mirror
/
openwrt-packages
mirror of https://git.openwrt.org/feed/packages.git
1
0
Fork 0
Code Releases Activity

attendedsyuspgrade-common: add key and set server 

In collaboration with @dangowrt the server makes use of `ucert`.  Active
workers sign created firmware and clients check if the signature is
valid. Certs of *hacked* or inactive workers can be revoked.  Private CA
key is **not** stored on the upgrade server.

Only for devices already supporting ucert via firmware metadata.

Signed-off-by: Paul Spooren <mail@aparcar.org>
This commit is contained in:
Paul Spooren 2019-03-06 21:43:01 +01:00
parent af68f43147
commit 54a2c8d087
3 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
utils/attendedsysupgrade-common/Makefile
View File

@ -5,8 +5,8 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=attendedsysupgrade-common
PKG_VERSION:=0.1
PKG_RELEASE:=2
PKG_VERSION:=0.2
PKG_RELEASE:=1
PKG_LICENSE:=GPL-2.0
include $(INCLUDE_DIR)/package.mk
@ -51,6 +51,9 @@ endef
define Package/attendedsysupgrade-common/install
$(INSTALL_DIR) $(1)/etc/uci-defaults/
$(INSTALL_BIN) ./files/attendedsysupgrade.defaults $(1)/etc/uci-defaults/attendedsysupgrade
$(INSTALL_DIR) $(1)/etc/opkg/keys/
$(INSTALL_BIN) ./files/c06d891233ba699 $(1)/etc/opkg/keys/c06d891233ba699
endef
$(eval $(call BuildPackage,attendedsysupgrade-common))

2
utils/attendedsysupgrade-common/files/attendedsysupgrade.defaults
View File

@ -6,7 +6,7 @@ touch /etc/config/attendedsysupgrade
uci -q batch <<EOF
set attendedsysupgrade.server=server
set attendedsysupgrade.server.url='https://example.org'
set attendedsysupgrade.server.url='https://chef.libremesh.org'
set attendedsysupgrade.client=client
set attendedsysupgrade.client.upgrade_packages='1'

2
utils/attendedsysupgrade-common/files/c06d891233ba699 Normal file
View File

@ -0,0 +1,2 @@
untrusted comment: public key c06d891233ba699
RWQMBtiRIzummeTc81jtKdJ3XwnaZGtHLRwjls0ovGsKoTnTmS7fj4Na