summaryrefslogtreecommitdiff
path: root/package/system/opkg
diff options
context:
space:
mode:
authorSteven Barth <cyrus@openwrt.org>2013-10-02 12:12:10 +0000
committerSteven Barth <cyrus@openwrt.org>2013-10-02 12:12:10 +0000
commitcbdd346b11c6f125f48cdb1e95870d16e5c0d628 (patch)
treea6c5edbe734be83f8bcd880083de81f5060132ab /package/system/opkg
parent0ad1d06c13a15a9e91cc7a1a635ac678a298ed7f (diff)
downloadmtk-20170518-cbdd346b11c6f125f48cdb1e95870d16e5c0d628.zip
mtk-20170518-cbdd346b11c6f125f48cdb1e95870d16e5c0d628.tar.gz
mtk-20170518-cbdd346b11c6f125f48cdb1e95870d16e5c0d628.tar.bz2
Add package signing infrastructure
Add package signing key and certificate configuration options to the "Image configuration" submenu. If enabled, the Packages.gz list will be signed as file Packages.sig. The passphrase for the signing key can be sourced from a file or entered by the user. The signing certificate is automatically added to the firmware image if opkg-smime is selected. Signed-off-by: Evan Hunt <each@isc.org> Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 38284
Diffstat (limited to 'package/system/opkg')
-rw-r--r--package/system/opkg/Makefile6
-rw-r--r--package/system/opkg/files/opkg-smime.conf2
2 files changed, 6 insertions, 2 deletions
diff --git a/package/system/opkg/Makefile b/package/system/opkg/Makefile
index eb3b10a..3327a8e 100644
--- a/package/system/opkg/Makefile
+++ b/package/system/opkg/Makefile
@@ -109,8 +109,12 @@ define Package/opkg/Default/install
endef
Package/opkg/install = $(call Package/opkg/Default/install,$(1),)
-Package/opkg-smime/install = $(call Package/opkg/Default/install,$(1),-smime)
+define Package/opkg-smime/install
+ $(call Package/opkg/Default/install,$(1),-smime)
+ $(INSTALL_DIR) $(1)/etc/ssl/certs
+ $(if $(CONFIG_OPKGSMIME_CERT),$(INSTALL_DATA) $(call qstrip,$(CONFIG_OPKGSMIME_CERT)) $(1)/etc/ssl/certs/opkg.pem,)
+endef
define Build/InstallDev
mkdir -p $(1)/usr/include
diff --git a/package/system/opkg/files/opkg-smime.conf b/package/system/opkg/files/opkg-smime.conf
index 103f231..849bb65 100644
--- a/package/system/opkg/files/opkg-smime.conf
+++ b/package/system/opkg/files/opkg-smime.conf
@@ -4,4 +4,4 @@ dest ram /tmp
lists_dir ext /var/opkg-lists
option overlay_root /overlay
option check_signature 1
-option signature_ca_path /etc/ssl/certs/
+option signature_ca_file /etc/ssl/certs/opkg.pem