lp:~apw/launchpad/signing-eku

Created by Andy Whitcroft and last modified
Get this branch:
bzr branch lp:~apw/launchpad/signing-eku
Only Andy Whitcroft can upload to this branch. If you are Andy Whitcroft please log in for upload directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Andy Whitcroft
Project:
Launchpad itself
Status:
Development

Recent revisions

18744. By Andy Whitcroft

signing: add extendedKeyUsage = codeSigning,1.3.6.1.4.1.2312.16.1.2 to kmod keys

In order to prevent kernel module signing keys from also
being usable to sign kernels add the extendedKeyUsage of
codeSigning,1.3.6.1.4.1.2312.16.1.2 to the OpenSSL configuration
when generating these keys.

Take this opportunity to pull out the OpenSSL configuration
generation so that it can be validated during testing.

Signed-off-by: Andy Whitcroft <email address hidden>

18743. By Launchpad PQM Bot

[r=maxiberta][bug=1780411] Weaken type of key_text in
 person.deleteSSHKeysFromSSO so that more existing keys can be deleted.

18742. By Launchpad PQM Bot

[r=wgrant][no-qa] Adjust request-daily-builds DB permissions to
 handle recent changes in how snap builds are requested.

18741. By Launchpad PQM Bot

[testfix][r=cjwatson][no-qa] Fix various problems exposed by the
 request_daily_builds script test.

18740. By Launchpad PQM Bot

[r=wgrant][bug=1770400][incr] Make automatic builds of snaps honour
 build-on architectures.

18739. By Launchpad PQM Bot

[r=wgrant][bug=1783315] Clean up with_timeout worker thread upon
 receiving SoftTimeLimitExceeded from celery.

18738. By Launchpad PQM Bot

[r=wgrant][bug=1667725] Add Archive.getSigningKeyData,
 currently just proxying through to the keyserver.

18737. By Launchpad PQM Bot

[r=wgrant][bug=1623924] Handle the case where a Bazaar branch and a
 Git repository have the same identity URL when creating a recipe.

18736. By Launchpad PQM Bot

[r=wgrant][no-qa] Optimise GitRepository.fetchRefCommits if there are
 no commits to fetch.

18735. By Launchpad PQM Bot

[r=wgrant][bug=1771118] Fix OOPS when trying to look up
 ~user/project:branch as a unique Git repository name.

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:launchpad
This branch contains Public information 
Everyone can see this information.

Subscribers