[LEDE-DEV] FCC killing open platforms and inovations [Was: Re: [PATCH] ar71xx: Add usable, inactive LEDs on OpenMesh devices]

[Sven Eckelmann]

[....this is a rather odd change of topic]

On Montag, 14. November 2016 14:24:48 CET Petr Štetiar wrote:
[...]
> But on the other hand I'm wondering how should I upload my custom LEDE image
> to my recently purchased OM5P-AC device as the U-Boot there is locked down and
> accepts only signed OS images. I understand, that this is due to the recent
> wonderful FCC project called "killing inovations in the wireless space".

I was told that OpenMesh is also shipping an already unlocked version of it in
regions which don't requires closed down versions. They called it
"(International Version)". But I am not an OpenMesh employee and don't have
access to all details of their current shipping policy.

But you can also try to get in contact with the customer support to get this
resolved. They should be able to find a solution for your problem when you
are in a region which doesn't require the FCC lockdown (but you still got
devices which were locked down).

> Puting aside the GPL license violation of U-boot and kernel code which
> OpenMesh ships in the devices, we don't have much options left.

If you found a GPL violation then please get in contact with OpenMesh support
to get it resolved. They were quite willingly in the past to provide the source
code of the GPL portions of the firmware . Maybe your are just talking
about some formal problem - at least I cannot know about them because I never
received a retail/boxed version of their products.

> The only sane
> way of fixing this is to dump the private keys out of the U-Boot and patch the
> ap51-flash so the LEDE users are able to sign their own LEDE or any other
> custom OS images and use the HW as they wish.

No private keys are shipped with the product or the firmware flash tools. The
image itself only has signatures (cryptographically signed hashes). But this
is what you most likely already knew when you saw "fwupgrade.cfg.sig"
during the flash process.

Kind regards,
	Sven
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.infradead.org/pipermail/lede-dev/attachments/20161115/27f175ac/attachment.sig>