From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from vps-1010511-3500.united-hoster.de ([81.20.132.56] helo=rohieb.name) by metis.ext.pengutronix.de with esmtp (Exim 4.80) (envelope-from ) id 1be4x3-00052t-NU for ptxdist@pengutronix.de; Sun, 28 Aug 2016 20:37:01 +0200 Received: from [192.168.148.20] (sk134.sielkamp.etc.tu-bs.de [134.169.170.134]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: rohieb@rohieb.name) by rohieb.name (Postfix) with ESMTPSA id 2B3A52595821 for ; Sun, 28 Aug 2016 20:36:31 +0200 (CEST) References: <1471445616-7728-1-git-send-email-rohieb@rohieb.name> <20160818065342.463fc7qfeixtb4vt@pengutronix.de> <20160828073629.qogtrcb4wc72xdvb@pengutronix.de> From: Roland Hieber Message-ID: <6b808b5c-e3f6-6d63-9378-6495a15f3c1b@rohieb.name> Date: Sun, 28 Aug 2016 20:36:19 +0200 MIME-Version: 1.0 In-Reply-To: <20160828073629.qogtrcb4wc72xdvb@pengutronix.de> Subject: Re: [ptxdist] [PATCH] ibrdtn: add packaging rules for IBR-DTN and dtndht List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Content-Type: multipart/mixed; boundary="===============0272527222==" Errors-To: ptxdist-bounces@pengutronix.de Sender: "ptxdist" To: ptxdist@pengutronix.de This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============0272527222== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="7Xn8TpiCIKmMlWh6xJo6H8UbPlqUgpE0L" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --7Xn8TpiCIKmMlWh6xJo6H8UbPlqUgpE0L Content-Type: multipart/mixed; boundary="VOT61hCniriwXCa7tAK7iL9tSxnbABL8m"; protected-headers="v1" From: Roland Hieber To: ptxdist@pengutronix.de Message-ID: <6b808b5c-e3f6-6d63-9378-6495a15f3c1b@rohieb.name> Subject: Re: [ptxdist] [PATCH] ibrdtn: add packaging rules for IBR-DTN and dtndht References: <1471445616-7728-1-git-send-email-rohieb@rohieb.name> <20160818065342.463fc7qfeixtb4vt@pengutronix.de> <20160828073629.qogtrcb4wc72xdvb@pengutronix.de> In-Reply-To: <20160828073629.qogtrcb4wc72xdvb@pengutronix.de> --VOT61hCniriwXCa7tAK7iL9tSxnbABL8m Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 28.08.2016 09:36, Robert Schwebel wrote: > You can use install_copy and avoid the last argument, this is the right= > mechanism to create a directory with ownership and permissions. Ah right thanks, it even says so in the manual :) But thinking this through: /etc/ibrdtn/bpsec is meant to hold the private key and cert for the Bundle Security Protocol, which are meant to be generated by ibrdtn-genkey.sh, which uses openssl and hexdump to generate it. So technically, IBRDTN_WITH_TLS has to select OPENSSL_BIN and BUSYBOX_HEXDUMP. However, if the target rootfs is read-only, running ibrdtn-genkey.sh on the target is futile, and in this case, those dependencies are unneccessary. The key material would rather need to be generated at build time and/or put into projectroot/etc/ibrdtn/bpsec by the user. So I'm rather thinking about adding a menuconfig option "install ibrdtn-genkey.sh", and let the users decide whether they want to generate keys on the target or deploy them via projectroot/. I tried hacking the key generation into the targetinstall stage, but didn't get it to work, and that really seems more like a job for the configure scrip= t. - Roland --VOT61hCniriwXCa7tAK7iL9tSxnbABL8m-- --7Xn8TpiCIKmMlWh6xJo6H8UbPlqUgpE0L Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJXwy8kAAoJELJBPGbdLD/qaqMP/jSV1EsYPdYLZwlrLFk3x9OI UOJjsIb5Y+1c3oUp/DRMRaFjVXittDyhSKeEWNLHNRZXZIWy/W0gOQmAfFOvPbxs LTpMAfI22K/EbZE7UVdz+hbshzEuwDJvwr0uvrowrlwTRZzVhHb3tIvyQC2UqfBT tGjMPo59lQruoNnZ/IyD5drqTS62MWDq79lkxPxLdmu6nL9BnFx9bzm26SsJ8IAz AMTN8wojDliAVFQJRlKzEzSqOkhafBrWR8qu0GzXXSziprZyHulB1cA2BjZjY1X0 BZwhpqFZYU4eGzEhu+6x4TWIoGcDTtN0bhEQxJAsk7lRaySnLhQwoH2VBvTvI4N7 umKNIYnNhiLuyyWRDELHIWEs5uWUumeJ5tkUPh2Gr5Z6/S5aYYiJHpY8bIofIwB4 c7lapkzitIz0rYMDSuyKIMMoPkcFqahSPuyBBzg1OO6+T1eHW3F+3Ua2MZdAxWq2 xGEFJxFgjjRhiMpP4yyMMaZhSPt1V3UYb5kJFcgqpPm1tYdpzpVB6H6JbHYSV/ng PSEz9H8/egIWe4scmoOiwiyhMVH+5ESHHHVz2LAQ7cZPcdi8GEGs/6QDF1fzeahW xUSjciFojzRpAA2jB/z7HTu6dksHYxrz97vQ0L1dawfre31mqELacfdnC1Gy0xaN pAO6LptsSqLaJFdmFAgj =FLLf -----END PGP SIGNATURE----- --7Xn8TpiCIKmMlWh6xJo6H8UbPlqUgpE0L-- --===============0272527222== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KcHR4ZGlzdCBt YWlsaW5nIGxpc3QKcHR4ZGlzdEBwZW5ndXRyb25peC5kZQ== --===============0272527222==--