aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorHauke Mehrtens <hauke@hauke-m.de>2021-05-16 15:31:49 +0200
committerHauke Mehrtens <hauke@hauke-m.de>2021-05-16 15:34:49 +0200
commit84c5dbcf2a922f5713b6a24241cc09604dd9bc88 (patch)
treeb1ddbadfda11da1626fbfb99259fe2d41ce4e09a
parentc07c98d28e07e836e4c588ba776224f47fe99394 (diff)
downloadupstream-84c5dbcf2a922f5713b6a24241cc09604dd9bc88.tar.gz
upstream-84c5dbcf2a922f5713b6a24241cc09604dd9bc88.tar.bz2
upstream-84c5dbcf2a922f5713b6a24241cc09604dd9bc88.zip
openwrt-keyring: Only copy sign key for 19.07 and 21.02
Instead of adding all public signature keys from the openwrt-keyring repository only add the key which is used to sign the OpenWrt 19.07 feeds and the 21.02 feeds to allow checking the next release. If one of the other keys would be compromised this would not affect users of 19.07 release builds. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
-rw-r--r--package/system/openwrt-keyring/Makefile7
1 files changed, 5 insertions, 2 deletions
diff --git a/package/system/openwrt-keyring/Makefile b/package/system/openwrt-keyring/Makefile
index 6f3aa65622..037809a667 100644
--- a/package/system/openwrt-keyring/Makefile
+++ b/package/system/openwrt-keyring/Makefile
@@ -3,7 +3,7 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=openwrt-keyring
-PKG_RELEASE:=1
+PKG_RELEASE:=2
PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL=$(PROJECT_GIT)/keyring.git
@@ -32,7 +32,10 @@ Build/Compile=
define Package/openwrt-keyring/install
$(INSTALL_DIR) $(1)/etc/opkg/keys/
- $(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/* $(1)/etc/opkg/keys/
+ # Public usign key for 19.07 release builds
+ $(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/f94b9dd6febac963 $(1)/etc/opkg/keys/
+ # Public usign key for 21.02 release builds
+ $(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/2f8b0b98e08306bf $(1)/etc/opkg/keys/
endef
$(eval $(call BuildPackage,openwrt-keyring))