diff options
author | Alex Stewart <alex.stewart@ni.com> | 2021-06-09 16:10:44 -0500 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2021-06-11 23:50:58 +0100 |
commit | 4c68b716280e7e08e2062e3bf4ee93e748f2bb5c (patch) | |
tree | 6060c7e11e7070be5e72f86b3156208193a071d6 /meta/recipes-devtools/opkg | |
parent | e0b9f2c906141598f1e417a44853131a8baf7ab1 (diff) | |
download | poky-4c68b716280e7e08e2062e3bf4ee93e748f2bb5c.tar.gz |
opkg: add QA check for openssl feed verification
Feed signature checking with OpenSSL will be deprecated in the next
release of opkg.
Upstream ML Announcement:
https://groups.google.com/g/opkg-devel/c/drqw5_HuXuU
The opkg-0.4.5 configure.ac already throws a warning when
`--enable-openssl` is requested.
Add a temporary QA check to the opkg recipe, which will throw a warning
to the builder when they have `openssl` enabled in their opkg
PACKAGECONFIG. This will give builders some time to either change their
feed verification mechanism, or raise their use-case with upstream.
(From OE-Core rev: 0ccd4149881113f5c8344ab0cefcf984ade50b1c)
Signed-off-by: Alex Stewart <alex.stewart@ni.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/opkg')
-rw-r--r-- | meta/recipes-devtools/opkg/opkg_0.4.5.bb | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/meta/recipes-devtools/opkg/opkg_0.4.5.bb b/meta/recipes-devtools/opkg/opkg_0.4.5.bb index bc948647c8..56d6211aee 100644 --- a/meta/recipes-devtools/opkg/opkg_0.4.5.bb +++ b/meta/recipes-devtools/opkg/opkg_0.4.5.bb | |||
@@ -60,6 +60,19 @@ do_install_ptest () { | |||
60 | sed -i -e '/@PYTHONPATH=. $(PYTHON) $^/a\\t@if [ "$$?" != "0" ];then echo "FAIL:"$^;else echo "PASS:"$^;fi' ${D}${PTEST_PATH}/tests/Makefile | 60 | sed -i -e '/@PYTHONPATH=. $(PYTHON) $^/a\\t@if [ "$$?" != "0" ];then echo "FAIL:"$^;else echo "PASS:"$^;fi' ${D}${PTEST_PATH}/tests/Makefile |
61 | } | 61 | } |
62 | 62 | ||
63 | WARN_QA_append += "openssl-deprecation" | ||
64 | QAPKGTEST[openssl-deprecation] = "package_qa_check_openssl_deprecation" | ||
65 | def package_qa_check_openssl_deprecation (package, d, messages): | ||
66 | sane = True | ||
67 | |||
68 | pkgconfig = (d.getVar("PACKAGECONFIG") or "").split() | ||
69 | if pkgconfig and 'openssl' in pkgconfig: | ||
70 | package_qa_add_message(messages, 'openssl-deprecation', '"openssl" in opkg.bb PACKAGECONFIG. Feed signature checking with OpenSSL will be deprecated in the next opkg release. Consider using GPG checking instead.') | ||
71 | sane = False | ||
72 | |||
73 | return sane | ||
74 | |||
75 | |||
63 | RDEPENDS_${PN} = "${VIRTUAL-RUNTIME_update-alternatives} opkg-arch-config libarchive" | 76 | RDEPENDS_${PN} = "${VIRTUAL-RUNTIME_update-alternatives} opkg-arch-config libarchive" |
64 | RDEPENDS_${PN}_class-native = "" | 77 | RDEPENDS_${PN}_class-native = "" |
65 | RDEPENDS_${PN}_class-nativesdk = "" | 78 | RDEPENDS_${PN}_class-nativesdk = "" |