linux/poky.git/meta/recipes-support/ca-certificates, branch 5.2_M3

ca-certificates: upgrade 20240203 -> 20241223

2025-01-03T10:51:27+00:00

(From OE-Core rev: 48a236c2f78fee5e6db19c6be23b4a18df025607) Signed-off-by: Richard Purdie

ca-certificates: get sources from debian tarballs

2024-08-03T06:56:10+00:00

git repo no longer has tags for recent versions which means we had missed several of them, and wouldn't be able to get notifications about any future releases. (From OE-Core rev: 81f013fd1312551628701bf36ac62746a2606dbd) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

ca-certificates: Add comment for provenance of SRCREV

2024-07-30T11:32:53+00:00

Provide references for how the SRCREV was arrived at for the 20240203 release. (From OE-Core rev: 6916cdb0f05f6644edb1e432a9421595abb9f0ca) Signed-off-by: Theodore A. Roth Signed-off-by: Theodore A. Roth Signed-off-by: Richard Purdie

ca-certificates: update 20211016 -> 20240203

2024-07-26T11:28:42+00:00

The 20240203 version is the same as used in Ubuntu >= 24.04 and Debian Trixie (testing). (From OE-Core rev: ce19168885a04b0d77e81c1fd1c4262b195a47d4) Signed-off-by: Theodore A. Roth Signed-off-by: Theodore A. Roth Signed-off-by: Richard Purdie

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie

meta: Add explict branch to git SRC_URIs

2021-10-30T17:56:47+00:00

There is uncertainty about the default branch name in git going forward. To try and cover the different possible outcomes, add branch names to all git:// and gitsm:// SRC_URI entries. This update was made with the script added to contrib in this patch which aims to help others convert other layers. (From OE-Core rev: b51c405faf6f8c0365f7533bfaf470d79152a463) Signed-off-by: Richard Purdie

ca-certificates: update 20210119 -> 20211016

2021-10-23T16:42:25+00:00

(From OE-Core rev: c479b8a810d966d7267af1b4dac38a46f55fc547) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

Convert to new override syntax

2021-08-02T14:44:10+00:00

This is the result of automated script conversion: scripts/contrib/convert-overrides.py converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie

ca-certificates: Fix openssl runtime cert dependencies

2021-04-20T12:56:48+00:00

With commit dc778c70449ee5401b5a24ad18b22b88338c47c5, dependency was moved to openssl-bin which in itself was a fine change, but dropping dependency on openssl too should have been kept along, dropping this meant that openssl binary wont be able to validate secure connections as the CApath files wont be installed, which infact are required for openssl bins to work, following call e.g. fails $ openssl s_client -connect google.com:443 .... New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 256 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 20 (unable to get local issuer certificate) .... The local issuer certs are not found in default location /usr/lib/ssh-1.1/certs, this dir and its content is installed by openssl package therefore re-add the dependency on openssl (From OE-Core rev: eaf377315efc73d6ffe361372a873918b3bb3bf5) Signed-off-by: Khem Raj Cc: Andrei Gherzan Signed-off-by: Richard Purdie

ca-certificates: Clean up two patches and submit upstream

2021-02-23T22:35:01+00:00

(From OE-Core rev: f3eabbb5c15fb55ae3d46b2377c09bb58226d965) Signed-off-by: Richard Purdie