[ptxdist] [PATCHv3 2/3] easy-rsa: initial commit

[Alexander Aring <alex.aring@gmail.com>]

This patch adds easy-rsa. Some scripting framework to generate a PKI
CA "correctly".

Signed-off-by: Alexander Aring <alex.aring@gmail.com>
---
 patches/easy-rsa-2.2.2/autogen.sh |  1 +
 rules/easy-rsa.in                 | 17 +++++++++++
 rules/easy-rsa.make               | 62 +++++++++++++++++++++++++++++++++++++++
 3 files changed, 80 insertions(+)
 create mode 120000 patches/easy-rsa-2.2.2/autogen.sh
 create mode 100644 rules/easy-rsa.in
 create mode 100644 rules/easy-rsa.make

diff --git a/patches/easy-rsa-2.2.2/autogen.sh b/patches/easy-rsa-2.2.2/autogen.sh
new file mode 120000
index 0000000..9f8a4cb
--- /dev/null
+++ b/patches/easy-rsa-2.2.2/autogen.sh
@@ -0,0 +1 @@
+../autogen.sh
\ No newline at end of file
diff --git a/rules/easy-rsa.in b/rules/easy-rsa.in
new file mode 100644
index 0000000..282fb9a
--- /dev/null
+++ b/rules/easy-rsa.in
@@ -0,0 +1,17 @@
+## SECTION=security
+
+config EASY_RSA
+	tristate
+	prompt "easy-rsa"
+	select GREP		if !BUSYBOX_GREP && RUNTIME
+	select GCCLIBS_GCC_S	if !BUSYBOX_GREP && RUNTIME
+	select OPENSSL		if RUNTIME
+	select OPENSSL_BIN	if RUNTIME
+	help
+	  easy-rsa is a CLI utility to build and manage a PKI CA. In laymen's
+	  terms, this means to create a root certificate authority, and request
+	  and sign certificates, including sub-CAs and certificate revokation
+	  lists (CRL). This is for people which don't know how to generate
+	  all PKI files with openssl tool. Additional this is for people which
+	  have a enough less paranoia to generate keys on an embedded device.
+	  The easy-rsa scripts will be placed at /usr/share/easy-rsa aferwards.
diff --git a/rules/easy-rsa.make b/rules/easy-rsa.make
new file mode 100644
index 0000000..05c3f0c
--- /dev/null
+++ b/rules/easy-rsa.make
@@ -0,0 +1,62 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2014 by Alexander Aring <aar@pengutronix.de>
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+
+#
+# We provide this package
+#
+PACKAGES-$(PTXCONF_EASY_RSA) += easy-rsa
+
+#
+# Paths and names
+#
+EASY_RSA_VERSION	:= 2.2.2
+EASY_RSA_MD5		:= 040238338980617bc9c2df4274349593
+EASY_RSA		:= easy-rsa-$(EASY_RSA_VERSION)
+EASY_RSA_SUFFIX		:= tar.gz
+EASY_RSA_TARBALL	:= $(EASY_RSA_VERSION).$(EASY_RSA_SUFFIX)
+EASY_RSA_URL		:= https://github.com/OpenVPN/easy-rsa/archive/$(EASY_RSA_TARBALL)
+EASY_RSA_SOURCE		:= $(SRCDIR)/$(EASY_RSA).$(EASY_RSA_SUFFIX)
+EASY_RSA_DIR		:= $(BUILDDIR)/$(EASY_RSA)
+EASY_RSA_LICENSE	:= GPLv2
+
+EASY_RSA_INSTALL_SCRIPTS := \
+	build-ca build-dh build-inter build-key build-key-pass build-key-pkcs12 \
+	build-key-server build-req build-req-pass clean-all inherit-inter \
+	list-crl pkitool revoke-full sign-req whichopensslcnf
+
+EASY_RSA_INSTALL_FILES := \
+	openssl-1.0.0.cnf vars
+
+# ----------------------------------------------------------------------------
+# Target-Install
+# ----------------------------------------------------------------------------
+
+$(STATEDIR)/easy-rsa.targetinstall:
+	@$(call targetinfo)
+
+	@$(call install_init, easy-rsa)
+	@$(call install_fixup, easy-rsa,PRIORITY,optional)
+	@$(call install_fixup, easy-rsa,SECTION,base)
+	@$(call install_fixup, easy-rsa,AUTHOR,"Alexander Aring <aar@pengutronix.de>")
+	@$(call install_fixup, easy-rsa,DESCRIPTION,missing)
+
+	@$(foreach script,$(EASY_RSA_INSTALL_SCRIPTS), \
+		$(call install_copy, easy-rsa, 0, 0, 0755, -, \
+		/usr/share/easy-rsa/$(script));)
+
+	@$(foreach file,$(EASY_RSA_INSTALL_FILES), \
+		$(call install_copy, easy-rsa, 0, 0, 0644, -, \
+		/usr/share/easy-rsa/$(file));)
+
+	@$(call install_finish, easy-rsa)
+
+	@$(call touch)
+
+# vim: syntax=make
-- 
2.2.2


-- 
ptxdist mailing list
ptxdist@pengutronix.de