certs: Trigger creation of RSA module signing key if it's not an RSA key
authorStefan Berger <stefanb@linux.ibm.com>
Tue, 29 Jun 2021 21:34:20 +0000 (17:34 -0400)
committerJarkko Sakkinen <jarkko@kernel.org>
Mon, 23 Aug 2021 16:55:42 +0000 (19:55 +0300)
commitea35e0d5df6c92fa2e124bb1b91d09b2240715ba
tree577cb6fbea38ddc7cb7e35f90de4428296abc273
parent6824f8554a98cba516c3bfd5f9064d7ba0501644
certs: Trigger creation of RSA module signing key if it's not an RSA key

Address a kbuild issue where a developer created an ECDSA key for signing
kernel modules and then builds an older version of the kernel, when bi-
secting the kernel for example, that does not support ECDSA keys.

If openssl is installed, trigger the creation of an RSA module signing
key if it is not an RSA key.

Fixes: cfc411e7fff3 ("Move certificate handling to its own directory")
Cc: David Howells <dhowells@redhat.com>
Cc: David Woodhouse <dwmw2@infradead.org>
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Tested-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
certs/Makefile