Skip to content

Conversation

@stefanberger
Copy link
Owner

@stefanberger stefanberger commented Oct 1, 2025

Propagate the --allow-signing option from swtpm_setup into swtpm_localca so that a certificate will finally be created that reflects the 'Digital Signature' key usage.

Extend a test case to check for the 'Digitial signature' flag under 'key usage' when --allow-signing is passed.

Resolves: #1061

Propagate the --allow-signing option from swtpm_setup into swtpm_localca
so that a certificate will finally be created that reflects the 'Digital
Signature' key usage.

Extend a test case to check for the 'Digitial signature' flag under
'key usage' when --allow-signing is passed.

Resolves: #1061
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
@stefanberger stefanberger force-pushed the stefanberger/swtpm_setup_propagate_allow_signing branch from ad0b06a to 5634344 Compare October 1, 2025 15:31
@stefanberger stefanberger merged commit 8084873 into master Oct 1, 2025
8 of 9 checks passed
@stefanberger stefanberger deleted the stefanberger/swtpm_setup_propagate_allow_signing branch October 1, 2025 15:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

swtpm_setup not using --allow-signing flag

2 participants