wifi: cfg80211: fix certs build to not depend on file orderThe file for the new certificate (Chen-Yu Tsai's) didn'tend with a comma, so depending on the file order in thebuild rule, we'd end up w
wifi: cfg80211: fix certs build to not depend on file orderThe file for the new certificate (Chen-Yu Tsai's) didn'tend with a comma, so depending on the file order in thebuild rule, we'd end up with invalid C when concatenatingthe (now two) certificates. Fix that.Cc: stable@vger.kernel.orgReported-by: Biju Das <biju.das.jz@bp.renesas.com>Reported-by: Naresh Kamboju <naresh.kamboju@linaro.org>Fixes: fb768d3b13ff ("wifi: cfg80211: Add my certificate")Signed-off-by: Johannes Berg <johannes.berg@intel.com>
show more ...
wifi: cfg80211: Add my certificateAs announced [1][2], I have taken over maintainership of thewireless-regdb project.Add my certificate so that newer releases are valid to the kernel.Seth's cer
wifi: cfg80211: Add my certificateAs announced [1][2], I have taken over maintainership of thewireless-regdb project.Add my certificate so that newer releases are valid to the kernel.Seth's certificate should be kept around for awhile, at least untila few new releases by me happen.This should also be applied to stable trees so that stable kernelscan utilize newly released database binaries.[1] https://lore.kernel.org/linux-wireless/CAGb2v657baNMPKU3QADijx7hZa=GUcSv2LEDdn6N=QQaFX8r-g@mail.gmail.com/[2] https://lore.kernel.org/linux-wireless/ZWmRR5ul7EDfxCan@wens.tw/Cc: stable@vger.kernel.orgSigned-off-by: Chen-Yu Tsai <wens@kernel.org>Acked-by: Seth Forshee <sforshee@kernel.org>Link: https://msgid.link/ZXHGsqs34qZyzZng@wens.twSigned-off-by: Johannes Berg <johannes.berg@intel.com>
cfg80211: ship certificates as hex filesNot only does this remove the need for the hexdump code in mostnormal kernel builds (still there for the extra directory), butit also removes the need to s
cfg80211: ship certificates as hex filesNot only does this remove the need for the hexdump code in mostnormal kernel builds (still there for the extra directory), butit also removes the need to ship binary files, which apparentlyis somewhat problematic, as Randy reported.While at it, also add the generated files to clean-files.Reported-by: Randy Dunlap <rdunlap@infradead.org>Signed-off-by: Johannes Berg <johannes.berg@intel.com>
cfg80211: implement regdb signature checkingCurrently CRDA implements the signature checking, and the previouscommits added the ability to load the whole regulatory databaseinto the kernel.Howe
cfg80211: implement regdb signature checkingCurrently CRDA implements the signature checking, and the previouscommits added the ability to load the whole regulatory databaseinto the kernel.However, we really can't lose the signature checking, so implementit in the kernel by loading a detached signature (regulatory.db.p7s)and check it against built-in keys.Signed-off-by: Johannes Berg <johannes.berg@intel.com>