[ptxdist] [PATCH 1/2] doc: dev_code_signing: mention where to select the signing provider

[ptxdist] [PATCH 1/2] doc: dev_code_signing: mention where to select the signing provider

[Roland Hieber]

Signed-off-by: Roland Hieber <rhi@pengutronix.de>
---
 doc/dev_code_signing.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/doc/dev_code_signing.rst b/doc/dev_code_signing.rst
index d47002e8c380..56ac0e3b3217 100644
--- a/doc/dev_code_signing.rst
+++ b/doc/dev_code_signing.rst
@@ -49,6 +49,7 @@ material in case SoftHSM is used.
 
 When ``PTXCONF_CODE_SIGNING`` is enabled exactly one code signing provider is
 active during each invocation of PTXdist.
+The active provider can be selected in the ``platformconfig`` menu.
 
 PTXdist comes equipped with a development code signing provider "devel"
 implemented via the package ``host-ptx-code-signing-dev``.
-- 
2.29.2


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

[ptxdist] [PATCH 2/2] rauc: be more verbose why the check for legacy keyring fails

[Roland Hieber]

Instead of relying on users to grep in the PTXdist source code for this
line, tell them directly what is checked here.

Also fix a typo in the previous-to-last line.

Signed-off-by: Roland Hieber <rhi@pengutronix.de>
---
 rules/rauc.make | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/rules/rauc.make b/rules/rauc.make
index 66c967d44b83..08df6336a7cd 100644
--- a/rules/rauc.make
+++ b/rules/rauc.make
@@ -50,8 +50,10 @@ RAUC_CONF_OPT	:= \
 
 $(STATEDIR)/rauc.prepare:
 	@$(call targetinfo)
-	@test ! -e "$(call ptx/in-platformconfigdir, config/rauc/rauc.key.pem)" || \
-		ptxd_bailout "Please use the signing provider infrastructure desribed in:" \
+	@keyfile="$(call ptx/in-platformconfigdir, config/rauc/rauc.key.pem)"; \
+		test ! -e "$${keyfile}" || \
+		ptxd_bailout "Legacy RAUC keyring exists at $${keyfile}!" \
+			"Please use the signing provider infrastructure instead, as described in:" \
 			"https://www.ptxdist.org/doc/dev_code_signing.html"
 	@$(call world/prepare, RAUC)
 	@$(call touch)
-- 
2.29.2


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

Re: [ptxdist] [APPLIED] rauc: be more verbose why the check for legacy keyring fails

[Michael Olbrich]

Thanks, applied as 73c6cbfbac24ddcbe013b4647314a47d81adecec.

Michael

[sent from post-receive hook]

On Fri, 05 Mar 2021 08:26:14 +0100, Roland Hieber <rhi@pengutronix.de> wrote:
> Instead of relying on users to grep in the PTXdist source code for this
> line, tell them directly what is checked here.
> 
> Also fix a typo in the previous-to-last line.
> 
> Signed-off-by: Roland Hieber <rhi@pengutronix.de>
> Message-Id: <20210228234809.5294-2-rhi@pengutronix.de>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/rauc.make b/rules/rauc.make
> index 66c967d44b83..08df6336a7cd 100644
> --- a/rules/rauc.make
> +++ b/rules/rauc.make
> @@ -50,8 +50,10 @@ RAUC_CONF_OPT	:= \
>  
>  $(STATEDIR)/rauc.prepare:
>  	@$(call targetinfo)
> -	@test ! -e "$(call ptx/in-platformconfigdir, config/rauc/rauc.key.pem)" || \
> -		ptxd_bailout "Please use the signing provider infrastructure desribed in:" \
> +	@keyfile="$(call ptx/in-platformconfigdir, config/rauc/rauc.key.pem)"; \
> +		test ! -e "$${keyfile}" || \
> +		ptxd_bailout "Legacy RAUC keyring exists at $${keyfile}!" \
> +			"Please use the signing provider infrastructure instead, as described in:" \
>  			"https://www.ptxdist.org/doc/dev_code_signing.html"
>  	@$(call world/prepare, RAUC)
>  	@$(call touch)

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

Re: [ptxdist] [APPLIED] doc: dev_code_signing: mention where to select the signing provider

[Michael Olbrich]

Thanks, applied as dd524817b207b8de40fede2ac183e336030d995b.

Michael

[sent from post-receive hook]

On Fri, 05 Mar 2021 08:26:13 +0100, Roland Hieber <rhi@pengutronix.de> wrote:
> Signed-off-by: Roland Hieber <rhi@pengutronix.de>
> Message-Id: <20210228234809.5294-1-rhi@pengutronix.de>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/doc/dev_code_signing.rst b/doc/dev_code_signing.rst
> index d47002e8c380..56ac0e3b3217 100644
> --- a/doc/dev_code_signing.rst
> +++ b/doc/dev_code_signing.rst
> @@ -49,6 +49,7 @@ material in case SoftHSM is used.
>  
>  When ``PTXCONF_CODE_SIGNING`` is enabled exactly one code signing provider is
>  active during each invocation of PTXdist.
> +The active provider can be selected in the ``platformconfig`` menu.
>  
>  PTXdist comes equipped with a development code signing provider "devel"
>  implemented via the package ``host-ptx-code-signing-dev``.

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de