From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 23 Jul 2021 16:25:54 +0200 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1m6w7e-00072T-GE for lore@lore.pengutronix.de; Fri, 23 Jul 2021 16:25:54 +0200 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1m6w7e-0001ZP-1r; Fri, 23 Jul 2021 16:25:54 +0200 Received: from dude.hi.pengutronix.de ([2001:67c:670:100:1d::7]) by metis.ext.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1m6w7O-0001Z4-H9; Fri, 23 Jul 2021 16:25:38 +0200 Received: from rhi by dude.hi.pengutronix.de with local (Exim 4.92) (envelope-from ) id 1m6w7O-0007iH-9F; Fri, 23 Jul 2021 16:25:38 +0200 From: Roland Hieber To: ptxdist@pengutronix.de Date: Fri, 23 Jul 2021 16:25:35 +0200 Message-Id: <20210723142535.29392-1-rhi@pengutronix.de> X-Mailer: git-send-email 2.30.2 MIME-Version: 1.0 Mail-Followup-To: Roland Hieber , ptxdist@pengutronix.de Subject: [ptxdist] [PATCH] templates/code-signing-provider: set up SoftHSM 'imx-habv4-srk' role group X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Roland Hieber Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false Also provide some example code to set up the role group for the SoftHSM use case. Fixes: f1fc06cd534092bd1a4a (2021-07-08, "templates/code-signing-provider: set up the 'imx-habv4-srk' role group") Signed-off-by: Roland Hieber --- .../code-signing-provider/ptxdist-set-keys-softhsm.sh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/rules/templates/code-signing-provider/ptxdist-set-keys-softhsm.sh b/rules/templates/code-signing-provider/ptxdist-set-keys-softhsm.sh index 0836d61d13b7..b3de3e325404 100755 --- a/rules/templates/code-signing-provider/ptxdist-set-keys-softhsm.sh +++ b/rules/templates/code-signing-provider/ptxdist-set-keys-softhsm.sh @@ -48,6 +48,10 @@ import_imx_habv4_keys() { cs_import_cert_from_der "${r}" "${crts}/IMG${i}_1_sha256_4096_65537_v3_usr_crt.der" cs_import_key_from_pem "${r}" "${keys}/IMG${i}_1_sha256_4096_65537_v3_usr_key.pem" done + + g="imx-habv4-srk" + cs_define_group "${g}" + cs_group_add_roles "${g}" "imx-habv4-srk1" "imx-habv4-srk2" "imx-habv4-srk3" "imx-habv4-srk4" } -- 2.30.2 _______________________________________________ ptxdist mailing list ptxdist@pengutronix.de To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de