diff options
| author | George McCollister <george.mccollister@gmail.com> | 2011-05-12 15:48:35 -0500 |
|---|---|---|
| committer | Michael Olbrich <m.olbrich@pengutronix.de> | 2011-05-28 10:38:32 +0200 |
| commit | 1ba16b048959815aac80ae3dce1b3a76211309dc (patch) | |
| tree | 00247f4414ff5de009f8f9d57aa497e51f37c57b /platforms | |
| parent | 14e672f348f40ff9ab90c655388e03f1444f13cb (diff) | |
| download | ptxdist-1ba16b048959815aac80ae3dce1b3a76211309dc.tar.gz ptxdist-1ba16b048959815aac80ae3dce1b3a76211309dc.tar.xz | |
Added option to sign ipkg-repository
ipkg-repository can now be signed using openssl. A signature for the
Packages file is created and stored in Packages.sig. On the target, opkg
can be configured to enforce verification of the Packages file (which in
turn contains hashes of each ipk file) by using an /etc/opkg/opkg.conf similar
to the following:
src myrepo http://server/ipkg-repository/mydistro/dists/mydistro-3
option check_signature
option signature_ca_path /var/keys
option signature_ca_file /var/keys/selfsigned.crt
Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
Diffstat (limited to 'platforms')
| -rw-r--r-- | platforms/image_ipkg.in | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/platforms/image_ipkg.in b/platforms/image_ipkg.in index caafb240a..20d01cc2a 100644 --- a/platforms/image_ipkg.in +++ b/platforms/image_ipkg.in @@ -24,6 +24,34 @@ config IMAGE_IPKG_FORCED_PUSH If this option is checked, this is done by default. This is most useful for development purposes. +menuconfig IMAGE_IPKG_SIGN_OPENSSL + depends on IMAGE_IPKG_PUSH_TO_REPOSITORY + bool + select HOST_OPENSSL + prompt "sign ipkg-repository with openssl" + help + Use openssl to to sign the Packages file in the package + repository. + + +if IMAGE_IPKG_SIGN_OPENSSL + +config IMAGE_IPKG_SIGN_OPENSSL_SIGNER + string + default "" + prompt "signer certificate file" + help + signer certificate file to pass to openssl for signing. + +config IMAGE_IPKG_SIGN_OPENSSL_KEY + string + default "" + prompt "private key file" + help + private key file to pass to openssl. + +endif + config IMAGE_INSTALL_FROM_IPKG_REPOSITORY bool select IMAGE_IPKG_PUSH_TO_REPOSITORY |