Changeset b2787106

Timestamp:

02/06/2024 08:48:56 PM (4 months ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

12.1, ken/TL2024, lazarus, rahul/power-profiles-daemon, trunk, xry111/llvm18

Children:

7064886

Parents:

cb94e8a

git-author:

Xi Ruoyao <xry111@…> (02/05/2024 11:04:26 AM)

git-committer:

Xi Ruoyao <xry111@…> (02/06/2024 08:48:56 PM)

Message:

keyutils: Add more kernel configuration needed by the test suite, ...

and document a known failure due to the removal of SHA1 with RSA
signed certificate from the kernel.

Files:

• general/genlib/keyutils-test-kernel.xml (modified) (1 diff)
• general/genlib/keyutils.xml (modified) (1 diff)
• kernel-config/general/genlib/keyutils-test.toml (modified) (1 diff)

general/genlib/keyutils-test-kernel.xml

@@ -10 +10 @@
 
 -*- <emphasis role='blue'>C</emphasis>ryptographic API ---&gt;                                              [CRYPTO]
+  <emphasis role='blue'>P</emphasis>ublic-key cryptography ---&gt;
+    &lt;*/M&gt; <emphasis role='blue'>R</emphasis>SA (Rivest-Shamir-Adleman)                               [CRYPTO_RSA]
+  [*] <emphasis role='blue'>A</emphasis>symmetric (public-key cryptographic) key type ---&gt;  [ASYMMETRIC_KEY_TYPE]
+    &lt;*&gt; <emphasis role='blue'>A</emphasis>symmetric public-key crypto algorithm subtype
+                                            ...  [ASYMMETRIC_PUBLIC_KEY_SUBTYPE]
+    # If not built into the kernel, [SYSTEM_TRUSTED_KEYRING] won't show up;
+    # building as a module won't work:
+    &lt;*&gt;   <emphasis role='blue'>X</emphasis>.509 certificate parser                     [X509_CERTIFICATE_PARSER]
   <emphasis role='blue'>C</emphasis>ertificates for signature checking ---&gt;
     [*] <emphasis role='blue'>P</emphasis>rovide system-wide ring of trusted keys        [SYSTEM_TRUSTED_KEYRING]

general/genlib/keyutils.xml

@@ -119 +119 @@
       If <xref linkend='lsb-tools'/> is not installed, the test suite will
       output some lines complaining the <command>lsb_release</command>
-      command not available but it won't affect the test result.
+      command not available but it won't affect the test result.  One test
+      named <literal>TRY ADDING ASYMMETRIC KEYS</literal> is known to fail
+      due to the removal of the support for SHA1 with RSA signature
+      algorithm from Linux kernel version 6.7 <!-- commit 16ab7cb5825f -->
+      or newer.
     </para>
 

kernel-config/general/genlib/keyutils-test.toml

@@ -6 +6 @@
 SECONDARY_TRUSTED_KEYRING='*'
 SYSTEM_BLACKLIST_KEYRING='*'
+ASYMMETRIC_KEY_TYPE='*'
+ASYMMETRIC_PUBLIC_KEY_SUBTYPE='*'
+CRYPTO_RSA='*M'
+
+[X509_CERTIFICATE_PARSER]
+value = '*'
+comment = [
+  "If not built into the kernel, [SYSTEM_TRUSTED_KEYRING] won't show up;",
+  "building as a module won't work"
+]
 
 [CRYPTO_LIB_CHACHA20POLY1305]