/openbmc/linux/crypto/asymmetric_keys/ |
H A D | x509_public_key.c | 25 int x509_get_sig_params(struct x509_certificate *cert) in x509_get_sig_params() argument 27 struct public_key_signature *sig = cert->sig; in x509_get_sig_params() 35 sig->s = kmemdup(cert->raw_sig, cert->raw_sig_size, GFP_KERNEL); in x509_get_sig_params() 39 sig->s_size = cert->raw_sig_size; in x509_get_sig_params() 47 cert->unsupported_sig = true; in x509_get_sig_params() 67 if (strcmp(cert->pub->pkey_algo, "sm2") == 0) { in x509_get_sig_params() 70 sm2_compute_z_digest(desc, cert->pub->key, in x509_get_sig_params() 71 cert->pub->keylen, sig->digest) ?: in x509_get_sig_params() 75 crypto_shash_finup(desc, cert->tbs, cert->tbs_size, in x509_get_sig_params() 78 ret = crypto_shash_digest(desc, cert->tbs, cert->tbs_size, in x509_get_sig_params() [all …]
|
H A D | x509_cert_parser.c | 20 struct x509_certificate *cert; /* Certificate being constructed */ member 44 void x509_free_certificate(struct x509_certificate *cert) in x509_free_certificate() argument 46 if (cert) { in x509_free_certificate() 47 public_key_free(cert->pub); in x509_free_certificate() 48 public_key_signature_free(cert->sig); in x509_free_certificate() 49 kfree(cert->issuer); in x509_free_certificate() 50 kfree(cert->subject); in x509_free_certificate() 51 kfree(cert->id); in x509_free_certificate() 52 kfree(cert->skid); in x509_free_certificate() 53 kfree(cert); in x509_free_certificate() [all …]
|
/openbmc/qemu/scripts/ |
H A D | u2f-setup-gen.py | 92 cert = crypto.X509() 93 cert.set_version(0x2) 96 cert.set_serial_number(randint(1, 2 ** 64)) 99 cert.gmtime_adj_notBefore(0) 100 cert.gmtime_adj_notAfter(4 * (365 * 24 * 60 * 60)) 103 cert.set_pubkey(pubkey) 106 cert.get_subject().CN = "U2F emulated" 107 cert.set_issuer(cert.get_subject()) 110 cert.add_extensions([ 112 False, b"hash", subject=cert), [all …]
|
/openbmc/qemu/crypto/ |
H A D | tlscredsx509.c | 38 qcrypto_tls_creds_check_cert_times(gnutls_x509_crt_t cert, in qcrypto_tls_creds_check_cert_times() argument 51 if (gnutls_x509_crt_get_expiration_time(cert) < now) { in qcrypto_tls_creds_check_cert_times() 62 if (gnutls_x509_crt_get_activation_time(cert) > now) { in qcrypto_tls_creds_check_cert_times() 79 gnutls_x509_crt_t cert, in qcrypto_tls_creds_check_cert_basic_constraints() argument 87 status = gnutls_x509_crt_get_basic_constraints(cert, NULL, NULL, NULL); in qcrypto_tls_creds_check_cert_basic_constraints() 131 gnutls_x509_crt_t cert, in qcrypto_tls_creds_check_cert_key_usage() argument 140 status = gnutls_x509_crt_get_key_usage(cert, &usage, &critical); in qcrypto_tls_creds_check_cert_key_usage() 190 gnutls_x509_crt_t cert, in qcrypto_tls_creds_check_cert_key_purpose() argument 206 status = gnutls_x509_crt_get_key_purpose_oid(cert, i, buffer, in qcrypto_tls_creds_check_cert_key_purpose() 227 status = gnutls_x509_crt_get_key_purpose_oid(cert, i, buffer, in qcrypto_tls_creds_check_cert_key_purpose() [all …]
|
/openbmc/bmcweb/scripts/ |
H A D | generate_auth_certificates.py | 34 cert = crypto.X509() 35 cert.set_serial_number(serial) 36 cert.set_version(2) 37 cert.set_pubkey(key) 39 cert.set_notBefore(b"19700101000000Z") 40 cert.set_notAfter(b"20700101000000Z") 42 caCertSubject = cert.get_subject() 49 cert.set_issuer(caCertSubject) 51 cert.add_extensions( 58 b"subjectKeyIdentifier", False, b"hash", subject=cert [all …]
|
/openbmc/linux/arch/s390/boot/ |
H A D | ipl_report.c | 31 struct ipl_rb_certificate_entry *cert; in get_cert_comp_list_size() local 42 for_each_rb_entry(cert, certs) in get_cert_comp_list_size() 43 ipl_cert_list_size += sizeof(unsigned int) + cert->len; in get_cert_comp_list_size() 50 struct ipl_rb_certificate_entry *cert; in ipl_report_certs_intersects() local 55 for_each_rb_entry(cert, certs) { in ipl_report_certs_intersects() 56 if (intersects(addr, size, cert->addr, cert->len)) { in ipl_report_certs_intersects() 57 *intersection_start = cert->addr; in ipl_report_certs_intersects() 75 struct ipl_rb_certificate_entry *cert; in copy_certificates_bootdata() local 79 for_each_rb_entry(cert, certs) { in copy_certificates_bootdata() 80 *(unsigned int *) ptr = cert->len; in copy_certificates_bootdata() [all …]
|
/openbmc/libpldm/ |
H A D | .clang-tidy | 48 cert-con36-c, 49 cert-con54-cpp, 50 cert-dcl03-c, 51 cert-dcl16-c, 52 cert-dcl21-cpp, 53 cert-dcl37-c, 54 cert-dcl50-cpp, 55 cert-dcl51-cpp, 56 cert-dcl54-cpp, 57 cert-dcl58-cpp, [all …]
|
/openbmc/obmc-console/ |
H A D | .clang-tidy | 48 cert-con36-c, 49 cert-con54-cpp, 50 cert-dcl03-c, 51 cert-dcl16-c, 52 cert-dcl21-cpp, 53 cert-dcl37-c, 54 cert-dcl50-cpp, 55 cert-dcl51-cpp, 56 cert-dcl54-cpp, 57 cert-dcl58-cpp, [all …]
|
/openbmc/libcper/ |
H A D | .clang-tidy | 48 cert-con36-c, 49 cert-con54-cpp, 50 cert-dcl03-c, 51 cert-dcl16-c, 52 cert-dcl21-cpp, 53 cert-dcl37-c, 54 cert-dcl50-cpp, 55 cert-dcl51-cpp, 56 cert-dcl54-cpp, 57 cert-dcl58-cpp, [all …]
|
/openbmc/phosphor-certificate-manager/ |
H A D | x509_utils.cpp | 94 X509Ptr cert(X509_new(), ::X509_free); in loadCert() local 95 if (!cert) in loadCert() 111 X509* x509 = cert.get(); in loadCert() 118 return cert; in loadCert() 123 void validateCertificateStartDate(X509& cert) in validateCertificateStartDate() argument 132 ASN1_TIME* notBefore = X509_get_notBefore(&cert); in validateCertificateStartDate() 143 void validateCertificateAgainstStore(X509_STORE& x509Store, X509& cert) in validateCertificateAgainstStore() argument 153 errCode = X509_STORE_CTX_init(storeCtx.get(), &x509Store, &cert, nullptr); in validateCertificateAgainstStore() 211 void validateCertificateInSSLContext(X509& cert) in validateCertificateInSSLContext() argument 215 if (SSL_CTX_use_certificate(ctx.get(), &cert) != 1) in validateCertificateInSSLContext() [all …]
|
H A D | certificate.cpp | 157 const internal::X509Ptr cert = loadCert(certSrcFilePath); in generateAuthCertFileX509Path() local 158 unsigned long hash = X509_subject_name_hash(cert.get()); in generateAuthCertFileX509Path() 336 internal::X509Ptr cert = loadCert(certSrcFilePath); in install() local 339 validateCertificateAgainstStore(*x509Store, *cert); in install() 340 validateCertificateStartDate(*cert); in install() 341 validateCertificateInSSLContext(*cert); in install() 371 certId = generateCertId(*cert); in install() 374 populateProperties(*cert); in install() 410 internal::X509Ptr cert = parseCert(pem); in install() local 412 validateCertificateAgainstStore(x509Store, *cert); in install() [all …]
|
/openbmc/phosphor-state-manager/ |
H A D | .clang-tidy | 59 cert-con36-c, 60 cert-con54-cpp, 61 cert-dcl03-c, 62 cert-dcl16-c, 63 cert-dcl21-cpp, 64 cert-dcl37-c, 65 cert-dcl50-cpp, 66 cert-dcl51-cpp, 67 cert-dcl54-cpp, 68 cert-dcl58-cpp, [all …]
|
/openbmc/phosphor-led-manager/ |
H A D | .clang-tidy | 59 cert-con36-c, 60 cert-con54-cpp, 61 cert-dcl03-c, 62 cert-dcl16-c, 63 cert-dcl21-cpp, 64 cert-dcl37-c, 65 cert-dcl50-cpp, 66 cert-dcl51-cpp, 67 cert-dcl54-cpp, 68 cert-dcl58-cpp, [all …]
|
/openbmc/phosphor-bmc-code-mgmt/ |
H A D | .clang-tidy | 59 cert-con36-c, 60 cert-con54-cpp, 61 cert-dcl03-c, 62 cert-dcl16-c, 63 cert-dcl21-cpp, 64 cert-dcl37-c, 65 cert-dcl50-cpp, 66 cert-dcl51-cpp, 67 cert-dcl54-cpp, 68 cert-dcl58-cpp, [all …]
|
/openbmc/openbmc/meta-phosphor/recipes-phosphor/certificate/ |
H A D | phosphor-certificate-manager_git.bb | 15 PACKAGECONFIG ??= "bmcweb-cert authority-cert" 16 PACKAGECONFIG[ibm-hypervisor-cert] = "-Dca-cert-extension=enabled,-Dca-cert-extension=disabled" 17 PACKAGECONFIG[bmcweb-cert] = "-Dconfig-bmcweb=enabled,-Dconfig-bmcweb=disabled" 18 PACKAGECONFIG[authority-cert] = "-Dconfig-authority=enabled,-Dconfig-authority=disabled" 28 …${@bb.utils.contains('PACKAGECONFIG', 'ibm-hypervisor-cert', 'bmc-vmi-ca-manager.service', '', d)}… 29 …${@bb.utils.contains('PACKAGECONFIG', 'authority-cert', 'phosphor-certificate-manager@authority.se…
|
/openbmc/linux/certs/ |
H A D | Makefile | 26 cmd_extract_certs = $(obj)/extract-cert "$(extract-cert-in)" $@ 27 extract-cert-in = $(filter-out $(obj)/extract-cert, $(real-prereqs)) 31 $(obj)/x509_certificate_list: $(CONFIG_SYSTEM_TRUSTED_KEYS) $(obj)/extract-cert FORCE 70 $(obj)/signing_key.x509: extract-cert-in := $(PKCS11_URI) 73 $(obj)/signing_key.x509: $(filter-out $(PKCS11_URI),$(CONFIG_MODULE_SIG_KEY)) $(obj)/extract-cert F… 80 $(obj)/x509_revocation_list: $(CONFIG_SYSTEM_REVOCATION_KEYS) $(obj)/extract-cert FORCE 85 hostprogs := extract-cert 87 HOSTCFLAGS_extract-cert.o = $(shell $(HOSTPKG_CONFIG) --cflags libcrypto 2> /dev/null) 88 HOSTLDLIBS_extract-cert = $(shell $(HOSTPKG_CONFIG) --libs libcrypto 2> /dev/null || echo -lcrypto)
|
/openbmc/phosphor-time-manager/ |
H A D | .clang-tidy | 59 cert-con36-c, 60 cert-con54-cpp, 61 cert-dcl03-c, 62 cert-dcl16-c, 63 cert-dcl21-cpp, 64 cert-dcl37-c, 65 cert-dcl50-cpp, 66 cert-dcl51-cpp, 67 cert-dcl54-cpp, 68 cert-dcl58-cpp, [all …]
|
/openbmc/estoraged/ |
H A D | .clang-tidy | 62 cert-con36-c, 63 cert-con54-cpp, 64 cert-dcl03-c, 65 cert-dcl16-c, 66 cert-dcl21-cpp, 67 cert-dcl37-c, 68 cert-dcl50-cpp, 69 cert-dcl51-cpp, 70 cert-dcl54-cpp, 71 cert-dcl58-cpp, [all …]
|
/openbmc/phosphor-psu-code-mgmt/ |
H A D | .clang-tidy | 58 cert-con36-c, 59 cert-con54-cpp, 60 cert-dcl03-c, 61 cert-dcl16-c, 62 cert-dcl21-cpp, 63 cert-dcl50-cpp, 64 cert-dcl54-cpp, 65 cert-dcl58-cpp, 66 cert-dcl59-cpp, 67 cert-err09-cpp, [all …]
|
/openbmc/phosphor-debug-collector/ |
H A D | .clang-tidy | 81 cert-con36-c, 82 cert-con54-cpp, 83 cert-dcl03-c, 84 cert-dcl16-c, 85 cert-dcl21-cpp, 86 cert-dcl37-c, 87 cert-dcl50-cpp, 88 cert-dcl51-cpp, 89 cert-dcl54-cpp, 90 cert-dcl58-cpp, [all …]
|
/openbmc/phosphor-led-sysfs/ |
H A D | .clang-tidy | 61 cert-con36-c, 62 cert-con54-cpp, 63 cert-dcl03-c, 64 cert-dcl16-c, 65 cert-dcl21-cpp, 66 cert-dcl37-c, 67 cert-dcl50-cpp, 68 cert-dcl51-cpp, 69 cert-dcl54-cpp, 70 cert-dcl58-cpp, [all …]
|
/openbmc/bmcweb/include/ |
H A D | hostname_monitor.hpp | 90 X509* cert = ensuressl::loadCert(certFile); in onPropertyUpdate() local 91 if (cert == nullptr) in onPropertyUpdate() 101 X509_NAME_get_text_by_NID(X509_get_subject_name(cert), NID_commonName, in onPropertyUpdate() 106 X509_free(cert); in onPropertyUpdate() 112 EVP_PKEY* pPubKey = X509_get_pubkey(cert); in onPropertyUpdate() 116 X509_free(cert); in onPropertyUpdate() 119 int isSelfSigned = X509_verify(cert, pPubKey); in onPropertyUpdate() 127 X509_get_ext_d2i(cert, NID_netscape_comment, nullptr, nullptr)); in onPropertyUpdate() 155 X509_free(cert); in onPropertyUpdate()
|
/openbmc/pldm/ |
H A D | .clang-tidy | 54 cert-con54-cpp, 55 cert-dcl21-cpp, 56 cert-dcl50-cpp, 57 cert-dcl54-cpp, 58 cert-dcl58-cpp, 59 cert-dcl59-cpp, 60 cert-err09-cpp, 61 cert-err52-cpp, 62 cert-err60-cpp, 63 cert-err61-cpp, [all …]
|
/openbmc/entity-manager/ |
H A D | .clang-tidy | 81 cert-con36-c, 82 cert-con54-cpp, 83 cert-dcl03-c, 84 cert-dcl16-c, 85 cert-dcl21-cpp, 86 cert-dcl37-c, 87 cert-dcl50-cpp, 88 cert-dcl51-cpp, 89 cert-dcl54-cpp, 90 cert-dcl58-cpp, [all …]
|
/openbmc/dbus-sensors/ |
H A D | .clang-tidy | 81 cert-con36-c, 82 cert-con54-cpp, 83 cert-dcl03-c, 84 cert-dcl16-c, 85 cert-dcl21-cpp, 86 cert-dcl37-c, 87 cert-dcl50-cpp, 88 cert-dcl51-cpp, 89 cert-dcl54-cpp, 90 cert-dcl58-cpp, [all …]
|