From: Alexander Aring <alex.aring@gmail.com>
To: ptxdist@pengutronix.de
Cc: Alexander Aring <alex.aring@gmail.com>
Subject: [ptxdist] [PATCH bluetooth-next 3/4] easy-rsa: initial commit
Date: Sat, 27 Dec 2014 18:38:54 +0100 [thread overview]
Message-ID: <1419701935-28132-4-git-send-email-alex.aring@gmail.com> (raw)
In-Reply-To: <1419701935-28132-1-git-send-email-alex.aring@gmail.com>
This patch adds easy-rsa. Some scripting framework to generate a PKI
CA "correctly".
Signed-off-by: Alexander Aring <alex.aring@gmail.com>
---
patches/easy-rsa-2.2.2/autogen.sh | 1 +
rules/easy-rsa.in | 17 +++++++++++
rules/easy-rsa.make | 62 +++++++++++++++++++++++++++++++++++++++
3 files changed, 80 insertions(+)
create mode 120000 patches/easy-rsa-2.2.2/autogen.sh
create mode 100644 rules/easy-rsa.in
create mode 100644 rules/easy-rsa.make
diff --git a/patches/easy-rsa-2.2.2/autogen.sh b/patches/easy-rsa-2.2.2/autogen.sh
new file mode 120000
index 0000000..9f8a4cb
--- /dev/null
+++ b/patches/easy-rsa-2.2.2/autogen.sh
@@ -0,0 +1 @@
+../autogen.sh
\ No newline at end of file
diff --git a/rules/easy-rsa.in b/rules/easy-rsa.in
new file mode 100644
index 0000000..1ba7cfd
--- /dev/null
+++ b/rules/easy-rsa.in
@@ -0,0 +1,17 @@
+## SECTION=security
+
+config EASY_RSA
+ tristate
+ prompt "easy-rsa"
+ depends on GREP || BUSYBOX_GREP
+ select OPENSSL
+ select OPENSSL_BIN
+ select OPENSSL_CNF
+ help
+ easy-rsa is a CLI utility to build and manage a PKI CA. In laymen's
+ terms, this means to create a root certificate authority, and request
+ and sign certificates, including sub-CAs and certificate revokation
+ lists (CRL). This is for people which don't know how to generate
+ all PKI files with openssl tool. Additional this is for people which
+ have a enough less paranoia to generate keys on an embedded device.
+ The easy-rsa scripts will be placed at /usr/share/easy-rsa aferwards.
diff --git a/rules/easy-rsa.make b/rules/easy-rsa.make
new file mode 100644
index 0000000..e6b18f8
--- /dev/null
+++ b/rules/easy-rsa.make
@@ -0,0 +1,62 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2014 by Alexander Aring <aar@pengutronix.de>
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+
+#
+# We provide this package
+#
+PACKAGES-$(PTXCONF_EASY_RSA) += easy-rsa
+
+#
+# Paths and names
+#
+EASY_RSA_VERSION := 2.2.2
+EASY_RSA_MD5 := 040238338980617bc9c2df4274349593
+EASY_RSA := easy-rsa-$(EASY_RSA_VERSION)
+EASY_RSA_SUFFIX := tar.gz
+EASY_RSA_TARBALL := $(EASY_RSA_VERSION).$(EASY_RSA_SUFFIX)
+EASY_RSA_URL := https://github.com/OpenVPN/easy-rsa/archive/$(EASY_RSA_TARBALL)
+EASY_RSA_SOURCE := $(SRCDIR)/$(EASY_RSA).$(EASY_RSA_SUFFIX)
+EASY_RSA_DIR := $(BUILDDIR)/$(EASY_RSA)
+EASY_RSA_LICENSE := GPLv2
+
+EASY_RSA_INSTALL_SCRIPTS := \
+ build-ca build-dh build-inter build-key build-key-pass build-key-pkcs12 \
+ build-key-server build-req build-req-pass clean-all inherit-inter \
+ list-crl pkitool revoke-full sign-req whichopensslcnf
+
+EASY_RSA_INSTALL_FILES := \
+ openssl-0.9.6.cnf openssl-0.9.8.cnf openssl-1.0.0.cnf vars
+
+# ----------------------------------------------------------------------------
+# Target-Install
+# ----------------------------------------------------------------------------
+
+$(STATEDIR)/easy-rsa.targetinstall:
+ @$(call targetinfo)
+
+ @$(call install_init, easy-rsa)
+ @$(call install_fixup, easy-rsa,PRIORITY,optional)
+ @$(call install_fixup, easy-rsa,SECTION,base)
+ @$(call install_fixup, easy-rsa,AUTHOR,"Alexander Aring <aar@pengutronix.de>")
+ @$(call install_fixup, easy-rsa,DESCRIPTION,missing)
+
+ @$(foreach script,$(EASY_RSA_INSTALL_SCRIPTS), \
+ $(call install_copy, easy-rsa, 0, 0, 0755, -, \
+ /usr/share/easy-rsa/$(script));)
+
+ @$(foreach file,$(EASY_RSA_INSTALL_FILES), \
+ $(call install_copy, easy-rsa, 0, 0, 0644, -, \
+ /usr/share/easy-rsa/$(file));)
+
+ @$(call install_finish, easy-rsa)
+
+ @$(call touch)
+
+# vim: syntax=make
--
2.2.0
--
ptxdist mailing list
ptxdist@pengutronix.de
next prev parent reply other threads:[~2014-12-27 17:39 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-12-27 17:38 [ptxdist] [PATCH bluetooth-next 0/4] openvpn: cleanups, extras and version bumps Alexander Aring
2014-12-27 17:38 ` [ptxdist] [PATCH bluetooth-next 1/4] liblzo: rework and version bump Alexander Aring
2014-12-27 17:38 ` [ptxdist] [PATCH bluetooth-next 2/4] openssl: allow to install openssl.cnf Alexander Aring
2015-01-12 14:36 ` Michael Olbrich
2015-01-18 18:43 ` Alexander Aring
2014-12-27 17:38 ` Alexander Aring [this message]
2014-12-27 17:38 ` [ptxdist] [PATCH bluetooth-next 4/4] openvpn: rework and version bump Alexander Aring
2015-01-12 14:38 ` Michael Olbrich
2015-01-18 19:12 ` Alexander Aring
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1419701935-28132-4-git-send-email-alex.aring@gmail.com \
--to=alex.aring@gmail.com \
--cc=ptxdist@pengutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox