diff options
| author | Dave Brolley <brolley@redhat.com> | 2009-05-04 16:05:22 -0400 |
|---|---|---|
| committer | Dave Brolley <brolley@redhat.com> | 2009-05-04 16:05:22 -0400 |
| commit | 2035bcd40b17832439df0a1eb28403b99a71b74f (patch) | |
| tree | 0fb027ba40f34513279f2e39e1110b50a415d2c1 /buildrun.cxx | |
| parent | 3ba2eb82cafa938c1c3f7ef9d2da06912a49d8e0 (diff) | |
| download | systemtap-steved-2035bcd40b17832439df0a1eb28403b99a71b74f.tar.gz systemtap-steved-2035bcd40b17832439df0a1eb28403b99a71b74f.tar.xz systemtap-steved-2035bcd40b17832439df0a1eb28403b99a71b74f.zip | |
Module signing and verification using a separate file for the module signature.
Diffstat (limited to 'buildrun.cxx')
| -rw-r--r-- | buildrun.cxx | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/buildrun.cxx b/buildrun.cxx index 14c6a395..31f7ec00 100644 --- a/buildrun.cxx +++ b/buildrun.cxx @@ -10,6 +10,9 @@ #include "buildrun.h" #include "session.h" #include "util.h" +#if HAVE_NSS +#include "modsign.h" +#endif #include <cstdlib> #include <fstream> @@ -218,6 +221,14 @@ compile_pass (systemtap_session& s) rc = run_make_cmd(s, make_cmd); +#if HAVE_NSS + // If a certificate database was specified, then try to sign the module. + // Failure to do so is not a fatal error. If the signature is actually needed, + // staprun will complain at that time. + assert (! s.cert_db_path.empty()); + sign_module (s); +#endif + return rc; } |