From 646fbeafdc6ad4b39217f767216c8fac27776151 Mon Sep 17 00:00:00 2001 From: Paul Spooren Date: Fri, 28 Oct 2022 13:17:13 +0200 Subject: [PATCH] attendedsysupgrade-common: update ASU CA pubkey The old key was overwritten during a machine migration and the current worker key is no longer valid. To create new valid worker certificates this commit adds a new CA pubkey. To update running OpenWrt devices via a client one needs to force install it or upgrade to the latest version of `attendedsysupgrade-common` - I'm sorry for the inconvenience. This change is only related to the `usign` pubkey and `ucert` certificate which is used to sign all created images on the server. While at it, use INSTALL_DATA instead of INSTALL_BIN. Signed-off-by: Paul Spooren --- utils/attendedsysupgrade-common/Makefile | 4 ++-- utils/attendedsysupgrade-common/files/86241a707a30cb7f | 2 -- utils/attendedsysupgrade-common/files/8a11255d14aef6c8 | 2 ++ 3 files changed, 4 insertions(+), 4 deletions(-) delete mode 100644 utils/attendedsysupgrade-common/files/86241a707a30cb7f create mode 100644 utils/attendedsysupgrade-common/files/8a11255d14aef6c8 diff --git a/utils/attendedsysupgrade-common/Makefile b/utils/attendedsysupgrade-common/Makefile index 4408b81d4c..766e8b0b9d 100644 --- a/utils/attendedsysupgrade-common/Makefile +++ b/utils/attendedsysupgrade-common/Makefile @@ -49,10 +49,10 @@ endef define Package/attendedsysupgrade-common/install $(INSTALL_DIR) $(1)/etc/uci-defaults/ - $(INSTALL_BIN) ./files/attendedsysupgrade.defaults $(1)/etc/uci-defaults/attendedsysupgrade + $(INSTALL_DATA) ./files/attendedsysupgrade.defaults $(1)/etc/uci-defaults/attendedsysupgrade $(INSTALL_DIR) $(1)/etc/opkg/keys/ - $(INSTALL_BIN) ./files/86241a707a30cb7f $(1)/etc/opkg/keys/86241a707a30cb7f + $(INSTALL_DATA) ./files/8a11255d14aef6c8 $(1)/etc/opkg/keys/8a11255d14aef6c8 endef $(eval $(call BuildPackage,attendedsysupgrade-common)) diff --git a/utils/attendedsysupgrade-common/files/86241a707a30cb7f b/utils/attendedsysupgrade-common/files/86241a707a30cb7f deleted file mode 100644 index 8007327141..0000000000 --- a/utils/attendedsysupgrade-common/files/86241a707a30cb7f +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: ASU CA pubkey -RWSGJBpwejDLf4OApA5SOavh0GBlBFY9FhqxnivUQHpi0/t0QRI98LPW diff --git a/utils/attendedsysupgrade-common/files/8a11255d14aef6c8 b/utils/attendedsysupgrade-common/files/8a11255d14aef6c8 new file mode 100644 index 0000000000..ef206003b2 --- /dev/null +++ b/utils/attendedsysupgrade-common/files/8a11255d14aef6c8 @@ -0,0 +1,2 @@ +untrusted comment: ASU CA pubkey 2022 +RWSKESVdFK72yB0Y5q0ckpqqXU+51UbFYYMPRrOTMdNjvLkU1tjJTSiU