From 2d92eeab07e3936eab4d7497278e188da3afff45 Mon Sep 17 00:00:00 2001 From: Venkat Chimata Date: Fri, 27 Jan 2023 18:22:42 +0530 Subject: [PATCH] openssl is needed to verify the command signatures 1. Enable openssl in AP firmware 2. Copy /certificates/sign_pubkey.pem into /etc/ucentral at boot time Signed-off-by: Venkat Chimata --- feeds/tip/certificates/files/etc/init.d/certificates | 1 + profiles/ucentral-ap.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/feeds/tip/certificates/files/etc/init.d/certificates b/feeds/tip/certificates/files/etc/init.d/certificates index bbb6f4d35..3d2cc617a 100755 --- a/feeds/tip/certificates/files/etc/init.d/certificates +++ b/feeds/tip/certificates/files/etc/init.d/certificates @@ -11,6 +11,7 @@ copy_certificates() { chmod 0440 root.network /etc/ucentral/*.pem chmod 0400 /etc/ucentral/dev-id [ -f /certificates/restrictions.json ] && cp /certificates/restrictions.json /etc/ucentral/ + [ -f /certificates/sign_pubkey.pem ] && cp /certificates/sign_pubkey.pem /etc/ucentral/ exit 0 } diff --git a/profiles/ucentral-ap.yml b/profiles/ucentral-ap.yml index b7fb164a6..e238ec565 100644 --- a/profiles/ucentral-ap.yml +++ b/profiles/ucentral-ap.yml @@ -52,6 +52,7 @@ packages: - usteer2 - ustp - libustream-openssl + - openssl-util - udevmand - udevstats - umdns