[openwrt/openwrt] openwrt-keyring: Only copy sign key for 21.02

LEDE Commits lede-commits at lists.infradead.org
Mon May 17 10:18:51 PDT 2021


hauke pushed a commit to openwrt/openwrt.git, branch openwrt-21.02:
https://git.openwrt.org/003fbfbf94083da5b9419a3d784223e322a82e86

commit 003fbfbf94083da5b9419a3d784223e322a82e86
Author: Hauke Mehrtens <hauke at hauke-m.de>
AuthorDate: Sat May 15 00:00:39 2021 +0200

    openwrt-keyring: Only copy sign key for 21.02
    
    Instead of adding all public signature keys from the openwrt-keyring
    repository only add the key which is used to sign the OpenWrt 21.02 feeds.
    
    If one of the other keys would be compromised this would not affect
    users of 21.02 release builds.
    
    Signed-off-by: Hauke Mehrtens <hauke at hauke-m.de>
---
 package/system/openwrt-keyring/Makefile | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/package/system/openwrt-keyring/Makefile b/package/system/openwrt-keyring/Makefile
index 6f3aa65622..390144e4be 100644
--- a/package/system/openwrt-keyring/Makefile
+++ b/package/system/openwrt-keyring/Makefile
@@ -3,7 +3,7 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=openwrt-keyring
-PKG_RELEASE:=1
+PKG_RELEASE:=2
 
 PKG_SOURCE_PROTO:=git
 PKG_SOURCE_URL=$(PROJECT_GIT)/keyring.git
@@ -32,7 +32,8 @@ Build/Compile=
 
 define Package/openwrt-keyring/install
 	$(INSTALL_DIR) $(1)/etc/opkg/keys/
-	$(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/* $(1)/etc/opkg/keys/
+	# Public usign key for 21.02 release builds
+	$(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/2f8b0b98e08306bf $(1)/etc/opkg/keys/
 endef
 
 $(eval $(call BuildPackage,openwrt-keyring))



More information about the lede-commits mailing list