mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
From: Denis Osterland-Heim <denis.osterland@diehl.com>
To: "ptxdist@pengutronix.de" <ptxdist@pengutronix.de>,
	"mkl@pengutronix.de" <mkl@pengutronix.de>
Subject: Re: [ptxdist] allow network access to HSM in order to sign
Date: Wed, 23 Jun 2021 05:08:09 +0000	[thread overview]
Message-ID: <d39756b9b6cb79845fa9bc041cead0a81e73c343.camel@diehl.com> (raw)
In-Reply-To: <d26d6a31-a074-a6a3-bbdf-42d01bf9a583@pengutronix.de>

Hi,

Am Dienstag, den 22.06.2021, 15:05 +0200 schrieb Marc Kleine-Budde:
> On 6/22/21 6:36 AM, Denis Osterland-Heim wrote:
> > Please have a look at https://git.pengutronix.de/cgit/ptxdist/commit/?id=4b3be8225f389c7db0e2d665e8e600cb2cf52b91 .
> > This should answer your question.
>
> Thanks.
You're welcome.

>
> However that doesn't work, as the proprietary I'm using refuses to work with
> https_proxy="" and I don't want to add more binary patches to the lib.
:-/

Maybe it would be an option to add a configuration switch to disable this behavior.
So your code-signing-provider may select this.

--- a/scripts/lib/ptxd_make_world_common.sh
+++ b/scripts/lib/ptxd_make_world_common.sh
@@ -397,7 +397,7 @@ ptxd_make_world_init() {
     #
     # try to prevent downloads outside the get stage
     #
-    if [ "${pkg_stage}" != "get" ]; then
+    if [ "${pkg_stage}" != "get" ] && [ -z "${PTXCONF_DISABLE_DOWNLOAD_CHECK}" ]; then
        pkg_env="HTTPS_PROXY=- HTTP_PROXY=- https_proxy=- http_proxy=- ${pkg_env}"
     fi

Not sure if this is really works.

Regards, Denis

>
> regards,
> Marc
>
Diehl Connectivity Solutions GmbH
Geschäftsführung: Horst Leonberger
Sitz der Gesellschaft: Nürnberg - Registergericht: Amtsgericht
Nürnberg: HRB 32315

________________________________

Der Inhalt der vorstehenden E-Mail ist nicht rechtlich bindend. Diese E-Mail enthaelt vertrauliche und/oder rechtlich geschuetzte Informationen.
Informieren Sie uns bitte, wenn Sie diese E-Mail faelschlicherweise erhalten haben. Bitte loeschen Sie in diesem Fall die Nachricht.
Jede unerlaubte Form der Reproduktion, Bekanntgabe, Aenderung, Verteilung und/oder Publikation dieser E-Mail ist strengstens untersagt.

- Informationen zum Datenschutz, insbesondere zu Ihren Rechten, erhalten Sie unter:

https://www.diehl.com/group/de/transparenz-und-informationspflichten/

The contents of the above mentioned e-mail is not legally binding. This e-mail contains confidential and/or legally protected information. Please inform us if you have received this e-mail by
mistake and delete it in such a case. Each unauthorized reproduction, disclosure, alteration, distribution and/or publication of this e-mail is strictly prohibited.

- For general information on data protection and your respective rights please visit:

https://www.diehl.com/group/en/transparency-and-information-obligations/


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

  reply	other threads:[~2021-06-23  5:08 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-06-21 20:13 Marc Kleine-Budde
2021-06-22  4:36 ` Denis Osterland-Heim
2021-06-22 13:05   ` Marc Kleine-Budde
2021-06-23  5:08     ` Denis Osterland-Heim [this message]
2021-06-25  9:47       ` Michael Olbrich
2021-06-25 11:54         ` Denis Osterland-Heim
2021-06-25 12:21           ` Michael Olbrich

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=d39756b9b6cb79845fa9bc041cead0a81e73c343.camel@diehl.com \
    --to=denis.osterland@diehl.com \
    --cc=mkl@pengutronix.de \
    --cc=ptxdist@pengutronix.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox