Commit Graph

9 Commits

Author SHA1 Message Date
Javier Viguera 116d532813 trustfence-cst-native: add premirror for CST package
This will allow to get the package from a premirror in case it is not
already downloaded in the DL_DIR.

https://jira.digi.com/browse/DEL-3051

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2017-03-23 12:36:57 +01:00
Javier Viguera 165f58e9df trustfence-cst-native: coding style, no functional change
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2017-03-23 12:36:57 +01:00
Javier Viguera bbc03c5935 trustfence-cst: refresh patches with git
Refresh the patches with GIT so they apply cleanly using "git am".
Otherwise they fail with:

Applying: openssl_helper: use /dev/urandom as seed source
error: corrupt patch at line 16
Patch failed at 0003 openssl_helper: use /dev/urandom as seed source

Applying: hab4_pki_tree.sh: usa a random password for the default PKI generation
warning: keys/hab4_pki_tree.sh has type 100755, expected 100644

Notice that they were not failing in Yocto, as it does not use "git am"
to apply patches, but it's better to have the patches correctly done.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2017-02-10 19:37:55 +01:00
Javier Viguera ab5f50e16a meta-digi: trailing whitespace cleanup
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-08-31 13:52:15 +02:00
Diaz de Grenu, Jose 5a8e57da72 meta-digi-arm: trustfence-cst: use random password for generated PKI trees
Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-08-01 20:00:09 +02:00
Diaz de Grenu, Jose 36d7311459 meta-digi-arm: trustfence-cst: fix native recipe and Makefile
This package is native only, this patch ensures it can only be built
natively and fix the following problems:
* Add openssl-native rather than openssl to the dependencies.
* Use the $(CC) $(LDFLAGS) and $(CFLAGS) that Yocto provides to avoid a
  compilation error.

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-07-29 17:08:25 +02:00
Diaz de Grenu, Jose 37eb7db2dc meta-digi-arm: trustfence-cst: use /dev/urandom
This is needed in order to avoid indefinitely blocking.

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-07-19 15:48:12 +02:00
Diaz de Grenu, Jose ceb9ca1537 trustfence-cst: hab4_pki_tree-sh: automate script
This allows to automatically create a secure PKI tree without user
interaction.

https://jira.digi.com/browse/DUB-618

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-07-19 15:48:12 +02:00
Diaz de Grenu, Jose 8ac7da51ef meta-digi-arm: add recipe for the Code Signing Tools
NXP Code signing Tool for the High Assurance Boot library is needed for
signing and encrypting different artifacts (U-Boot image, uImage, ...).

As the CST cannot be included in DEY, the user needs to download the
tarball and add it to the recipe folder.

https://jira.digi.com/browse/DUB-618

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-07-19 15:48:12 +02:00