Use the DER-formatted system trusted key

Signed-off-by: Lans Zhang <jia.zhang@windriver.com>

1 files changed, 4 insertions, 3 deletions

diff --git a/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc b/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc
index 247ae55..2e636cf 100644
--- a/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc
+++ b/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc
@@ -11,9 +11,10 @@ SRC_URI += "\
 "
 
 do_configure_append() {
-    if [ -f "${STAGING_DIR_TARGET}${sysconfdir}/keys/system_trusted_key.pem" ]; then
-        openssl x509 -in "${STAGING_DIR_TARGET}${sysconfdir}/keys/system_trusted_key.pem" \
-            -outform DER -out "${B}/system_trusted_cert.x509"
+    cert="${STAGING_DIR_TARGET}${sysconfdir}/keys/system_trusted_key.der"
+
+    if [ -f "$cert" ]; then
+        install -m 0644 "$cert" "${B}/system_trusted_cert.x509"
     else
         true
     fi