]> git.ipfire.org Git - thirdparty/kernel/linux.git/commitdiff
x509: select CONFIG_CRYPTO_LIB_SHA256
authorArnd Bergmann <arnd@kernel.org>
Tue, 17 Feb 2026 08:26:49 +0000 (08:26 +0000)
committerLinus Torvalds <torvalds@linux-foundation.org>
Sun, 22 Feb 2026 20:09:23 +0000 (12:09 -0800)
The x509 public key code gained a dependency on the sha256 hash
implementation, causing a rare link time failure in randconfig
builds:

  arm-linux-gnueabi-ld: crypto/asymmetric_keys/x509_public_key.o: in function `x509_get_sig_params':
  x509_public_key.c:(.text.x509_get_sig_params+0x12): undefined reference to `sha256'
  arm-linux-gnueabi-ld: (sha256): Unknown destination type (ARM/Thumb) in crypto/asymmetric_keys/x509_public_key.o
  x509_public_key.c:(.text.x509_get_sig_params+0x12): dangerous relocation: unsupported relocation

Select the necessary library code from Kconfig.

Fixes: 2c62068ac86b ("x509: Separately calculate sha256 for blacklist")
Signed-off-by: Arnd Bergmann <arnd@arndb.de>
Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: Eric Biggers <ebiggers@kernel.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
crypto/asymmetric_keys/Kconfig

index 1dae2232fe9aea8daec333f20eb783c6f8d65b00..e50bd9b3e27ba9bcf7a4c048fbf65573c8187fac 100644 (file)
@@ -27,6 +27,7 @@ config X509_CERTIFICATE_PARSER
        tristate "X.509 certificate parser"
        depends on ASYMMETRIC_PUBLIC_KEY_SUBTYPE
        select ASN1
+       select CRYPTO_LIB_SHA256
        select OID_REGISTRY
        help
          This option provides support for parsing X.509 format blobs for key