ima key is encrypted

[lumag]

x509_ima.key file is encrypted. Could you please either update it to contain raw key or provide a password.

[trini]

All of the passwords for the sample keys are provided / documented.

[lumag]

@trini could you please point me to the password of the IMA sample key?

[trini]

@trini could you please point me to the password of the IMA sample key?

Per layer.conf it's "SecureCore".

[lumag]

@trini I've been talking about IMA key, rather than RPM_GPG key. And "SecureCore" does not work for IMA key.

[trini]

The RPM_GPG key is how the IMA signatures are done within the RPM. Perhaps you can expand on the problem you're seeing?

[lumag]

My main problem is that evmctl requires one to enter unknown password when using default x509_ima.der/key.

[trini]

Ah, right, OK, sorry, been too long. For some reason sign_rpm_ext.bbclas is where the default password is set. This can be overridden in layer.conf, etc, for customization.

[lumag]

Could you please document it somewhere?