linux/poky.git/meta/recipes-support/ca-certificates, branch hardknott

meta: add explicit branch and protocol to SRC_URI

2021-11-21T11:40:35+00:00

Add branch name explicitly to SRC_URI where it's not defined and switch to using https protocol for Github projects. The change was made using convert-srcuri script in scripts/contrib. (From OE-Core rev: ab781d4e3fa7425d96ea770ddfd0f01f62018c5b) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ca-certificates: update 20210119 -> 20211016

2021-11-03T11:19:04+00:00

(From OE-Core rev: 9c351e7a0b6e4e1cc58e3855d8b711d64764a7e3) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit c479b8a810d966d7267af1b4dac38a46f55fc547) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ca-certificates: Fix openssl runtime cert dependencies

2021-04-30T13:37:25+00:00

With commit dc778c70449ee5401b5a24ad18b22b88338c47c5, dependency was moved to openssl-bin which in itself was a fine change, but dropping dependency on openssl too should have been kept along, dropping this meant that openssl binary wont be able to validate secure connections as the CApath files wont be installed, which infact are required for openssl bins to work, following call e.g. fails $ openssl s_client -connect google.com:443 .... New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 256 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 20 (unable to get local issuer certificate) .... The local issuer certs are not found in default location /usr/lib/ssh-1.1/certs, this dir and its content is installed by openssl package therefore re-add the dependency on openssl (From OE-Core rev: 84afcdcb9d7ee24596bd3f8d808d30c9d558d918) Signed-off-by: Khem Raj Cc: Andrei Gherzan Signed-off-by: Richard Purdie (cherry picked from commit eaf377315efc73d6ffe361372a873918b3bb3bf5) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ca-certificates: Clean up two patches and submit upstream

2021-02-23T22:35:01+00:00

(From OE-Core rev: f3eabbb5c15fb55ae3d46b2377c09bb58226d965) Signed-off-by: Richard Purdie

ca-certificates: upgrade 20200601 -> 20210119

2021-01-30T10:41:04+00:00

0001-certdata2pem.py-use-python3.patch removed since it is included in 20210119 (From OE-Core rev: afd86357e07f69090eaff4c5db2c517867dd4ccf) Signed-off-by: Zheng Ruoqin Signed-off-by: Richard Purdie

ca-certificates: correct upstream version check

2020-06-09T12:14:00+00:00

(From OE-Core rev: 9bc2943a7819c7e6d1bd4c1c03b265671811784c) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

ca-certificates: upgrade 20190110 -> 20200601

2020-06-04T12:27:32+00:00

-License-Update: format changed (From OE-Core rev: 0007f38b03bcb0bd561bd9181fbffc7dec47fe9a) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

ca-certificates: use python 3 for builds

2019-09-01T21:33:07+00:00

(From OE-Core rev: 8157c6d32e2af67211eb8fcd048a0771f10f7b26) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

ca-certificates: Fix reproducibilty and multilib issue

2019-08-29T16:12:34+00:00

This command was dependent on the order of files on the disk and for multilib builds could result in: Error: Transaction check error: file /etc/ca-certificates.conf conflicts between attempted installs of ca-certificates-20190110-r0.core2_32 and lib64-ca-certificates-20190110-r0.x86_64 Sorting the file makes things deterministic. (From OE-Core rev: c8f329fc562c9eecdcc1cb10d2c7661f44110fb4) Signed-off-by: Richard Purdie

ca-certificates: Fix openssl runtime dependencies

2019-05-31T14:36:20+00:00

Since yocto thud, and more specifically since poky switched to openssl 1.1 line, the openssl binary is provided by 'openssl-bin'. This impacts the native and nativesdk recipe variants as well. (From OE-Core rev: dc778c70449ee5401b5a24ad18b22b88338c47c5) Signed-off-by: Andrei Gherzan Signed-off-by: Richard Purdie