ExternalVendorCode/openwrt
1
0
Fork 0
mirror of https://github.com/openwrt/openwrt.git synced 2024-12-27 01:11:14 +00:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity
e3bbeabe92
openwrt/package/system/openwrt-keyring/Makefile

47 lines
1.2 KiB
Makefile
Raw Normal View History

signing: remove unatteded build key and use current keyring instead Remove the public unatteded buildkey from the opkg package to avoid having hardcoded keys in tree. Use the external keyring package instead which can be easily updated by users. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-04-30 18:39:23 +00:00
# Copyright (C) 2016 LEDE project
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
include $(TOPDIR)/rules.mk
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
PKG_NAME:=openwrt-keyring
openwrt-keyring: add apk public key for signing of package indexes apk/openwrt-snapshots.pem contains Elliptic Curve based public key which is going to be used for signing of apk's package.adb package indexes after the builds using `apk adbsign --sign-key <key> packages.adb` command on the buildbot. References: https://github.com/openwrt/buildbot/pull/46 Link: https://github.com/openwrt/openwrt/pull/16539 Signed-off-by: Petr Štetiar <ynezz@true.cz>
2024-09-28 13:27:19 +00:00
PKG_RELEASE:=1
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
PKG_SOURCE_PROTO:=git
treewide: replace LEDE_GIT with PROJECT_GIT Remove LEDE_GIT references in favor to the new name-agnostic PROJECT_GIT variable. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-01-05 09:46:06 +00:00
PKG_SOURCE_URL=$(PROJECT_GIT)/keyring.git
openwrt-keyring: add OpenWrt 24.10 release build usign key fbae29d730f8 usign: add OpenWrt 24.10 release build public key Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit a535cfc09e1ced5785d65bee0a0116a71585128e)
2024-11-01 06:25:07 +00:00
PKG_SOURCE_DATE:=2024-11-01
PKG_SOURCE_VERSION:=fbae29d730f81c892f52e0ff00fe867444aeeae6
PKG_MIRROR_HASH:=9a314756ddb61dde084f810ef056835addd9097ad26cb5e66efc6b38debc8aa0
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
global: change my email address Signed-off-by: John Crispin <john@phrozen.org>
2016-05-11 07:06:21 +00:00
PKG_MAINTAINER:=John Crispin <john@phrozen.org>
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
PKG_LICENSE:=GPL-2.0
include $(INCLUDE_DIR)/package.mk
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
define Package/openwrt-keyring
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
SECTION:=base
CATEGORY:=Base system
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
PROVIDES:=lede-keyring
TITLE:=OpenWrt Developer Keyring
URL:=https://openwrt.org/docs/guide-user/security/signatures
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
endef
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
define Package/openwrt-keyring/description
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
The keyring of with the developer using and gpg public keys.
endef
Build/Compile=
openwrt-keyring: add apk public key for signing of package indexes apk/openwrt-snapshots.pem contains Elliptic Curve based public key which is going to be used for signing of apk's package.adb package indexes after the builds using `apk adbsign --sign-key <key> packages.adb` command on the buildbot. References: https://github.com/openwrt/buildbot/pull/46 Link: https://github.com/openwrt/openwrt/pull/16539 Signed-off-by: Petr Štetiar <ynezz@true.cz>
2024-09-28 13:27:19 +00:00
ifneq ($(CONFIG_USE_APK),)
define Package/openwrt-keyring/install
$(INSTALL_DIR) $(1)/etc/apk/keys/
$(INSTALL_DATA) $(PKG_BUILD_DIR)/apk/*.pem $(1)/etc/apk/keys/
endef
else
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
define Package/openwrt-keyring/install
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
$(INSTALL_DIR) $(1)/etc/opkg/keys/
openwrt-keyring: Only copy sign key for snapshots Instead of adding all public signature keys from the openwrt-keyring repository only add the key which is used to sign the master feeds. If one of the other keys would be compromised this would not affect users of master snapshot builds. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-05-12 23:25:55 +00:00
# Public usign key for unattended snapshot builds
$(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/b5043e70f9a75cde $(1)/etc/opkg/keys/
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
endef
openwrt-keyring: add apk public key for signing of package indexes apk/openwrt-snapshots.pem contains Elliptic Curve based public key which is going to be used for signing of apk's package.adb package indexes after the builds using `apk adbsign --sign-key <key> packages.adb` command on the buildbot. References: https://github.com/openwrt/buildbot/pull/46 Link: https://github.com/openwrt/openwrt/pull/16539 Signed-off-by: Petr Štetiar <ynezz@true.cz>
2024-09-28 13:27:19 +00:00
endif
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org>
2016-04-26 23:50:04 +00:00
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-05-20 17:32:29 +00:00
$(eval $(call BuildPackage,openwrt-keyring))
Reference in New Issue Copy Permalink