Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | IMA: refresh kernel cfg | Lans Zhang | 2017-06-26 | 7 | -23/+22 |
| | | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com> | ||||
* | linux-yocto-efi-secure-boot: don't use sccs to define the included kernel cfg | Lans Zhang | 2017-06-26 | 1 | -3/+3 |
| | | | | | | | The variable sccs is used internally and thus it will be corrupted by the external definition. Signed-off-by: Lans Zhang <jia.zhang@windriver.com> | ||||
* | openssl-tpm-engine: parse an encrypted tpm SRK password from env | Meng Li | 2017-06-23 | 2 | -0/+273 |
| | | | | | | | | | | | | | | | | Before, we support reading SRK password from env TPM_SRK_PW, but it is a plain password and not secure. So, we improve it and support to get an encrypted (AES algorithm) SRK password from env, and then parse it. The default decrypting AES password and salt is set in bb file. When we initialize TPM, and set a SRK pw, and then we need to encrypt it with the same AES password and salt by AES algorithm. At last, we set a env as below: export TPM_SRK_ENC_PW=xxxxxxxx "xxxxxxxx" is the encrypted SRK password for libtpm.so. Signed-off-by: Meng Li <Meng.Li@windriver.com> Signed-off-by: Lans Zhang <jia.zhang@windriver.com> | ||||
* | Ignore the KEYS DIR in the do_package and do_sign task dependence | Guojian Zhou | 2017-06-23 | 1 | -0/+4 |
| | | | | | Signed-off-by: Guojian Zhou <guojian.zhou@windriver.com> Signed-off-by: Lans Zhang <jia.zhang@windriver.com> | ||||
* | meta-secure-core: initial commit | Lans Zhang | 2017-06-22 | 204 | -0/+14086 |
Signed-off-by: Lans Zhang <jia.zhang@windriver.com> |