SW/openwrt
2
0
Fork 0
forked from Ivasoft/openwrt
Code Pull Requests Activity

base-files: introduce sysupgrade signature chain verification

Browse Source 
Verify ucert signature chains in sysupgrade images in case ucert is
installed and $CHECK_IMAGE_SIGNARURE = 1.
Also make sure ucert host binary is present and generate a self-signed
ucert in case $TOPDIR/key-build.ucert is missing.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This commit is contained in:
Daniel Golle
2018-01-15 03:37:17 +01:00
parent ec78f03de5
commit 8174853c78
3 changed files with 31 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/base-files/files/sbin/sysupgrade
View File

@@ -136,7 +136,7 @@ add_overlayfiles() {
}
# hooks
sysupgrade_image_check="fwtool_check_image platform_check_image"
sysupgrade_image_check="fwtool_check_signature fwtool_check_image platform_check_image"
if [ $SAVE_OVERLAY = 1 ]; then
[ ! -d /overlay/upper/etc ] && {