Marc Hartmayer 074de1e14e genprotimg: add host-key document verification support ...

Add host-key document verification support to genprotimg. This ensures
that a host-key document is genuine and provided by IBM. For this the
user must provide the IBM Z signing key, the intermediate CA
certificate (signed by the root CA used) so a chain of trust starting
from the host-key document and ending in the root CA can be
established.

By default, genprotimg tries to download all revocation lists needed
by looking up in the corresponding certificate on how CRL information
can be obtained (see https://tools.ietf.org/html/rfc5280#section-4.2.1.13
for details).

Acked-by: Patrick Steuer <patrick.steuer@de.ibm.com>
Signed-off-by: Marc Hartmayer <mhartmay@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2020-11-18 11:28:35 +01:00

..

genprotimg.8

genprotimg: add host-key document verification support

2020-11-18 11:28:35 +01:00

Makefile

genprotimg: introduce new tool for the creation of PV images

2020-03-16 13:41:35 +01:00