]> git.ipfire.org Git - thirdparty/dracut.git/commit
98integrity: support X.509-only EVM configuration
authorMatthias Gerstner <matthias.gerstner@suse.de>
Wed, 24 Jan 2018 16:19:03 +0000 (17:19 +0100)
committerHarald Hoyer <harald@hoyer.xyz>
Thu, 25 Jan 2018 11:15:36 +0000 (12:15 +0100)
commitf48fb6f4ce277a7ca1a89b6c6423326c42da601e
treea7ec0094c0837e2b6a9c8da22a8df55a7b93e8fc
parentcb02ff635c668392f9af174657b38c0baa946e98
98integrity: support X.509-only EVM configuration

Previously if no symmetric key was configured for EVM, then the
initialization process was aborted. It can be a valid use case, however,
to only use EVM digital signatures. In this case only X.509 certificates
need to be loaded.

With this change EVM initialization will continue if any of the
symmetric or X.509 keys could be loaded.
modules.d/98integrity/evm-enable.sh