From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sun, 12 Sep 2021 22:59:58 +0200 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1mPWZy-0004iQ-Ar for lore@lore.pengutronix.de; Sun, 12 Sep 2021 22:59:58 +0200 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1mPWZx-0006XW-QU; Sun, 12 Sep 2021 22:59:57 +0200 Received: from dude.hi.pengutronix.de ([2001:67c:670:100:1d::7]) by metis.ext.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mPWZV-00063m-0M; Sun, 12 Sep 2021 22:59:29 +0200 Received: from rhi by dude.hi.pengutronix.de with local (Exim 4.92) (envelope-from ) id 1mPWZU-0006BY-La; Sun, 12 Sep 2021 22:59:28 +0200 From: Roland Hieber To: ptxdist@pengutronix.de Date: Sun, 12 Sep 2021 22:59:25 +0200 Message-Id: <20210912205925.23644-5-rhi@pengutronix.de> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20210912205925.23644-1-rhi@pengutronix.de> References: <20210912205925.23644-1-rhi@pengutronix.de> MIME-Version: 1.0 Mail-Followup-To: Roland Hieber , ptxdist@pengutronix.de Subject: [ptxdist] [PATCH v3 5/5] ptxd_lib_code_signing: add key whitelist checks X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Roland Hieber Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false U2lnbmVkLW9mZi1ieTogUm9sYW5kIEhpZWJlciA8cmhpQHBlbmd1dHJvbml4LmRlPgotLS0KUEFU Q0ggdjM6CiAtIGFkYXB0IHRvIGNzX2dldF91cmlfaW1wbCBmcm9tIHByZXZpb3VzIHBhdGNoLiBj c19nZXRfdXJpX3VuY2hlY2tlZAogICBkaWRuJ3QgcmVhbGx5IG5lZWQgdG8gY2hlY2sgZm9yIHBr Z19uYW1lIGFueXdheSBhcyBpdCdzIG9ubHkgY2FsbGVkCiAgIGJ5IGNzX2FwcGVuZF9jYV9mcm9t X3VyaSBpbiB0aGUgY29kZSBwcm92aWRlciBzZXR1cCBwYXRoLCBhbmQgdGhlCiAgIGNvZGUgcHJv dmlkZXIgc2hvdWxkIGFsd2F5cyBiZSBhYmxlIHRvIGdldCBpdHMgb3duIFVSSSwgc28gd2UgY2Fu IHVzZQogICBjc19nZXRfdXJpX2ltcGwgaGVyZSB0b28uCiAtIGNzX2NoZWNrX3doaXRlbGlzdDog aGFuZGxlIHRoZSBjYXNlIGNvcnJlY3RseSB3aGVuIHRoZSBjb2RlIHNpZ25pbmcKICAgcHJvdmlk ZXIgaXMgbm90IHNldCB1cCB5ZXQgKGkuZS4gd2hlbiB0aGUgQlNQIGlzIGJ1aWx0IGZyb20gc2Ny YXRjaCkKIC0gc21hbGwgZG9jIGZpeGVzCiAtIHVzZSBmaXhlZCB3aGl0ZWxpc3QgZmlsZW5hbWUs IHJlbW92ZSBDT0RFX1NJR05JTkdfV0hJVEVMSVNUX0ZJTEVOQU1FCiAgIChmZWVkYmFjayBieSBN aWNoYWVsIE9sYnJpY2gpCiAtIHJlbW92ZSBzdXBlcmZsdW91cyBiYWNrc2xhc2gtbmV3bGluZSBl c2NhcGVzIGluIG11bHRpLWxpbmUgZGVmaW5lcwogICAoZmVlZGJhY2sgYnkgTWljaGFlbCBPbGJy aWNoKQogLSBhZGQgZWFybHkgZXJyb3IgaGFuZGxpbmcgZm9yIG9wZW5zc2wgfCBzcGtpLWhhc2gg aW4gY3NfYXBwZW5kX2NhXyoKICAgKGZlZWRiYWNrIGJ5IE1pY2hhZWwgT2xicmljaCkKIC0gcmVt b3ZlIGZhY3R1YWxseSB1bnRydWUgY29tbWVudCBpbiBjc19hcHBlbmRfY2FfZnJvbV91cmkgKGZl ZWRiYWNrIGJ5CiAgIE1pY2hhZWwgT2xicmljaCkKIC0gdXNlICQoZXJyb3IpIGluc3RlYWQgb2Yg JChwdHgvZXJyb3IpIChmZWVkYmFjayBieSBNaWNoYWVsIE9sYnJpY2gpCgpQQVRDSCB2MjogaHR0 cHM6Ly9sb3JlLnB0eGRpc3Qub3JnL3B0eGRpc3QvMjAyMTA4MDkwODA2MDguMjM0NzUtNS1yaGlA cGVuZ3V0cm9uaXguZGUKIC0gY3NfY2hlY2tfd2hpdGVsaXN0ZWQ6IG1ha2UgIm5lZWRsZSIgYSBs b2NhbCB2YXJpYWJsZSAoZmVlZGJhY2sgYnkKICAgTWljaGFlbCBPbGJyaWNoKQogLSBjc19jaGVj a193aGl0ZWxpc3RlZDogZXJyb3Igb3V0IHdpdGggRVJST1JfS0VZX05PVF9XSElURUxJU1RFRCBh bHNvCiAgIGlmIHdoaXRlbGlzdCBkb2VzIG5vdCBleGlzdCB5ZXQgKE1pY2hhZWwgT2xicmljaCkK IC0gcmVuYW1lIGNzX2dldF91cmkgdG8gY3NfZ2V0X3VyaV91bmNoZWNrZWQgYW5kIGxldCBjc19n ZXRfdXJpIHdyYXAgaXQKICAgaW5zdGVhZCBvZiBzZXR0aW5nIGNzX25vX3doaXRlbGlzdF9jaGVj az0xIChNaWNoYWVsIE9sYnJpY2gpCiAtIGRvY3M6IHNpbXBsaWZ5IGludHJvZHVjdG9yeSBleGFt cGxlIChNaWNoYWVsIE9sYnJpY2gpCiAtIGRvY3M6IGFkZCBzaG9ydCBwYXJhZ3JhcGggb24gaG93 IHRvIGRldGVybWluZSBmaW5nZXJwcmludHMgb2YgY2VydHMKClBBVENIIHYxOiBodHRwczovL2xv cmUucHR4ZGlzdC5vcmcvcHR4ZGlzdC8yMDIxMDgwNDE0MjMzMC4zMjczOS01LXJoaUBwZW5ndXRy b25peC5kZQotLS0KIGRvYy9kYWlseV93b3JrLmluYyAgICAgICAgICAgICAgICAgICAgICAgIHwg IDEgKwogZG9jL2Rldl9jb2RlX3NpZ25pbmcucnN0ICAgICAgICAgICAgICAgICAgfCA3NyArKysr KysrKysrKysrKysrKysrKysrKwogcGxhdGZvcm1zL2NvZGUtc2lnbmluZy5pbiAgICAgICAgICAg ICAgICAgfCAxMCArKysKIHJ1bGVzL3ByZS8wMzAtY29kZS1zaWduaW5nLWNvbnN1bWVycy5tYWtl IHwgIDYgKysKIHNjcmlwdHMvbGliL3B0eGRfbGliX2NvZGVfc2lnbmluZy5zaCAgICAgIHwgNTYg KysrKysrKysrKysrKysrKy0KIDUgZmlsZXMgY2hhbmdlZCwgMTQ5IGluc2VydGlvbnMoKyksIDEg ZGVsZXRpb24oLSkKCmRpZmYgLS1naXQgYS9kb2MvZGFpbHlfd29yay5pbmMgYi9kb2MvZGFpbHlf d29yay5pbmMKaW5kZXggMzdiYjliYzQ4MTgwLi5hNWIzMmRjNTQ2MWMgMTAwNjQ0Ci0tLSBhL2Rv Yy9kYWlseV93b3JrLmluYworKysgYi9kb2MvZGFpbHlfd29yay5pbmMKQEAgLTE4MCw2ICsxODAs NyBAQCBvcHRpb25zIGR1cmluZyB0aGUgYGtlcm5lbC5jb21waWxlYCBhbmQgYGtlcm5lbC5pbnN0 YWxsYCBzdGFnZXM6CiAgIFBUWGRpc3Qgc3VwcGxpZXMgdGhlIFVSSSBmcm9tIHRoZSBgYGtlcm5l bC1tb2R1bGVzYGAgcm9sZSBvZiB0aGUgY29uZmlndXJlZAogICBjb2RlIHNpZ25pbmcgcHJvdmlk ZXIuCiAgIChUaGUgY29kZSBzaWduaW5nIHByb3ZpZGVyIHNob3VsZCB1c2UgOnJlZjpgY3Nfc2V0 X3VyaWAgdG8gc2V0IHRoZSBVUkkuKQorICBUaGUgdmFsdWUgb2YgdGhpcyBrY29uZmlnIG9wdGlv biBmcm9tIHlvdXIga2VybmVsIGNvbmZpZyBmaWxlIGlzIG92ZXJyaWRkZW4uCiAKIEhvd2V2ZXIs IGFkZGl0aW9uYWwgc2V0dGluZ3MgbXVzdCBhbHNvIGJlIGVuYWJsZWQgaW4gdGhlIGtlcm5lbCBj b25maWc6CiAKZGlmZiAtLWdpdCBhL2RvYy9kZXZfY29kZV9zaWduaW5nLnJzdCBiL2RvYy9kZXZf Y29kZV9zaWduaW5nLnJzdAppbmRleCA0MTNmNjk0OTgwZWIuLmIwYjhjOWI0YTNiOCAxMDA2NDQK LS0tIGEvZG9jL2Rldl9jb2RlX3NpZ25pbmcucnN0CisrKyBiL2RvYy9kZXZfY29kZV9zaWduaW5n LnJzdApAQCAtMTcyLDMgKzE3Miw4MCBAQCBhbHNvIHZpYSBhbiBlbnZpcm9ubWVudCB2YXJpYWJs ZS4KICAgKGBgPWBgLCBub3QgYGA6PWBgKS4KICAgT3RoZXJ3aXNlIHRoZSB2YXJpYWJsZSBpcyBl eHBhbmRlZCBiZWZvcmUgYSBjb2RlIHNpZ25pbmcgcHJvdmlkZXIgY2FuIHBlcmZvcm0KICAgaXRz IHNldHVwLgorCitLZXkgV2hpdGVsaXN0aW5nCit+fn5+fn5+fn5+fn5+fn5+CisKK0luIHNvbWUg dXNlIGNhc2VzLCBpdCBtYXkgYmUgZmVhc2libGUgdG8gZG8gYWRkaXRpb25hbCBjaGVja3MgdG8g bWFrZSBzdXJlIHRoYXQKK2EgcGFja2FnZSB1c2VzIHRoZSBjb3JyZWN0IGtleSBtYXRlcmlhbC4K K0ZvciBleGFtcGxlLCBzdXBwb3NlIHlvdSBoYXZlIGEgInJlbGVhc2UiIGNvZGUgc2lnbmluZyBw cm92aWRlciB3aGljaCB5b3UgdXNlCit0byBzaWduIGJvb3Rsb2FkZXJzIGZvciBwcm9kdWN0aW9u LAorYW5kIGEgImRldmVsb3BtZW50IiBjb2RlIHNpZ25pbmcgcHJvdmlkZXIgd2hpY2ggeW91IHVz ZSB0byBzaWduIGJvb3Rsb2FkZXJzCit3aXRoIGFuIGV4dGVuZGVkIGZlYXR1cmUgc2V0LCBlLmcu IHRvIGFsbG93IGJvb3RpbmcgYXJiaXRyYXJ5IGtlcm5lbHMgYW5kCit1c2VybGFuZHMgZm9yIGRl YnVnZ2luZyBwdXJwb3Nlcy4KK1lvdXIgcHJvZHVjdGlvbiBib2FyZHMgYXJlIGxvY2tlZCBkb3du IGluIGhhcmR3YXJlIHNvIHRoZSBST00gY29kZSBvbmx5CitleGVjdXRlcyBib290bG9hZGVycyBz aWduZWQgd2l0aCB0aGUgInJlbGVhc2UiIGtleS4KK05vdyB5b3UgZG9uJ3Qgd2FudCBhbnkgYm9v dGxvYWRlciB3aXRoIGRlYnVnZ2luZyBmZWF0dXJlcyB0byBiZSBzaWduZWQgd2l0aCBhCityZWxl YXNlIGtleSwgb3RoZXJ3aXNlIHNvbWVvbmUgY291bGQgYm9vdCB0aGVtIG9uIGEgbG9ja2VkLWRv d24gcHJvZHVjdGlvbgorZGV2aWNlLCBhbmQgdXNlIHRoZSBhZGRpdGlvbmFsIGRlYnVnZ2luZyBm ZWF0dXJlcyB0byBnZXQgZXh0ZW5kZWQgYWNjZXNzIHRvIHRoZQorcHJvZHVjdGlvbiBkZXZpY2Uu CitJbiB0aGlzIGNhc2UsIGtleSB3aGl0ZWxpc3RpbmcgY2FuIGhlbHAgdG8gcHJldmVudCBzaWdu aW5nIGJvb3Rsb2FkZXIgcGFja2FnZXMKK3dpdGggdGhlIHdyb25nIGtleS4KKworSWYgdGhlIGBg Q09ERV9TSUdOSU5HX1JFUVVJUkVfV0hJVEVMSVNUYGAga2NvbmZpZyBzeW1ib2wgaXMgZW5hYmxl ZCwKK3RoZSBjb25zdW1lciBmdW5jdGlvbnMgOnJlZjpgcHR4L2NzLWdldC1jYWAgYW5kIDpyZWY6 YHB0eC9jcy1nZXQtdXJpYAorbG9vayB1cCB0aGUgdHJpcGxldCBvZiBwYWNrYWdlIG5hbWUsIHJv bGUgbmFtZSwgYW5kIHRoZSBwdWJrZXkncyBTSEEyNTYKK2ZpbmdlcnByaW50IGluIGBgY29uZmln cy9wbGF0Zm9ybS08bmFtZT4vY29kZS1zaWduaW5nLXdoaXRlbGlzdGBgLgorSWYgYSBrZXkgb3Ig YSBDQSBpcyBub3Qgd2hpdGVsaXN0ZWQgZm9yIHRoZSBwYWNrYWdlIGluIHdoaWNoIGl0IGlzIHRv IGJlIHVzZWQsCit0aGUgZnVuY3Rpb25zIHdpbGwgZXhpdCB3aXRoIGFuIGVycm9yIG1lc3NhZ2Ug b24gdGhlIHRlcm1pbmFsOjoKKworICAgJCBwdHhkaXN0IC12IHByaW50IEtFUk5FTF9NQUtFX09Q VAorICAgcHR4ZGlzdDogZXJyb3I6IFNQS0kgd2hpdGVsaXN0IHJlY29yZCAna2VybmVsIGtlcm5l bC1tb2R1bGVzCisgICA2OUM5QkJCOEJCNERGQUU3NEFCMjFEMDZERkI1RjJDNjcwNjYzNzNBRTU0 NTQ1MzI3Njg0NzM0MDgyMkNERjA0JyBub3QgZm91bmQgaW4KKyAgIGRpc3Ryb2tpdC9jb25maWdz L3BsYXRmb3JtLXY3YS9jb2RlLXNpZ25pbmctd2hpdGVsaXN0CisKKyAgIOKApi9wdHhkaXN0L3J1 bGVzL2tlcm5lbC5tYWtlOjE5NjogKioqIGNzLWdldC11cmk6IHdoaXRlbGlzdCBjaGVjayBmYWls ZWQsIHNlZSBlcnJvcnMgYWJvdmUuICBTdG9wLgorCitJZiBgYENPREVfU0lHTklOR19SRVFVSVJF X1dISVRFTElTVGBgIGlzIGRpc2FibGVkICh0aGUgZGVmYXVsdCksCithbGwga2V5cyBhbmQgQ0Fz IGFyZSBwcm92aWRlZCB0byBhbGwgcGFja2FnZXMgd2l0aG91dCBmdXJ0aGVyIGNoZWNrcy4KKwor VGhlIGZvcm1hdCBvZiB0aGUgY29kZSBzaWduaW5nIHdoaXRlbGlzdCBjb25zaXN0cyBvZiBvbmUg dHJpcGxldCBwZXIgbGluZSwgaW4KK3doaWNoIHRoZSBlbGVtZW50cyBvZiB0aGUgdHJpcGxldCBh cmUgc2VwYXJhdGVkIGJ5IHdoaXRlc3BhY2UuCitJZiBhIENBIGlzIHRvIGJlIGNoZWNrZWQsIHRo ZSByb2xlIG5hbWUgaXMgcHJlZml4ZWQgd2l0aCBhIGxpdGVyYWwgYGBjYTpgYCwKK2FuZCB0aGUg ZmluZ2VycHJpbnQgcmVmZXJzIHRvIHRoZSBwdWJsaWMga2V5IG9mIHRoZSBjZXJ0aWZpY2F0ZS4K K0FsbCBvdGhlciB1bm1hdGNoZWQgbGluZXMgaW4gdGhlIGZpbGUgYXJlIGlnbm9yZWQsIGJ1dCB3 ZSBzdWdnZXN0IHRvIHVzZSBgYCNgYAordG8gc3RhcnQgYSBsaW5lIGNvbW1lbnQgc28gYXMgbm90 IHRvIGFkZCBhIHdoaXRlbGlzdCByZWNvcmQgYWNjaWRlbnRhbGx5LgorCitGb3IgZXhhbXBsZSwg aGVyZSBpcyBhIHdoaXRlbGlzdCBmb3IgdXNlIHdpdGggdGhlICpkZXZlbCogY29kZSBwcm92aWRl ciB3aGljaAorYWxsb3dzIGFsbCBwcm92aWRlZCBrZXlzIHRvIGJlIHVzZWQgYnkgdGhlaXIgcmVz cGVjdGl2ZSBjb25zdW1lcnM6OgorCisgICAjIGZvcm1hdDogcGFja2FnZS1uYW1lIHJvbGUtbmFt ZSBzaGEyNTYtcHVia2V5LWZpbmdlcnByaW50CisgICBrZXJuZWwgICAgICBrZXJuZWwtbW9kdWxl cyAgIDY5QzlCQkI4QkI0REZBRTc0QUIyMUQwNkRGQjVGMkM2NzA2NjM3M0FFNTQ1NDUzMjc2ODQ3 MzQwODIyQ0RGMDQKKyAgIGltYWdlLXJhdWMgIHVwZGF0ZSAgICAgICAgICAgMDAzNEY4RkU1QURD M0IwREZFNjQyNDA3Mjc1RDE0NERFMjM5OEM2OENDOUE4NkRENjcwM0Q3MTUxMTE2QjQ0RQorICAg aW1hZ2UtcmF1YyAgY2E6dXBkYXRlICAgICAgICAwMDM0RjhGRTVBREMzQjBERkU2NDI0MDcyNzVE MTQ0REUyMzk4QzY4Q0M5QTg2REQ2NzAzRDcxNTExMTZCNDRFCisgICByYXVjICAgICAgICBjYTp1 cGRhdGUgICAgICAgIDAwMzRGOEZFNUFEQzNCMERGRTY0MjQwNzI3NUQxNDRERTIzOThDNjhDQzlB ODZERDY3MDNENzE1MTExNkI0NEUKKworLi4gbm90ZTo6IFRoZSBtYXRjaCBpcyBjYXNlLXNlbnNp dGl2ZSwgYW5kIHRoZSBmaW5nZXJwcmludHMgYXJlIGV4cGVjdGVkCisgICBpbiB1cHBlcmNhc2Uu CisKKyAgIElmIGEgQ0EgY29uc2lzdHMgb2YgbW9yZSB0aGFuIG9uZSBjZXJ0aWZpY2F0ZSwgYWxs IG9mIHRoZWlyIGZpbmdlcnByaW50cworICAgbXVzdCBiZSB3aGl0ZWxpc3RlZC4KKworWW91IGNh biBkZXRlcm1pbmUgdGhlIGtleSBmaW5nZXJwcmludHMgYnkgY29weWluZyBpdCBmcm9tIHRoZSBl cnJvciBtZXNzYWdlLAorb3Igd2l0aCB0aGUgYHNwa2ktaGFzaGBfXyB0b29sIGZyb20gdGhlIGBg aG9zdC1leHRyYWN0LWNlcnRgYCBwYWNrYWdlLAorb3Igd2l0aCBvcGVuc3NsOjoKKworICAgJCBv cGVuc3NsIHBrZXkgLWluIGtleWZpbGUucGVtIC1wdWJvdXQgLW91dGZvcm0gZGVyIFwKKyAgICAg fCBvcGVuc3NsIHNoYTI1NiBcCisgICAgIHwgdHIgJ2EteicgJ0EtWicKKyAgIChTVERJTik9IDY5 QzlCQkI4QkI0REZBRTc0QUIyMUQwNkRGQjVGMkM2NzA2NjM3M0FFNTQ1NDUzMjc2ODQ3MzQwODIy Q0RGMDQKKworb3IsIGluIHRoZSBjYXNlIG9mIGNlcnRpZmljYXRlczo6CisKKyAgICQgb3BlbnNz bCB4NTA5IC1ub291dCAtaW4gY2VydC5wZW0gLXB1YmtleSBcCisgICAgIHwgb3BlbnNzbCBwa2V5 IC1wdWJpbiAtaW5mb3JtIHBlbSAtcHVib3V0IC1vdXRmb3JtIGRlciBcCisgICAgIHwgb3BlbnNz bCBzaGEyNTYgXAorICAgICB8IHRyICdhLXonICdBLVonCisgICAoU1RESU4pPSAwMDM0RjhGRTVB REMzQjBERkU2NDI0MDcyNzVEMTQ0REUyMzk4QzY4Q0M5QTg2REQ2NzAzRDcxNTExMTZCNDRFCisK K19fIGh0dHBzOi8vZ2l0LnBlbmd1dHJvbml4LmRlL2NnaXQvZXh0cmFjdC1jZXJ0L3RyZWUvc3Br aS1oYXNoLmMKZGlmZiAtLWdpdCBhL3BsYXRmb3Jtcy9jb2RlLXNpZ25pbmcuaW4gYi9wbGF0Zm9y bXMvY29kZS1zaWduaW5nLmluCmluZGV4IDgxZjllZjZmM2M5ZS4uN2ZhNDZlNjQ0ZGY3IDEwMDY0 NAotLS0gYS9wbGF0Zm9ybXMvY29kZS1zaWduaW5nLmluCisrKyBiL3BsYXRmb3Jtcy9jb2RlLXNp Z25pbmcuaW4KQEAgLTIwLDQgKzIwLDE0IEBAIHNvdXJjZSAiZ2VuZXJhdGVkL2NvZGVfc2lnbmlu Z19wcm92aWRlci5pbiIKIAogZW5kY2hvaWNlCiAKK2NvbmZpZyBDT0RFX1NJR05JTkdfUkVRVUlS RV9XSElURUxJU1RFRF9LRVlTCisJYm9vbAorCXByb21wdCAicmVxdWlyZSB3aGl0ZWxpc3RlZCBr ZXlzIgorCWhlbHAKKwkgIEV2ZXJ5IHRpbWUgYSBrZXkgZnJvbSB0aGUgY29kZSBwcm92aWRlciBp cyB1c2VkLCBjaGVjayBpZiB0aGUgY29uc3VtZXIKKwkgIGlzIGFsbG93ZWQgdG8gdXNlIGl0Lgor CisJICBDb2RlIHNpZ25pbmcgY29uc3VtZXJzIGNhbiBkZXBlbmQgb24gdGhpcyBvcHRpb24gaWYg dGhleSB3YW50IHRvIGZvcmNlCisJICB0aGUga2V5IHdoaXRlbGlzdCBjaGVjay4KKwogZW5kaWYK ZGlmZiAtLWdpdCBhL3J1bGVzL3ByZS8wMzAtY29kZS1zaWduaW5nLWNvbnN1bWVycy5tYWtlIGIv cnVsZXMvcHJlLzAzMC1jb2RlLXNpZ25pbmctY29uc3VtZXJzLm1ha2UKaW5kZXggZTJjNmM4Njhl MGVlLi4yNGJmYTFjOWM4MTUgMTAwNjQ0Ci0tLSBhL3J1bGVzL3ByZS8wMzAtY29kZS1zaWduaW5n LWNvbnN1bWVycy5tYWtlCisrKyBiL3J1bGVzL3ByZS8wMzAtY29kZS1zaWduaW5nLWNvbnN1bWVy cy5tYWtlCkBAIC0yMSw2ICsyMSw5IEBAICQoc3RyaXAKIAkJJChjYWxsIHB0eC9jcy1jb25zdW1l ci1lbnYsICQoMSkpCiAJCQljc19nZXRfdXJpICckKHN0cmlwICQoMikpJwogCSkKKwkkKGlmICQo ZmlsdGVyLW91dCAwLCQoLlNIRUxMU1RBVFVTKSksCisJCSQoZXJyb3IgY3MtZ2V0LXVyaTogd2hp dGVsaXN0IGNoZWNrIGZhaWxlZCDigJMgc2VlIGVycm9ycyBhYm92ZSkKKwkpCiApCiBlbmRlZgog CkBAIC0zMyw1ICszNiw4IEBAICQoc3RyaXAKIAkJJChjYWxsIHB0eC9jcy1jb25zdW1lci1lbnYs ICQoMSkpCiAJCQljc19nZXRfY2EgJyQoc3RyaXAgJCgyKSknCiAJKQorCSQoaWYgJChmaWx0ZXIt b3V0IDAsJCguU0hFTExTVEFUVVMpKSwKKwkJJChlcnJvciBjcy1nZXQtY2E6IHdoaXRlbGlzdCBj aGVjayBmYWlsZWQg4oCTIHNlZSBlcnJvcnMgYWJvdmUpCisJKQogKQogZW5kZWYKZGlmZiAtLWdp dCBhL3NjcmlwdHMvbGliL3B0eGRfbGliX2NvZGVfc2lnbmluZy5zaCBiL3NjcmlwdHMvbGliL3B0 eGRfbGliX2NvZGVfc2lnbmluZy5zaAppbmRleCA4ZjM1YzI3Njg1NWYuLmZlODE5YmNiMDdhZSAx MDA2NDQKLS0tIGEvc2NyaXB0cy9saWIvcHR4ZF9saWJfY29kZV9zaWduaW5nLnNoCisrKyBiL3Nj cmlwdHMvbGliL3B0eGRfbGliX2NvZGVfc2lnbmluZy5zaApAQCAtMSw2ICsxLDcgQEAKICMhL2Jp bi9iYXNoCiAjCiAjIENvcHlyaWdodCAoQykgMjAxOSBTYXNjaGEgSGF1ZXIgPHMuaGF1ZXJAcGVu Z3V0cm9uaXguZGU+CisjIENvcHlyaWdodCAoQykgMjAyMCBKYW4gTHVlYmJlIDxqLmx1ZWJiZUBw ZW5ndXRyb25peC5kZT4KICMgQ29weXJpZ2h0IChDKSAyMDIxIFJvbGFuZCBIaWViZXIsIFBlbmd1 dHJvbml4IDxyaGlAcGVuZ3V0cm9uaXguZGU+CiAjCiAjIEZvciBmdXJ0aGVyIGluZm9ybWF0aW9u IGFib3V0IHRoZSBQVFhkaXN0IHByb2plY3QgYW5kIGxpY2Vuc2UgY29uZGl0aW9ucwpAQCAtMTQ1 LDYgKzE0Niw0NyBAQCBjc19ncm91cF9nZXRfcm9sZXMoKSB7CiB9CiBleHBvcnQgLWYgY3NfZ3Jv dXBfZ2V0X3JvbGVzCiAKKyMKKyMgY3NfY2hlY2tfd2hpdGVsaXN0ZWQgPHJvbGU+IDx1cmkvcGVt IG9yIGZpbmdlcnByaW50IHByZWZpeGVkIHdpdGggInNoYTI1NjoiPgorIworIyBDaGVja3MgaWYg dGhlIFNQS0kgKFN1YmplY3QgUHVibGljIEtleSBJbmZvKSBIYXNoIGlzIGluIHRoZSB3aGl0ZWxp c3QKKyMKK2NzX2NoZWNrX3doaXRlbGlzdGVkKCkgeworICAgIGxvY2FsIHJvbGU9IiR7MTotRVJS T1JfUk9MRV9JU19FTVBUWX0iCisgICAgbG9jYWwgc3JjPSIkezJ9IgorICAgIGNzX2luaXRfdmFy aWFibGVzCisKKyAgICBpZiBbICIke3NyY30iID0gIkVSUk9SX1VSSV9OT1RfWUVUX1NFVCIgXTsg dGhlbgorCSMgc2tpcCBjaGVjayB1bnRpbCB0aGUgY29kZSBzaWduaW5nIHByb3ZpZGVyIGhhcyBi ZWVuIHNldCB1cAorCXJldHVybjsKKyAgICBmaQorCisgICAgaWYgWyAiJChwdHhkX2dldF9wdHhj b25mIFBUWENPTkZfQ09ERV9TSUdOSU5HX1JFUVVJUkVfV0hJVEVMSVNURURfS0VZUykiICE9ICJ5 IiBdOyB0aGVuCisJcmV0dXJuCisgICAgZmkKKworICAgIGlmICEgcHR4ZF9pbl9wYXRoIFBUWERJ U1RfUEFUSF9QTEFURk9STUNPTkZJR0RJUiAiY29kZS1zaWduaW5nLXdoaXRlbGlzdCI7IHRoZW4K KwllY2hvIEVSUk9SX0tFWV9OT1RfV0hJVEVMSVNURUQKKwlwdHhkX2JhaWxvdXQgIiR7cGtnX25h bWV9OiBTUEtJIGhhc2ggd2hpdGVsaXN0IGNoZWNrIGZvciByb2xlICcke3JvbGV9JyAoJHtzcmN9 KSBpcyByZXF1aXJlZCwgYnV0IGNvbmZpZ3MvPHBsYXRmb3JtPi9jb2RlLXNpZ25pbmctd2hpdGVs aXN0IGlzIG1pc3NpbmcuIgorICAgIGZpCisgICAgbG9jYWwgd2hpdGVsaXN0X3BhdGg9IiR7cHR4 ZF9yZXBseX0iCisKKyAgICBsb2NhbCBoYXNoCisgICAgaWYgWyAiJHtzcmMjc2hhMjU2On0iICE9 ICIke3NyY30iIF07IHRoZW4KKwloYXNoPSIke3NyYyNzaGEyNTY6fSIKKyAgICBlbHNlCisJaGFz aD0kKHB0eGRfZXhlY19zaWxlbnRfc3RkZXJyIHNwa2ktaGFzaCAiJHtzcmN9IikKKyAgICBmaQor ICAgIGhhc2g9JHtoYXNoOi1FUlJPUl9IQVNIX0lTX0VNUFRZfQorICAgIGxvY2FsIG5lZWRsZT0i JHtwa2dfbmFtZX1cc1wrJHtyb2xlfVxzXCske2hhc2h9IgorCisgICAgaWYgISBncmVwIC1xIC0t bGluZS1yZWdleHAgIiR7bmVlZGxlfSIgIiR7d2hpdGVsaXN0X3BhdGh9IjsgdGhlbgorCWVjaG8g RVJST1JfS0VZX05PVF9XSElURUxJU1RFRAorCXB0eGRfYmFpbG91dCAiU1BLSSB3aGl0ZWxpc3Qg cmVjb3JkICcke3BrZ19uYW1lfSAke3JvbGV9ICR7aGFzaH0nIG5vdCBmb3VuZCBpbiAkKHB0eGRf cHJpbnRfcGF0aCAiJHt3aGl0ZWxpc3RfcGF0aH0iKSIKKyAgICBmaQorfQorZXhwb3J0IC1mIGNz X2NoZWNrX3doaXRlbGlzdGVkCisKICMKICMgY3Nfc2V0X3VyaSA8cm9sZT4gPHVyaT4KICMKQEAg LTE5MSw3ICsyMzMsMTIgQEAgY3NfZ2V0X3VyaSgpIHsKIAkJJ1VzZSAkKGNhbGwgcHR4L2NzLWdl dC11cmksIDxQS0c+LCA8cm9sZT4pIGluc3RlYWQuJwogICAgIGZpCiAKLSAgICBjc19nZXRfdXJp X2ltcGwgIiRAIgorICAgIGxvY2FsIHJvbGU9IiR7MX0iCisgICAgbG9jYWwgdXJpPSQoY3NfZ2V0 X3VyaV9pbXBsICIke3JvbGV9IikKKworICAgIGlmIGNzX2NoZWNrX3doaXRlbGlzdGVkICIke3Jv bGV9IiAiJHt1cml9IjsgdGhlbgorCWVjaG8gIiR7dXJpfSIKKyAgICBmaQogfQogZXhwb3J0IC1m IGNzX2dldF91cmkKIApAQCAtMzE4LDYgKzM2NSw5IEBAIGNzX2dldF9jYSgpIHsKICAgICBmaQog CiAgICAgaWYgWyAtZSAiJHtjYX0iIF07IHRoZW4KKwl3aGlsZSByZWFkIGZwOyBkbworCSAgICBj c19jaGVja193aGl0ZWxpc3RlZCAiY2E6JHtyb2xlfSIgInNoYTI1Njoke2ZwfSIKKwlkb25lIDwg IiR7a2V5ZGlyfS8ke3JvbGV9L2NhLmZpbmdlcnByaW50cyIKIAllY2hvICIke2NhfSIKICAgICBm aQogfQpAQCAtMzMzLDYgKzM4MywxMCBAQCBjc19hcHBlbmRfY2FfZnJvbV9wZW0oKSB7CiAgICAg bG9jYWwgcGVtPSIkezJ9IgogICAgIGNzX2luaXRfdmFyaWFibGVzCiAKKyAgICBvcGVuc3NsIHg1 MDkgLWluICIke3BlbX0iIC1pbmZvcm0gcGVtIC1ub291dCAtcHVia2V5IHwgXAorCXNwa2ktaGFz aCAvZGV2L3N0ZGluID4+ICIke2tleWRpcn0vJHtyb2xlfS9jYS5maW5nZXJwcmludHMiCisgICAg Y2hlY2tfcGlwZV9zdGF0dXMgfHwgcHR4ZF9iYWlsb3V0ICJFeHRyYWN0aW5nIFNQS0kgaGFzaCBm cm9tIENBICcke3BlbX0nIGZhaWxlZCIKKwogICAgIGNhdCAiJHtwZW19IiA+PiAiJHtrZXlkaXJ9 LyR7cm9sZX0vY2EucGVtIgogICAgICMgYWRkIG5ldyBsaW5lIGluIGNhc2UgJHtwZW19IGRvZXMg bm90IGVuZCB3aXRoIGFuIEVPTAogICAgIGVjaG8gPj4gIiR7a2V5ZGlyfS8ke3JvbGV9L2NhLnBl bSIKLS0gCjIuMzAuMgoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fCnB0eGRpc3QgbWFpbGluZyBsaXN0CnB0eGRpc3RAcGVuZ3V0cm9uaXguZGUKVG8gdW5z dWJzY3JpYmUsIHNlbmQgYSBtYWlsIHdpdGggc3ViamVjdCAidW5zdWJzY3JpYmUiIHRvIHB0eGRp c3QtcmVxdWVzdEBwZW5ndXRyb25peC5kZQo=