diff options
| author | Hauke Mehrtens <hauke@hauke-m.de> | 2021-05-13 01:25:55 +0200 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2021-05-17 19:02:02 +0200 |
| commit | 097dc943f1f9b02835c6b249b2a035679da5619f (patch) | |
| tree | 6e1565485b817ed7bb7ba30488f3a74cd145c298 | |
| parent | f2844a63387db342c9173423c58b6e34e0e027b1 (diff) | |
| download | upstream-097dc943f1f9b02835c6b249b2a035679da5619f.tar.gz upstream-097dc943f1f9b02835c6b249b2a035679da5619f.tar.bz2 upstream-097dc943f1f9b02835c6b249b2a035679da5619f.zip | |
openwrt-keyring: Only copy sign key for snapshots
Instead of adding all public signature keys from the openwrt-keyring
repository only add the key which is used to sign the master feeds.
If one of the other keys would be compromised this would not affect
users of master snapshot builds.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
| -rw-r--r-- | package/system/openwrt-keyring/Makefile | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/package/system/openwrt-keyring/Makefile b/package/system/openwrt-keyring/Makefile index 6f3aa65622..318d42cf92 100644 --- a/package/system/openwrt-keyring/Makefile +++ b/package/system/openwrt-keyring/Makefile @@ -3,7 +3,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=openwrt-keyring -PKG_RELEASE:=1 +PKG_RELEASE:=2 PKG_SOURCE_PROTO:=git PKG_SOURCE_URL=$(PROJECT_GIT)/keyring.git @@ -32,7 +32,8 @@ Build/Compile= define Package/openwrt-keyring/install $(INSTALL_DIR) $(1)/etc/opkg/keys/ - $(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/* $(1)/etc/opkg/keys/ + # Public usign key for unattended snapshot builds + $(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/b5043e70f9a75cde $(1)/etc/opkg/keys/ endef $(eval $(call BuildPackage,openwrt-keyring)) |