ExternalVendorCode/openwrt
1
0
Fork 0
mirror of https://github.com/openwrt/openwrt.git synced 2024-12-26 08:51:13 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
4111210b27
openwrt/package/system/openwrt-keyring/Makefile

47 lines
1.2 KiB
Makefile
Raw Normal View History

signing: remove unatteded build key and use current keyring instead Remove the public unatteded buildkey from the opkg package to avoid having hardcoded keys in tree. Use the external keyring package instead which can be easily updated by users. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-04-30 18:39:23 +00:00
# Copyright (C) 2016 LEDE project
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
include $(TOPDIR)/rules.mk
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
PKG_NAME:=openwrt-keyring
openwrt-keyring: fix missing 24.10 usign key by installing it @KA2107 reported that opkg is not able to verify the artifact signatures produced by buildbot using the usign 24.10 release keys. So lets fix it by actually adding the 24.10 usign key with d310c6f2833e97f7 fingerprint into the openwrt-keyring package. Fixes: #16850 Reported-by: @KA2107 Fixes: a535cfc09e1c ("openwrt-keyring: add OpenWrt 24.10 release build usign key") References: 2d03f27f0f07 ("openwrt-keyring: make opkg use 22.03 usign key") Signed-off-by: Kuan-Yi Li <kyli@abysm.org> Signed-off-by: Petr Štetiar <ynezz@true.cz> [commit description]
2024-11-02 20:11:36 +00:00
PKG_RELEASE:=2
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
PKG_SOURCE_PROTO:=git
treewide: replace LEDE_GIT with PROJECT_GIT Remove LEDE_GIT references in favor to the new name-agnostic PROJECT_GIT variable. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-01-05 09:46:06 +00:00
PKG_SOURCE_URL=$(PROJECT_GIT)/keyring.git
openwrt-keyring: add OpenWrt 24.10 release build usign key fbae29d730f8 usign: add OpenWrt 24.10 release build public key Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit a535cfc09e1ced5785d65bee0a0116a71585128e)
2024-11-01 06:25:07 +00:00
PKG_SOURCE_DATE:=2024-11-01
PKG_SOURCE_VERSION:=fbae29d730f81c892f52e0ff00fe867444aeeae6
PKG_MIRROR_HASH:=9a314756ddb61dde084f810ef056835addd9097ad26cb5e66efc6b38debc8aa0
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
global: change my email address Signed-off-by: John Crispin <john@phrozen.org>
2016-05-11 07:06:21 +00:00
PKG_MAINTAINER:=John Crispin <john@phrozen.org>
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
PKG_LICENSE:=GPL-2.0
include $(INCLUDE_DIR)/package.mk
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
define Package/openwrt-keyring
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
SECTION:=base
CATEGORY:=Base system
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
PROVIDES:=lede-keyring
TITLE:=OpenWrt Developer Keyring
URL:=https://openwrt.org/docs/guide-user/security/signatures
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
endef
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
define Package/openwrt-keyring/description
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
The keyring of with the developer using and gpg public keys.
endef
Build/Compile=
openwrt-keyring: add apk public key for signing of package indexes apk/openwrt-snapshots.pem contains Elliptic Curve based public key which is going to be used for signing of apk's package.adb package indexes after the builds using `apk adbsign --sign-key <key> packages.adb` command on the buildbot. References: https://github.com/openwrt/buildbot/pull/46 Link: https://github.com/openwrt/openwrt/pull/16539 Signed-off-by: Petr Štetiar <ynezz@true.cz>
2024-09-28 13:27:19 +00:00
ifneq ($(CONFIG_USE_APK),)
define Package/openwrt-keyring/install
$(INSTALL_DIR) $(1)/etc/apk/keys/
$(INSTALL_DATA) $(PKG_BUILD_DIR)/apk/*.pem $(1)/etc/apk/keys/
endef
else
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
define Package/openwrt-keyring/install
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
$(INSTALL_DIR) $(1)/etc/opkg/keys/
openwrt-keyring: fix missing 24.10 usign key by installing it @KA2107 reported that opkg is not able to verify the artifact signatures produced by buildbot using the usign 24.10 release keys. So lets fix it by actually adding the 24.10 usign key with d310c6f2833e97f7 fingerprint into the openwrt-keyring package. Fixes: #16850 Reported-by: @KA2107 Fixes: a535cfc09e1c ("openwrt-keyring: add OpenWrt 24.10 release build usign key") References: 2d03f27f0f07 ("openwrt-keyring: make opkg use 22.03 usign key") Signed-off-by: Kuan-Yi Li <kyli@abysm.org> Signed-off-by: Petr Štetiar <ynezz@true.cz> [commit description]
2024-11-02 20:11:36 +00:00
# Public usign key for 24.10 release builds
$(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/d310c6f2833e97f7 $(1)/etc/opkg/keys/
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
endef
openwrt-keyring: add apk public key for signing of package indexes apk/openwrt-snapshots.pem contains Elliptic Curve based public key which is going to be used for signing of apk's package.adb package indexes after the builds using `apk adbsign --sign-key <key> packages.adb` command on the buildbot. References: https://github.com/openwrt/buildbot/pull/46 Link: https://github.com/openwrt/openwrt/pull/16539 Signed-off-by: Petr Štetiar <ynezz@true.cz>
2024-09-28 13:27:19 +00:00
endif
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
$(eval $(call BuildPackage,openwrt-keyring))
Reference in New Issue Copy Permalink