summaryrefslogtreecommitdiff
path: root/sign/rpmsignverity.h
Commit message (Collapse)AuthorAgeFilesLines
* Fix __cplusplus misspelled as _cplusplus.Peter Pentchev2022-01-181-1/+1
|
* rpmsign: Add argument to specify algorithm for fsverity signaturesJes Sorensen2020-09-041-1/+1
| | | | | | | | | The argument --verity-algo can be used to specify the algorithm for the fsverity signatures. If nothing is specified, this will default to sha256. The available algorithms depend on libfsverity, currently sha256 and sha512 are supported. Signed-off-by: Jes Sorensen <jsorensen@fb.com>
* rpmsignverity: Add verity signature headers to the packageJes Sorensen2020-09-041-0/+7
| | | | | | | | This adds the array of verity signatures, and a signature length header. We use 4K block for the Merkle tree, and rely on the kernel doing the right thing. Signed-off-by: Jes Sorensen <jsorensen@fb.com>
* Implement rpmSignVerity()Jes Sorensen2020-09-041-0/+29
This generates the root Merkle tree hash and signs it using the specified key and certificate. Signed-off-by: Jes Sorensen <jsorensen@fb.com>