998598415a
When TrustFence is enabled, a PKI tree is generated. In the case of NXP platforms, the PKI contains public certificates from which the public key needs to be extracted using an openssl command. In the case of STM platforms, the PKI contains directly the public key. In all cases, we need the public key to be installed in the rootfs /etc/ssl/certs/ folder, so that it can be used by swupdate to authenticate signed SWU packages. Up to now, this was being done on the dualboot recipe, but the installation of the public key should really be only dependant on the fact of TF being enabled. This commit: - Removes the generation of the public key from dualboot.bb. - Generates a patch to extract the public key from the certificate as part of the PKI tree generation (on NXP platforms). - Installs the public key during a post install function after the final rootfs has been created. - For NXP platforms, extracts the public key using openssl if it does not exist (for backwards compatibility). Signed-off-by: Hector Palacios <hector.palacios@digi.com> |
||
|---|---|---|
| .. | ||
| classes | ||
| conf | ||
| dynamic-layers | ||
| recipes-aws | ||
| recipes-connectivity | ||
| recipes-core | ||
| recipes-crank | ||
| recipes-devtools | ||
| recipes-digi | ||
| recipes-extended | ||
| recipes-gnome | ||
| recipes-graphics | ||
| recipes-multimedia | ||
| recipes-sato | ||
| recipes-support | ||
| DIGI_EULA | ||
| DIGI_OPEN_EULA | ||
| README | ||
README
OpenEmbedded/Yocto Digi Embedded Linux layer ============================================ This layer provides the Digi Embedded Linux distribution images. This layer depends on: git://git.yoctoproject.org/poky.git git://git.openembedded.org/meta-openembedded.git git://git.yoctoproject.org/meta-freescale.git git://github.com/Freescale/meta-fsl-demos.git Digi's license agreements ------------------------- All software is covered by Digi's general EULA and Digi's Open Source EULA. To have the right to use the software in your images you need to read and accept both EULAs at the DIGI_EULA and DIGI_OPEN_EULA files. NXP Semiconductors' software license agreement ---------------------------------------------- Some platforms depends on libraries and packages that are covered by NXP Semiconductors' EULA. To have the right to use those binaries in your images you need to read and accept the EULA file in meta-freescale Yocto layer. Support ------- This layer is provided 'as is' with no guarantee. However, some support may be available from tech.support@digi.com