#!/bin/sh

# Author: Athmane Madjoudj <athmanem@gmail.com>

# Note: This was a known issue with CentOS 6.0 GA kernel

t_Log "Running $0 -  check CentOS' Kernel Module GPG key."

uname_arch=$(uname -m)

if [ "$uname_arch" == "aarch64" ] || [ "$uname_arch" == "armv7l" ] || [ "$uname_arch" == "i686" ]; then

  t_Log "*** Not testing on Arch: $uname_arch ***"

  exit 0

fi

if [ "$centos_ver" -ge 7 ] ; then

  if [ "$centos_ver" -eq 7 ];then

    ring=.system_keyring

  else

    ring=.builtin_trusted_keys

  fi

  for id in kpatch "Driver update" kernel

  do

    t_Log "Verifying x.509 CentOS ${id}"

    keyctl list %:$ring | grep -i "CentOS Linux ${id} signing key" > /dev/null 2>&1

    t_CheckExitStatus $?

  done

else

  grep 'User ID: CentOS (Kernel Module GPG key)' /var/log/dmesg > /dev/null 2>&1

  t_CheckExitStatus $?

fi