mbox series

[isar-cip-core,0/4] Make swupdate signing more

Message ID 20240304101054.864948-1-Quirin.Gylstorff@siemens.com (mailing list archive)
Headers show
Series Make swupdate signing more | expand

Message

Gylstorff Quirin March 4, 2024, 10:08 a.m. UTC
From: Quirin Gylstorff <quirin.gylstorff@siemens.com>

This patchset adds checks to validate the certificate and key before
used in the signing process.

Add also adds the missing Documentation about swu signing in cip-core
and fixes two issues:
 - an error in the build logs of do_image_swu
 - Creating all existing image recipes by touching SRC_URI in a anonym
   python function.

Quirin Gylstorff (4):
  swupdate: check output of sign-swu
  sign-swu-cms: check if key and cert are valid
  doc: Add section about SWUpdate signing to README.swupdate.md
  fix do not add files to each image recipe

 classes/efibootguard.bbclass                  |  1 -
 classes/swupdate.bbclass                      | 83 +++++++++++++------
 doc/README.swupdate.md                        | 21 +++++
 .../swupdate-certificates/files/sign-swu-cms  | 29 ++++++-
 4 files changed, 105 insertions(+), 29 deletions(-)

Comments

Felix Moessbauer March 4, 2024, 1:36 p.m. UTC | #1
On Mon, 2024-03-04 at 11:08 +0100, Quirin Gylstorff wrote:
> From: Quirin Gylstorff <quirin.gylstorff@siemens.com>
> 
> This patchset adds checks to validate the certificate and key before
> used in the signing process.
> 
> Add also adds the missing Documentation about swu signing in cip-core
> and fixes two issues:
>  - an error in the build logs of do_image_swu
>  - Creating all existing image recipes by touching SRC_URI in a
> anonym
>    python function.
> 
> Quirin Gylstorff (4):
>   swupdate: check output of sign-swu
>   sign-swu-cms: check if key and cert are valid
>   doc: Add section about SWUpdate signing to README.swupdate.md
>   fix do not add files to each image recipe

Where is this patch? Looks like it did not make it onto the list.

Felix

> 
>  classes/efibootguard.bbclass                  |  1 -
>  classes/swupdate.bbclass                      | 83 +++++++++++++----
> --
>  doc/README.swupdate.md                        | 21 +++++
>  .../swupdate-certificates/files/sign-swu-cms  | 29 ++++++-
>  4 files changed, 105 insertions(+), 29 deletions(-)
>
Gylstorff Quirin March 4, 2024, 4:26 p.m. UTC | #2
On 3/4/24 2:36 PM, Moessbauer, Felix (T CED OES-DE) wrote:
> On Mon, 2024-03-04 at 11:08 +0100, Quirin Gylstorff wrote:
>> From: Quirin Gylstorff <quirin.gylstorff@siemens.com>
>>
>> This patchset adds checks to validate the certificate and key before
>> used in the signing process.
>>
>> Add also adds the missing Documentation about swu signing in cip-core
>> and fixes two issues:
>>   - an error in the build logs of do_image_swu
>>   - Creating all existing image recipes by touching SRC_URI in a
>> anonym
>>     python function.
>>
>> Quirin Gylstorff (4):
>>    swupdate: check output of sign-swu
>>    sign-swu-cms: check if key and cert are valid
>>    doc: Add section about SWUpdate signing to README.swupdate.md
>>    fix do not add files to each image recipe
> 
> Where is this patch? Looks like it did not make it onto the list.

Should have I will resend it.
Quirin
> 
> Felix
> 
>>
>>   classes/efibootguard.bbclass                  |  1 -
>>   classes/swupdate.bbclass                      | 83 +++++++++++++----
>> --
>>   doc/README.swupdate.md                        | 21 +++++
>>   .../swupdate-certificates/files/sign-swu-cms  | 29 ++++++-
>>   4 files changed, 105 insertions(+), 29 deletions(-)
>>
>
Jan Kiszka March 5, 2024, 6:23 a.m. UTC | #3
On 04.03.24 11:08, Quirin Gylstorff wrote:
> From: Quirin Gylstorff <quirin.gylstorff@siemens.com>
> 
> This patchset adds checks to validate the certificate and key before
> used in the signing process.
> 
> Add also adds the missing Documentation about swu signing in cip-core
> and fixes two issues:
>  - an error in the build logs of do_image_swu
>  - Creating all existing image recipes by touching SRC_URI in a anonym
>    python function.
> 
> Quirin Gylstorff (4):
>   swupdate: check output of sign-swu
>   sign-swu-cms: check if key and cert are valid
>   doc: Add section about SWUpdate signing to README.swupdate.md
>   fix do not add files to each image recipe
> 
>  classes/efibootguard.bbclass                  |  1 -
>  classes/swupdate.bbclass                      | 83 +++++++++++++------
>  doc/README.swupdate.md                        | 21 +++++
>  .../swupdate-certificates/files/sign-swu-cms  | 29 ++++++-
>  4 files changed, 105 insertions(+), 29 deletions(-)
> 

"Make swupdate signing more"... more what? :)

Jan