Creating a public/private keypair
-
Make sure that the user space tools are build and
installed on the system.
-
Create the directory /etc/cryptomark. This is where the
public / private key pair will be stored.
-
Run the cm_keygen program with the following command line options:
cm_keygen --gen-key
-
Select the type of key you wish to generate, and follow all of the prompts.
-
After the sequence of questions are over, you will have a private key in
the /etc/cryptomark/secring.gpg file and the public key will be
in the /etc/cryptomark/pubring.gpg file. You will need the
secring.gpg file when signing binaries, and the pubring.gpg
file to let the CryptoMark kernel module know what is the acceptable key
signature.