From 7a70b50f424ea5db9f24c614bbe3ae35718899fa Mon Sep 17 00:00:00 2001 From: Stefan Agner Date: Wed, 27 Feb 2019 18:36:06 +0100 Subject: Move warning about insecure practise to the correct recipe When SOTA_DEPLOY_CREDENTIALS got introduced deployment of the provisioning credientials has been moved to aktualizr-ca-implicit-prov-creds. Move the warning accordingly. Signed-off-by: Stefan Agner --- recipes-sota/aktualizr/aktualizr-ca-implicit-prov-creds.bb | 4 ++++ recipes-sota/aktualizr/aktualizr-ca-implicit-prov.bb | 3 --- 2 files changed, 4 insertions(+), 3 deletions(-) (limited to 'recipes-sota') diff --git a/recipes-sota/aktualizr/aktualizr-ca-implicit-prov-creds.bb b/recipes-sota/aktualizr/aktualizr-ca-implicit-prov-creds.bb index 7420983..b9bb1f6 100644 --- a/recipes-sota/aktualizr/aktualizr-ca-implicit-prov-creds.bb +++ b/recipes-sota/aktualizr/aktualizr-ca-implicit-prov-creds.bb @@ -3,6 +3,10 @@ SECTION = "base" LICENSE = "MPL-2.0" LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MPL-2.0;md5=815ca599c9df247a0c7f619bab123dad" +# WARNING: it is NOT a production solution. The secure way to provision devices +# is to create certificate request directly on the device (either with HSM/TPM +# or with software) and then sign it with a CA stored on a disconnected machine. + DEPENDS = "aktualizr aktualizr-native" ALLOW_EMPTY_${PN} = "1" diff --git a/recipes-sota/aktualizr/aktualizr-ca-implicit-prov.bb b/recipes-sota/aktualizr/aktualizr-ca-implicit-prov.bb index 8dcda99..a932475 100644 --- a/recipes-sota/aktualizr/aktualizr-ca-implicit-prov.bb +++ b/recipes-sota/aktualizr/aktualizr-ca-implicit-prov.bb @@ -1,9 +1,6 @@ SUMMARY = "Aktualizr configuration for implicit provisioning with CA" DESCRIPTION = "Configuration for implicitly provisioning Aktualizr using externally provided or generated CA" -# WARNING: it is NOT a production solution. The secure way to provision devices is to create certificate request directly on the device -# (either with HSM/TPM or with software) and then sign it with a CA stored on a disconnected machine - HOMEPAGE = "https://github.com/advancedtelematic/aktualizr" SECTION = "base" LICENSE = "MPL-2.0" -- cgit v1.2.3-54-g00ecf