Re: Tools for testing Grub / Go OpenPGP compatibility

[Daniel Axtens]

Charles Duffy <charles@dyfis.net> writes:

> Howdy, y'all --
>
> In anticipation of trying to revive the OpenPGP compatibility patch created
> by Ignat Korchagin in 2016, I've assembled a simple test suite that can
> generate multiple builds of GRUB (different versions/patches/etc) and then
> test them with keys and signatures generated by multiple tools:
>
> https://github.com/charles-dyfis-net/grub-openpgp-compat-test

Cool!

> Unfortunately, Ignat's original patch is not remotely trivial to square
> with the changes introduced with the verifier framework core (in
> 75a919e334f8514b6adbc024743cfcd9b88fa394), so it looks to me like the
> easiest approach will be starting from scratch, comparing the original code
> against the RFC. Hopefully the test framework will help -- but if anyone
> else has been doing work in this area already, I'd be very glad to hear of
> it before putting in more time!

My team has been working on the verifier area to support appended
signatures (used to sign Linux kernel modules, and on at least powerpc64
also used to sign the kernel), so I have some familiarity with the
area. Where would I find the original patch?

Regards,
Daniel

> _______________________________________________
> Grub-devel mailing list
> Grub-devel@gnu.org
> https://lists.gnu.org/mailman/listinfo/grub-devel