mbox series

[isar-cip-core,v2,0/4] Make swupdate signing more robust

Message ID 20240305110311.2073425-1-Quirin.Gylstorff@siemens.com (mailing list archive)
Headers show
Series Make swupdate signing more robust | expand

Message

Gylstorff Quirin March 5, 2024, 11:02 a.m. UTC 
From: Quirin Gylstorff <quirin.gylstorff@siemens.com>

This patchset adds checks to validate the certificate and key before
used in the signing process.

Add also adds the missing Documentation about swu signing in cip-core
and fixes two issues:
 - an error in the build logs of do_image_swu
 - Creating all existing image recipes by touching SRC_URI in a anonym
   python function.

Changes v2:
  - Add information about cpio option in long form
  - replace cpio option `-H` with long form '--format='

Quirin Gylstorff (4):
  swupdate: check output of sign-swu
  sign-swu-cms: check if key and cert are valid
  doc: Add section about SWUpdate signing to README.swupdate.md
  fix do not add files to each image recipe

 classes/efibootguard.bbclass                  |  1 -
 classes/swupdate.bbclass                      | 83 +++++++++++++------
 doc/README.swupdate.md                        | 21 +++++
 .../swupdate-certificates/files/sign-swu-cms  | 29 ++++++-
 4 files changed, 105 insertions(+), 29 deletions(-)