[Skiboot] [PATCH] libstb/create-container: avoid using deprecated APIs when compiling with OpenSSL 3.0

Reza Arbab arbab at linux.ibm.com
Thu Mar 17 01:26:02 AEDT 2022


On Tue, Feb 01, 2022 at 12:56:52PM -0600, Eric Richter wrote:
>However, I just managed to test this by using three skiboot images:
> - using OpenSSL 1.x
> - using OpenSSL 3.x
> - commenting out the changed code, leaving the container pubkey as zeros.
>
>The first two images booted up to Petitboot without issue. The third failed as
>expected, which mostly served as a sanity check that secure boot errors would
>be enforced with development firmware.
>
>I would prefer having a larger scale test of this, as I don't want this to be
>a potential source of problems in production in the future. That is not a
>strong preference though, if this testing method sounds relatively sane to
>more than just me, I am fine with moving forward.

Seems like a reasonable test.

Applied to master, as more people are starting to build on newer distros 
and this resolves a sticking point.

-- 
Reza Arbab


More information about the Skiboot mailing list