radon/ksigner
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

change key subject

Browse Source
This commit is contained in:
radon 2025-09-24 11:32:28 -05:00
parent 630f92a313
commit 2c85c65c18
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/ksigner.in
View File

@ -21,6 +21,8 @@ KEY_PUB="MOK.pem"
KEY_PRIV="MOK.priv" KEY_PRIV="MOK.priv"
KEY_DER="MOK.der" KEY_DER="MOK.der"
KEY_SUBJ="/O=ksigner/OU=KSigner Secure Boot/CN=ksigner"
REQUIRED_BINARIES=( REQUIRED_BINARIES=(
"openssl" "openssl"
"mokutil" "mokutil"
@ -142,9 +144,10 @@ setup_signing_keys() {
# Step 1: Create the signing keys # Step 1: Create the signing keys
log "[Step 1] Creating signing keys..." log "[Step 1] Creating signing keys..."
openssl req -new -x509 -newkey rsa:4096 \ openssl req -new -x509 -newkey rsa:4096 \
-keyout $KEY_PRIV \ -keyout "$KEY_PRIV" \
-outform DER -out $KEY_DER \ -outform DER -out "$KEY_DER" \
-nodes -days $KEY_LIFETIME_DAYS -subj "/CN=Kernel Signing/" || -nodes -days "$KEY_LIFETIME_DAYS" \
-subj "$KEY_SUBJ" ||
panic "[Step 1] Failed to create signing keys" panic "[Step 1] Failed to create signing keys"
# Step 2: Convert the keys to PEM format # Step 2: Convert the keys to PEM format