.. | .. |
---|
3 | 3 | # Makefile for the linux kernel signature checking certificates. |
---|
4 | 4 | # |
---|
5 | 5 | |
---|
6 | | -obj-$(CONFIG_SYSTEM_TRUSTED_KEYRING) += system_keyring.o system_certificates.o |
---|
7 | | -obj-$(CONFIG_SYSTEM_BLACKLIST_KEYRING) += blacklist.o |
---|
| 6 | +obj-$(CONFIG_SYSTEM_TRUSTED_KEYRING) += system_keyring.o system_certificates.o common.o |
---|
| 7 | +obj-$(CONFIG_SYSTEM_BLACKLIST_KEYRING) += blacklist.o common.o |
---|
| 8 | +obj-$(CONFIG_SYSTEM_REVOCATION_LIST) += revocation_certificates.o |
---|
8 | 9 | ifneq ($(CONFIG_SYSTEM_BLACKLIST_HASH_LIST),"") |
---|
9 | 10 | obj-$(CONFIG_SYSTEM_BLACKLIST_KEYRING) += blacklist_hashes.o |
---|
10 | 11 | else |
---|
.. | .. |
---|
22 | 23 | AFLAGS_system_certificates.o := -I$(srctree) |
---|
23 | 24 | |
---|
24 | 25 | quiet_cmd_extract_certs = EXTRACT_CERTS $(patsubst "%",%,$(2)) |
---|
25 | | - cmd_extract_certs = scripts/extract-cert $(2) $@ || ( rm $@; exit 1) |
---|
| 26 | + cmd_extract_certs = scripts/extract-cert $(2) $@ |
---|
26 | 27 | |
---|
27 | 28 | targets += x509_certificate_list |
---|
28 | 29 | $(obj)/x509_certificate_list: scripts/extract-cert $(SYSTEM_TRUSTED_KEYS_SRCPREFIX)$(SYSTEM_TRUSTED_KEYS_FILENAME) FORCE |
---|
29 | 30 | $(call if_changed,extract_certs,$(SYSTEM_TRUSTED_KEYS_SRCPREFIX)$(CONFIG_SYSTEM_TRUSTED_KEYS)) |
---|
30 | 31 | endif # CONFIG_SYSTEM_TRUSTED_KEYRING |
---|
31 | 32 | |
---|
32 | | -clean-files := x509_certificate_list .x509.list |
---|
| 33 | +clean-files := x509_certificate_list .x509.list x509_revocation_list |
---|
33 | 34 | |
---|
34 | 35 | ifeq ($(CONFIG_MODULE_SIG),y) |
---|
35 | 36 | ############################################################################### |
---|
.. | .. |
---|
112 | 113 | $(obj)/signing_key.x509: scripts/extract-cert $(X509_DEP) FORCE |
---|
113 | 114 | $(call if_changed,extract_certs,$(MODULE_SIG_KEY_SRCPREFIX)$(CONFIG_MODULE_SIG_KEY)) |
---|
114 | 115 | endif # CONFIG_MODULE_SIG |
---|
| 116 | + |
---|
| 117 | +ifeq ($(CONFIG_SYSTEM_REVOCATION_LIST),y) |
---|
| 118 | + |
---|
| 119 | +$(eval $(call config_filename,SYSTEM_REVOCATION_KEYS)) |
---|
| 120 | + |
---|
| 121 | +$(obj)/revocation_certificates.o: $(obj)/x509_revocation_list |
---|
| 122 | + |
---|
| 123 | +quiet_cmd_extract_certs = EXTRACT_CERTS $(patsubst "%",%,$(2)) |
---|
| 124 | + cmd_extract_certs = scripts/extract-cert $(2) $@ |
---|
| 125 | + |
---|
| 126 | +targets += x509_revocation_list |
---|
| 127 | +$(obj)/x509_revocation_list: scripts/extract-cert $(SYSTEM_REVOCATION_KEYS_SRCPREFIX)$(SYSTEM_REVOCATION_KEYS_FILENAME) FORCE |
---|
| 128 | + $(call if_changed,extract_certs,$(SYSTEM_REVOCATION_KEYS_SRCPREFIX)$(CONFIG_SYSTEM_REVOCATION_KEYS)) |
---|
| 129 | +endif |
---|