Marc Hartmayer 78b053326c genprotimg: remove DigiCert root CA pinning ...

Remove the DigiCert root CA pinning. The root CA used for the chain of trust can
change in the future therefore let's remove this check. If someone wants to
enforce the usage of a specific root CA it can be selected by the genprotimg
command line option `--root-ca $CA`. Make it transparent to the user which root
CA is actually being used by printing the subject name of the root CA to stdout
in verbose mode.

Signed-off-by: Marc Hartmayer <mhartmay@linux.ibm.com>
Acked-by: Viktor Mihajlovski <mihajlov@linux.ibm.com>
Reviewed-and-tested-by: Nico Boehr <nrb@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2022-04-06 16:11:19 +02:00

..

genprotimg.8

genprotimg: remove DigiCert root CA pinning

2022-04-06 16:11:19 +02:00

Makefile

genprotimg: introduce new tool for the creation of PV images

2020-03-16 13:41:35 +01:00