]> git.ipfire.org Git - thirdparty/systemd.git/commit
veritysetup: add support for dm-verity root hash signature
authorLuca Boccassi <luca.boccassi@microsoft.com>
Thu, 4 Jun 2020 16:41:28 +0000 (17:41 +0100)
committerLuca Boccassi <luca.boccassi@microsoft.com>
Thu, 25 Jun 2020 07:44:49 +0000 (08:44 +0100)
commit035e8e50d73a0e5427149bbe50a426dd84ece178
tree254df68cd1dd6c14a5f8a23b7192f5d43ae5734d
parente60d3b13df2559d644e9ce44f5296b4cc3cc45f1
veritysetup: add support for dm-verity root hash signature

Since cryptsetup 2.3.0 a new API to verify dm-verity volumes by a
pkcs7 signature, with the public key in the kernel keyring,
is available. Use it if libcryptsetup supports it in the
veritysetup helper binary.
src/veritysetup/veritysetup.c