summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* start of 0.9HEADmasterMatthew Vaught2019-04-101-1/+1
|
* prep for 0.8 releasev0.8Matthew Vaught2019-04-101-1/+1
|
* Merge pull request #31 from open-power/bofferdn-fix-double-deleteMatthew Vaught2019-04-101-2/+2
|\ | | | | Fix double delete bug when using OpenSSL v1.1 or higher
| * Fix double delete bug when using OpenSSL v1.1 or higherNick Bofferding2019-04-101-2/+2
|/ | | | | This commit fixes a problem wherein, in the verify_signature API, if OpenSSL version is 1.1 or higher, the call to ECDSA_SIG_set0 assigns memory ownership of R+S to the ECDSA signature, but then still frees them before calling ECDSA_SIG_free, leading to an application crash. Now, those frees will be inhibited in that path, and ECDSA_SIG_free will take care of reclaiming the memory instead. Signed-off-by: Nick Bofferding opensource@bofferding.net
* prep for 0.7 releasev0.7Matthew Vaught2019-03-051-1/+1
|
* Make commit log URL point to open-power repoMatthew Vaught2019-03-051-1/+1
|
* Merge pull request #29 from bofferdn/support-sw-flagsMatthew Vaught2019-03-041-1/+5
|\ | | | | Support setting software flags field in software header
| * Support setting software flags field in software headerNick Bofferding2019-03-041-1/+5
|/ | | | - Adds support to specify --sw-flags in crtSignedContainer.sh
* start of 0.7Dave Heller2018-09-251-1/+1
| | | | Signed-off-by: Dave Heller <hellerda@us.ibm.com>
* prep for 0.6 releasev0.6Dave Heller2018-09-251-1/+1
| | | | Signed-off-by: Dave Heller <hellerda@us.ibm.com>
* Revert: Change cmdline options --hwPrivKeyX to --hwKeyX (part 2)Dave Heller2018-09-201-0/+6
| | | | | | | | | | | This change is dependent on the related change to genPnorImages.pl in Hostboot, and although it's changed upstream, there are still active op-build machine configs that are locked to an older version. So it's unclear when this change can be finalized. For now I'm going to punt and allow the old cmdline options to still work, and continue to support both the new and deprecated cmdline options. Signed-off-by: Dave Heller <hellerda@us.ibm.com>
* Fix shellcheck warnings in build scriptsDave Heller2018-09-082-3/+7
| | | | Signed-off-by: Dave Heller <hellerda@us.ibm.com>
* Quash false positive code analyis warning in C codeDave Heller2018-09-081-0/+4
| | | | | | | Fix erroneous warning about scope of buf in print-container.c, by adding an unneeded but harmless init of its pointer in the surrounding scope. Signed-off-by: Dave Heller <hellerda@us.ibm.com>
* Sanitize boolean valuesDave Heller2018-09-021-1/+21
| | | | | | | | Make sure the value of any boolean configuration property is set to an acceptable string (True), or an empty string (False). This is safer and more robust. Signed-off-by: Dave Heller <hellerda@us.ibm.com>
* Change cmdline options --hwPrivKeyX to --hwKeyX (part 2)Dave Heller2018-08-281-6/+0
| | | | Signed-off-by: Dave Heller <hellerda@us.ibm.com>
* Make SB_KEEP_CACHE=false by defaultDave Heller2018-08-281-1/+1
| | | | | | | | It makes sense to do this for environments outside of op-build. Under op-build it's helpful to keep cache by default, so now will set it explicitly under op-build. Signed-off-by: Dave Heller <hellerda@us.ibm.com>
* Quash unnecessary messages to stdout from previous patchDave Heller2018-08-271-2/+2
| | | | Signed-off-by: Dave Heller <hellerda@us.ibm.com>
* Merge pull request #28 from hellerda/support-multiple-kmshellerda2018-08-271-43/+136
|\ | | | | Support multiple KMS in Production mode
| * Support multiple KMS in Production modeDave Heller2018-08-181-43/+136
|/ | | | | | | | | | This adds support for PKCS11 as an alternate key management system in place of signframework, and adds the configuation property SB_KMS and a new command line option --kms to select between them. If unset the default is "signframework". If set to "pkcs11" two additional configuration properties, specifying the token name and the shared library implementing the token, are recognized. These properties are set by environment, or via the INI under a new section [pkcs11].
* Merge pull request #27 from hellerda/support-inter-mode-import-pt2hellerda2018-07-061-104/+173
|\ | | | | Support inter-mode import (part 2)
| * Support inter-mode import (part 2)Dave Heller2018-07-051-104/+173
|/ | | | | | | | | This completes support for the the case where HW key signing is done standalone in Local or Independent mode, and the signatures are imported into Production mode. It also adds support for the opposite case, where HW key siging is done in Production mode and artifacts are imported and exported to FW key signing in Local mode. Refactors most of the keyfinder/sigfinder code in crtSignedContainer.sh.
* Merge pull request #26 from hellerda/support-inter-mode-importhellerda2018-06-211-54/+125
|\ | | | | Support inter-mode import
| * Support inter-mode importDave Heller2018-06-191-54/+125
|/ | | | | | | | | | | Supports the case where HW key signing is done standalone in Local or Independent mode, and the signatures are imported into Production mode. The use of "signing project" names, used previously in Production only, is now extended to Local or Independent mode. The HW key signer may set a "hw_signing_project_basename". If set, the export will be prepared for import to a Production mode process where the same project basename is in use. On import, signtool will pick up the artifacts generated by this basename.
* Fix a few more BEAM warningsDave Heller2018-06-191-9/+6
| | | | Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Fix a few BEAM warningsDave Heller2018-06-192-7/+8
| | | | Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Merge pull request #25 from hellerda/validate-ignore-remainderhellerda2018-06-172-11/+32
|\ | | | | Add --validate-ignore-remainder option to print-container
| * Add --validate-ignore-remainder option to print-containerDave Heller2018-05-132-11/+32
|/ | | | | | | | When --validate is requested the default behavior is to use the actual payload size for calculating the payload hash. With this option it will use the payload size from the container header and ignore any additional bytes following end of payload. Useful for validataing container files with padding after the payload.
* Merge pull request #24 from hellerda/dont-reuse-sigs-for-transhellerda2018-05-121-4/+11
|\ | | | | Don't reuse FW keys sigs for transition containers
| * Don't reuse FW keys sigs for transition containersDave Heller2018-04-241-4/+11
|/ | | | because SBKT and SBKTRAND are regenerated on each run
* Don't use cp -T option in shell scriptsDave Heller2018-04-171-1/+2
| | | | | | | because AIX doesn't like it. In this case, can get the same result by just deleting the destination directory first. Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Cleanup scratch container fileDave Heller2018-04-161-0/+7
| | | | | | | | If no --out is provide we use a scratch file for output container. But there is no reason to keep this; if the user wants a persistent file he can specify --out. Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Support config properties specific to key transitionDave Heller2018-03-311-0/+14
| | | | | | | | This adds config properties SB_VERIFY_TRANS and SB_PROJECT_INI_TRANS. If set, these take precedence over their non-_TRANS counterparts for the transistion 'to' container only (SBKTRAND). Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Quash a few more shellcheck warningsDave Heller2018-03-311-6/+6
| | | | Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Remove unused code to read properties directly from _defconfigDave Heller2018-03-311-15/+0
| | | | Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* start of 0.6Dave Heller2018-02-251-1/+1
|
* prep for 0.5 releasev0.5Dave Heller2018-02-251-1/+1
|
* Simplify code and fix a few clang warningsDave Heller2018-02-161-15/+10
| | | | Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Fix whitespaceDave Heller2018-02-161-16/+16
| | | | Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Minor shell adjustment to make crtSignedContainer.sh work on AIXDave Heller2018-02-091-3/+2
| | | | Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Fix bad malloc from commit 549bd6bDave Heller2018-02-091-1/+1
| | | | Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Don't use getopt_long() on AIXDave Heller2018-02-073-32/+181
| | | | | | | getopt_long() is not natively supported on AIX, so instead do a simple long-to-short option replacement in shell. See issue 14 Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Merge pull request #22 from hellerda/fix-cache-cleanuphellerda2018-02-041-9/+2
|\ | | | | Fix cache cleanup when archive import is used
| * Fix cache cleanup when archive import is usedDave Heller2018-01-281-9/+2
|/ | | | Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* start of 0.5Dave Heller2018-01-211-1/+1
|
* prep for 0.4 releasev0.4Dave Heller2018-01-211-1/+1
|
* Add bulkSign.sh for independent modeDave Heller2018-01-213-3/+123
| | | | | | | | A helper script to handle a batch of signing requests, in stand-alone operation, to be signed with the same set of keys. Useful for handling the multiple signing requests exported by op-build in independent mode. Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Move required program check below option processingDave Heller2018-01-201-7/+7
| | | | | | as to not interfere with the operation of help or usage. Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Remove dependence on 'xxd' (part 2)Dave Heller2018-01-202-18/+47
| | | | | | | | This patch removes the second dependency in crtSignedContainer.sh, in the generation of the payload hash, in Production mode. Now the .md files are generated by create-container instead. Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Remove dependence on 'xxd' (part 1)Dave Heller2018-01-201-2/+5
| | | | | | | | There is no 'xxd' command in AIX. This patch removes one of the two dependencies in crtSignedContainer.sh: in the is_key_raw() function. This is now done with a shell comparison instead. Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
* Add test keys to the projectDave Heller2018-01-1715-0/+334
| | | | Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
OpenPOWER on IntegriCloud