[PATCH v2 15/17] crypto: concatenate fit development certificate with private key
Jonas Rebmann
jre at pengutronix.de
Mon Nov 3 03:41:14 PST 2025
Hi Sascha,
On 2025-11-03 11:08, Sascha Hauer wrote:
> On Tue, Oct 28, 2025 at 07:03:20PM +0100, Jonas Rebmann wrote:
>> Merge the exemplary keys copied in from [1] into a single pem file,
>> in a manner similar to test/self/development_rsa2048.pem for consistency
>> and to reduce clutter a bit.
>>
>> While at it, rename them from "fit-" to "snakeoil-" as they are not only
>> used for fit, but also for tlv integration tests, and to indicate more
>> clearly that these are publicly known keys.
>
> Should we rather keep the "fit" name and add another key for tlv
> integration tests?
I'd rather not add more 'compromised' keys to the repo. What would be
the gain?
I think naming it snakeoil gives it the warning it deserves. We should
make it hard for anyone to confuse our CI/Development keys with their
production keys.
Ahmad was concerned about cluttering the repo with keys I think, that's
why he asked me to concatenated public key and certificate here.
Regards,
Jonas
--
Pengutronix e.K. | Jonas Rebmann |
Steuerwalder Str. 21 | http://www.pengutronix.de/ |
31137 Hildesheim, Germany | Phone: +49-5121-206917-0 |
Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-9 |
More information about the barebox
mailing list