.sh      |  4 ++--
 examples/ima-genkey.sh           |  5 ++--
 8 files changed, 139 insertions(+), 15 deletions(-)
 create mode 100755 examples/ima-gen-local-ca-ecc.sh
 create mode 100755 examples/ima-genkey-ecc.sh
 create mode 100755 examples/ima-genkey-self-ecc.sh

Comments

Mimi Zohar April 27, 2023, 2:21 p.m. UTC | #1

On Wed, 2023-04-26 at 18:35 -0400, Stefan Berger wrote:
> Update the README and add example scripts for RSA keys to use more up-to-date
> values for key sizes and hash being used and adjust the OpenSSL config files so
> that the created keys can be used with the .machine keyring. Add EC key and cert
> support scripts and describe EC key and certificate generation in the README.

Thanksb, Stefan.  The patches are now queued in next, next-testing.

Mimi