hc
2024-05-10 23fa18eaa71266feff7ba8d83022d9e1cc83c65a
kernel/certs/Makefile
....@@ -3,8 +3,9 @@
33 # Makefile for the linux kernel signature checking certificates.
44 #
55
6
-obj-$(CONFIG_SYSTEM_TRUSTED_KEYRING) += system_keyring.o system_certificates.o
7
-obj-$(CONFIG_SYSTEM_BLACKLIST_KEYRING) += blacklist.o
6
+obj-$(CONFIG_SYSTEM_TRUSTED_KEYRING) += system_keyring.o system_certificates.o common.o
7
+obj-$(CONFIG_SYSTEM_BLACKLIST_KEYRING) += blacklist.o common.o
8
+obj-$(CONFIG_SYSTEM_REVOCATION_LIST) += revocation_certificates.o
89 ifneq ($(CONFIG_SYSTEM_BLACKLIST_HASH_LIST),"")
910 obj-$(CONFIG_SYSTEM_BLACKLIST_KEYRING) += blacklist_hashes.o
1011 else
....@@ -22,14 +23,14 @@
2223 AFLAGS_system_certificates.o := -I$(srctree)
2324
2425 quiet_cmd_extract_certs = EXTRACT_CERTS $(patsubst "%",%,$(2))
25
- cmd_extract_certs = scripts/extract-cert $(2) $@ || ( rm $@; exit 1)
26
+ cmd_extract_certs = scripts/extract-cert $(2) $@
2627
2728 targets += x509_certificate_list
2829 $(obj)/x509_certificate_list: scripts/extract-cert $(SYSTEM_TRUSTED_KEYS_SRCPREFIX)$(SYSTEM_TRUSTED_KEYS_FILENAME) FORCE
2930 $(call if_changed,extract_certs,$(SYSTEM_TRUSTED_KEYS_SRCPREFIX)$(CONFIG_SYSTEM_TRUSTED_KEYS))
3031 endif # CONFIG_SYSTEM_TRUSTED_KEYRING
3132
32
-clean-files := x509_certificate_list .x509.list
33
+clean-files := x509_certificate_list .x509.list x509_revocation_list
3334
3435 ifeq ($(CONFIG_MODULE_SIG),y)
3536 ###############################################################################
....@@ -112,3 +113,17 @@
112113 $(obj)/signing_key.x509: scripts/extract-cert $(X509_DEP) FORCE
113114 $(call if_changed,extract_certs,$(MODULE_SIG_KEY_SRCPREFIX)$(CONFIG_MODULE_SIG_KEY))
114115 endif # CONFIG_MODULE_SIG
116
+
117
+ifeq ($(CONFIG_SYSTEM_REVOCATION_LIST),y)
118
+
119
+$(eval $(call config_filename,SYSTEM_REVOCATION_KEYS))
120
+
121
+$(obj)/revocation_certificates.o: $(obj)/x509_revocation_list
122
+
123
+quiet_cmd_extract_certs = EXTRACT_CERTS $(patsubst "%",%,$(2))
124
+ cmd_extract_certs = scripts/extract-cert $(2) $@
125
+
126
+targets += x509_revocation_list
127
+$(obj)/x509_revocation_list: scripts/extract-cert $(SYSTEM_REVOCATION_KEYS_SRCPREFIX)$(SYSTEM_REVOCATION_KEYS_FILENAME) FORCE
128
+ $(call if_changed,extract_certs,$(SYSTEM_REVOCATION_KEYS_SRCPREFIX)$(CONFIG_SYSTEM_REVOCATION_KEYS))
129
+endif