mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-01-01 13:58:06 +00:00
2d1d128a41
With https://github.com/OpenSC/OpenSC/pull/3174 which is part of 0.26.0, OpenSC does not support reading the (DER-converted) object data from stdin anymore. However, OpenSC/pkcs11-tool also supports reading PEM files directly. This we can use for simply replacing and simplifying the stdin piping in signing_import_cert_from_pem(). Only for password-protected files we still have to use OpenSSL for conversion, since OpenSC/pkcs11-tool currently doesn't have a mechanism for providing passwords. For these cases, we store the converted PEM into a simple temporary file. This handling is sufficient, since SoftHSM import should be used for example keys only and SoftHSM also doesn't protect the keys in any way. Keys which actually need to be protected are stored in HSMs and accessed via their PKCS#11 URIs. Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> |
||
|---|---|---|
| .. | ||
| breakpad.bbclass | ||
| capnproto.bbclass | ||
| check-version-mismatch.bbclass | ||
| discoverable-disk-image.bbclass | ||
| fitimage.bbclass | ||
| gitpkgv.bbclass | ||
| gitver.bbclass | ||
| image_types_sparse.bbclass | ||
| image_types_verity.bbclass | ||
| itstool.bbclass | ||
| machine_kernel_pr.bbclass | ||
| panel-mipi-dbi.bbclass | ||
| scancode.bbclass | ||
| signing.bbclass | ||
| socorro-syms.bbclass | ||
| sysext-image.bbclass | ||