3 Commits

Author	SHA1	Message	Date
Gaurav Shah	551037b10e	Make dumpRSAPublicKey also accept a public key in PEM format ... This change makes dumpRSAPublicKey directly accept a public key in PEM format. This makes it possible to avoid the unnecessary step of generating a self-signed certificate to dump the public key in .keyb format. The old style certificate input is still accepted. Using certs (as done previously): dumpRSAPublicKey -cert <certfile> Directly using public keys: dumpRSAPublicKey -pub <pubfile> Change-Id: Ic35b59aff6613d145d7947212650da281f734b74 BUG=7576 TEST=manual $ openssl genrsa -F4 -out test.pem 4096 $ openssl rsa -in test.pem -out test.pub $ dumpRSAPublicKey -pub test.pub >test.pub.keyb Verify that this matches the output we get using the old style <cert> input. $ openssl req -batch -new -x509 -key test.pem -out test.cert $ dumpRSAPublicKey -cert test.cert >test.cert.keyb $ diff test.pub.keyb test.cert.keyb $ Review URL: http://codereview.chromium.org/4215006	2010-11-01 13:33:32 -07:00
Bill Richardson	0697e3f0cf	Enhance 'cgpt find' command to match keyblocks if desired. ... This is part of the proposed developer-mode installation process, where we want to detect that whoever is fiddling with the hard drive has already fiddled with it before. Otherwise, we'll make them wait a bit to prevent drive-by updates. BUG=chromium-os:5306 Change-Id: Ifd6dce69180fa818fe14dbc3b1ac3485fb15d1c9 Review URL: http://codereview.chromium.org/3122023	2010-08-17 16:58:46 -07:00
Bill Richardson	4f36ef3360	Changes to allow user-signed kernels to be generated. ... Make vbutil_keyblock handle unsigned blocks. Also enable --unpack option and add tests for it. Modify vbutil_kernel to allow unsigned keyblocks, correct usage message, and fix the --debug option which was somehow disabled. Update load_kernel_test to accept /dev/null for the public key, to test non-signed kernel keyblocks. Review URL: http://codereview.chromium.org/3124004	2010-08-09 17:50:14 -07:00