aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
2015-08-14Move certificate handling to its own directoryDavid Howells10-195/+212
2015-08-14Merge branch 'smack-for-4.3' of https://github.com/cschaufler/smack-next into nextJames Morris1-14/+18
2015-08-14Merge tag 'modsign-pkcs7-20150812-3' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into nextJames Morris35-928/+1597
2015-08-13sign-file: Fix warning about BIO_reset() return valueDavid Howells1-1/+1
2015-08-13PKCS#7: Add MODULE_LICENSE() to test moduleDavid Howells1-0/+3
2015-08-12Smack - Fix build error with bringup unconfiguredCasey Schaufler1-14/+18
2015-08-12sign-file: Document dependency on OpenSSL devel librariesDavid Howells2-0/+7
2015-08-12PKCS#7: Appropriately restrict authenticated attributes and content typeDavid Howells16-27/+285
2015-08-12KEYS: Add a name for PKEY_ID_PKCS7David Howells1-0/+1
2015-08-12PKCS#7: Improve and export the X.509 ASN.1 time object decoderDavid Howells3-31/+72
2015-08-12modsign: Use extract-cert to process CONFIG_SYSTEM_TRUSTED_KEYSDavid Woodhouse3-14/+17
2015-08-12extract-cert: Cope with multiple X.509 certificates in a single fileDavid Woodhouse1-12/+46
2015-08-12sign-file: Generate CMS message as signature instead of PKCS#7David Howells1-24/+27
2015-08-12PKCS#7: Support CMS messages also [RFC5652]David Howells3-9/+68
2015-08-12X.509: Change recorded SKID & AKID to not include Subject or IssuerDavid Howells1-6/+2
2015-08-12PKCS#7: Check content type and versionsDavid Howells2-4/+77
2015-08-12MAINTAINERS: The keyrings mailing list has movedDavid Howells1-3/+3
2015-08-11Merge branch 'smack-for-4.3' of https://github.com/cschaufler/smack-next into nextJames Morris5-209/+833
2015-08-10Kernel threads excluded from smack checksRoman Kubiak1-0/+6
2015-08-07modsign: Add explicit CONFIG_SYSTEM_TRUSTED_KEYS optionDavid Woodhouse3-64/+89
2015-08-07modsign: Use single PEM file for autogenerated keyDavid Woodhouse5-17/+16
2015-08-07modsign: Extract signing cert from CONFIG_MODULE_SIG_KEY if neededDavid Woodhouse5-11/+181
2015-08-07modsign: Allow external signing key to be specifiedDavid Woodhouse4-6/+46
2015-08-07modsign: Allow signing key to be PKCS#11David Woodhouse1-5/+24
2015-08-07modsign: Allow password to be specified for signing keyDavid Woodhouse3-1/+34
2015-08-07modsign: Abort modules_install when signing failsDavid Woodhouse1-1/+1
2015-08-07MODSIGN: Extract the blob PKCS#7 signature verifier from module signingDavid Howells4-53/+75
2015-08-07system_keyring.c doesn't need to #include module-internal.hDavid Howells1-1/+0
2015-08-07sign-file: Add option to only create signature fileLuis R. Rodriguez1-3/+10
2015-08-07MODSIGN: Use PKCS#7 messages as module signaturesDavid Howells5-598/+48
2015-08-07MODSIGN: Provide a utility to append a PKCS#7 signature to a moduleDavid Howells2-0/+206
2015-08-07PKCS#7: Allow detached data to be supplied for signature checking purposesDavid Howells2-0/+28
2015-08-07X.509: Support X.509 lookup by Issuer+Serial form AuthorityKeyIdentifierDavid Howells4-41/+103
2015-08-07X.509: Extract both parts of the AuthorityKeyIdentifierDavid Howells7-69/+145
2015-08-07ASN.1: Copy string names to tokens in ASN.1 compilerDavid Howells1-82/+73
2015-08-07ASN.1: Add an ASN.1 compiler option to dump the element treeDavid Howells1-12/+76
2015-08-07Merge tag 'asn1-fixes-20150805' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into nextJames Morris3-18/+48
2015-08-05ASN.1: Handle 'ANY OPTIONAL' in grammarDavid Howells3-7/+21
2015-08-05ASN.1: Fix non-match detection failure on data overrunDavid Howells1-3/+2
2015-08-05ASN.1: Fix actions on CHOICE elements with IMPLICIT tagsDavid Howells3-3/+17
2015-08-05ASN.1: Fix handling of CHOICE in ASN.1 compilerDavid Howells1-7/+10
2015-07-31Smack: Three symbols that should be staticCasey Schaufler2-3/+3
2015-07-28Smack: IPv6 host labelingCasey Schaufler4-161/+604
2015-07-28Yama: remove needless CONFIG_SECURITY_YAMA_STACKEDKees Cook8-52/+28
2015-07-22sysfs: fix simple_return.cocci warningskbuild test robot1-5/+1
2015-07-22smack: allow mount opts setting over filesystems with binary mount dataVivek Trivedi2-40/+219
2015-07-20Merge tag 'seccomp-next' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux into nextJames Morris5-8/+31
2015-07-19Linux 4.2-rc3Linus Torvalds1-1/+1
2015-07-19Merge tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsiLinus Torvalds2-2/+2
2015-07-19Merge branch 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linusLinus Torvalds10-38/+7