Re: [PATCH v3 08/10] certs: Check that builtin blacklist hashes are valid

2021-01-21 Thread Jarkko Sakkinen
On Thu, Jan 21, 2021 at 10:18:20AM +0100, Mickaël Salaün wrote: > > On 21/01/2021 00:53, Jarkko Sakkinen wrote: > > On Wed, Jan 20, 2021 at 12:57:55PM +0100, Mickaël Salaün wrote: > >> > >> On 20/01/2021 06:19, Jarkko Sakkinen wrote: > >>> On Thu, Jan 14, 2021 at 04:19:07PM +0100, Mickaël Salaün w

Re: [PATCH v3 08/10] certs: Check that builtin blacklist hashes are valid

2021-01-21 Thread Mickaël Salaün
On 21/01/2021 00:53, Jarkko Sakkinen wrote: > On Wed, Jan 20, 2021 at 12:57:55PM +0100, Mickaël Salaün wrote: >> >> On 20/01/2021 06:19, Jarkko Sakkinen wrote: >>> On Thu, Jan 14, 2021 at 04:19:07PM +0100, Mickaël Salaün wrote: From: Mickaël Salaün Add and use a check-blacklist-ha

Re: [PATCH v3 08/10] certs: Check that builtin blacklist hashes are valid

2021-01-20 Thread Jarkko Sakkinen
On Wed, Jan 20, 2021 at 12:57:55PM +0100, Mickaël Salaün wrote: > > On 20/01/2021 06:19, Jarkko Sakkinen wrote: > > On Thu, Jan 14, 2021 at 04:19:07PM +0100, Mickaël Salaün wrote: > >> From: Mickaël Salaün > >> > >> Add and use a check-blacklist-hashes.awk script to make sure that the > >> builti

Re: [PATCH v3 08/10] certs: Check that builtin blacklist hashes are valid

2021-01-20 Thread Mickaël Salaün
On 20/01/2021 06:19, Jarkko Sakkinen wrote: > On Thu, Jan 14, 2021 at 04:19:07PM +0100, Mickaël Salaün wrote: >> From: Mickaël Salaün >> >> Add and use a check-blacklist-hashes.awk script to make sure that the >> builtin blacklist hashes will be approved by the run time blacklist >> description

Re: [PATCH v3 08/10] certs: Check that builtin blacklist hashes are valid

2021-01-19 Thread Jarkko Sakkinen
On Thu, Jan 14, 2021 at 04:19:07PM +0100, Mickaël Salaün wrote: > From: Mickaël Salaün > > Add and use a check-blacklist-hashes.awk script to make sure that the > builtin blacklist hashes will be approved by the run time blacklist > description checks. This is useful to debug invalid hash format

[PATCH v3 08/10] certs: Check that builtin blacklist hashes are valid

2021-01-14 Thread Mickaël Salaün
From: Mickaël Salaün Add and use a check-blacklist-hashes.awk script to make sure that the builtin blacklist hashes will be approved by the run time blacklist description checks. This is useful to debug invalid hash formats, and it make sure that previous hashes which could have been loaded in t