Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Apply the EKU checks #661

Closed
wants to merge 1 commit into from
Closed

Apply the EKU checks #661

wants to merge 1 commit into from

Commits on May 23, 2024

  1. Apply the EKU checks 

    Implement the CodeSign EKU check to fulfill the requirements of NIAP OS_PP.
Also modify the ModSign EKU check to use VerifyEKUsInPkcs7Signature() to
check the signer certificate instead of the certificate directly
from the key database.

The EKU check can be enabled by setting ENABLE_EKU_CODESIGN=1 when make.
This commit supercedes PR-232 which was closed on Jul 1, 2021.

Signed-off-by: Gary Lin <glin@suse.com> and
Dennis Tseng <dennis.tseng@suse.com>
    @dennis-tseng99
    dennis-tseng99 committed May 23, 2024
    Configuration menu
    Copy the full SHA
    0fbc5aa View commit details
    Browse the repository at this point in the history