Robert Marko 9a54bf699e boot: arm-trusted-firmware-microchipsw: stabilize cert metadata ...

Use SOURCE_DATE_EPOCH for X.509 validity and hash the unsigned
certificate fields to derive stable serial numbers. The hash includes
payload extensions, so changed firmware gets a new serial.

Retain the existing behavior when the variable is unset and reject
invalid values. ECDSA signatures remain nondeterministic.

Signed-off-by: Robert Marko <robert.marko@sartura.hr>

2026-10-14 09:39:33 +02:00

..

base-files

base-files: support per-color intensities for multicolor LEDs

2026-10-11 21:28:57 +02:00

boot

boot: arm-trusted-firmware-microchipsw: stabilize cert metadata

2026-10-14 09:39:33 +02:00

devel

kselftests-bpf: isolate target userspace compiler flags

2026-09-29 09:29:09 +02:00

firmware

mipi-dbi: mark as non-shared, drop tool from tree

2026-10-11 18:30:48 +01:00

kernel

kernel: modules: add kmod-tpm-crb kernel module package

2026-10-13 00:45:26 +02:00

libs

libnetfilter-conntrack: update to version 1.1.1

2026-10-13 01:24:32 +02:00

network

nftables: update to version 1.1.7

2026-10-13 01:17:20 +02:00

system

procd: assign conventional /dev/net/tun permissions

2026-10-11 09:57:57 +02:00

utils

ucode: rtnl: return true on acknowledged requests without data

2026-10-09 20:46:24 +02:00

Makefile

package: reuse the rootfs if its inputs did not change

2026-09-22 18:18:58 +02:00