Have systemd populate keyrings at boot from UEFI-stored material

oracle / ktls-utils

TLS handshake utilities for in-kernel TLS consumers

GNU General Public License v2.0

28 stars 15 forks source link

Have systemd populate keyrings at boot from UEFI-stored material #58

Open chucklever opened 3 months ago

chucklever commented 3 months ago

Systemd has the capability of extracting blobs from UEFI and stuffing them onto a keyring: systemd. TLS-enabled storage tools can then direct tlshd to a particular key and/or keyring to obtain authentication material instead of tlshd reading it from a file.

Related to #30