diff options
author | Sascha Hauer <s.hauer@pengutronix.de> | 2019-09-27 15:40:02 +0200 |
---|---|---|
committer | Michael Olbrich <m.olbrich@pengutronix.de> | 2019-11-26 07:59:56 +0100 |
commit | 8f41183e0afe80f9eb8ef9e0c02b26972da53ad6 (patch) | |
tree | f824aea2789c26da0b4c096b62df812556d3d478 /rules/pre | |
parent | 66b3d8e2d7014a57f47fb7688249d9ac60cd0b39 (diff) | |
download | ptxdist-8f41183e0afe80f9eb8ef9e0c02b26972da53ad6.tar.gz ptxdist-8f41183e0afe80f9eb8ef9e0c02b26972da53ad6.tar.xz |
Add initial code signing support
Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>
Diffstat (limited to 'rules/pre')
-rw-r--r-- | rules/pre/010-code-signing.make | 14 | ||||
-rw-r--r-- | rules/pre/020-code-signing-softhsm.make | 18 |
2 files changed, 32 insertions, 0 deletions
diff --git a/rules/pre/010-code-signing.make b/rules/pre/010-code-signing.make new file mode 100644 index 000000000..ac3bdbc56 --- /dev/null +++ b/rules/pre/010-code-signing.make @@ -0,0 +1,14 @@ +# -*-makefile-*- +# +# Copyright (C) 2019 by Sascha Hauer <s.hauer@pengutronix.de> +# +# For further information about the PTXdist project and license conditions +# see the README file. +# + +CODE_SIGNING_ENV = \ + SO_PATH=$(PTXDIST_SYSROOT_HOST)/lib/engines-1.1/pkcs11.so \ + OPENSSL_CONF="$(PTXDIST_SYSROOT_HOST)/ssl/openssl.cnf" \ + OPENSSL_ENGINES="$(PTXDIST_SYSROOT_HOST)/lib/engines-1.1" + +# vim: syntax=make diff --git a/rules/pre/020-code-signing-softhsm.make b/rules/pre/020-code-signing-softhsm.make new file mode 100644 index 000000000..7d9cae556 --- /dev/null +++ b/rules/pre/020-code-signing-softhsm.make @@ -0,0 +1,18 @@ +# -*-makefile-*- +# +# Copyright (C) 2019 by Sascha Hauer <s.hauer@pengutronix.de> +# +# For further information about the PTXdist project and license conditions +# see the README file. +# + +ifdef PTXCONF_HOST_SOFTHSM +SOFTHSM_CODE_SIGNING_ENV = \ + SOFTHSM2_CONF="$(PTXDIST_SYSROOT_HOST)/etc/softhsm2.conf" \ + PKCS11_MODULE_PATH=$(PTXDIST_SYSROOT_HOST)/lib/softhsm/libsofthsm2.so + +CODE_SIGNING_ENV += \ + $(SOFTHSM_CODE_SIGNING_ENV) +endif + +# vim: syntax=make |