vdd

vdd synced commits to wrynose at vdd/meta-swupdate from mirror

  • c065845560 swupdate.inc: add OFL-1.1 to LICENSE Every package level license must also be listed in the recipe LICENSE variable. This patch fixes that. ERROR: swupdate-signed-2026.05.1-r0 do_package_qa: QA Issue: LICENSE:swupdate-signed-www includes licenses (OFL-1.1) that are not listed in LICENSE [unlisted-pkg-lics] Signed-off-by: Jonas Juffinger <mail@jonasjuffinger.com>

5 giorni fa

vdd synced commits to scarthgap at vdd/meta-swupdate from mirror

  • 7da41c5f2e swupdate.inc: add OFL-1.1 to LICENSE Every package level license must also be listed in the recipe LICENSE variable. This patch fixes that. ERROR: swupdate-signed-2026.05.1-r0 do_package_qa: QA Issue: LICENSE:swupdate-signed-www includes licenses (OFL-1.1) that are not listed in LICENSE [unlisted-pkg-lics] Signed-off-by: Jonas Juffinger <mail@jonasjuffinger.com>

5 giorni fa

vdd synced commits to master at vdd/meta-swupdate from mirror

  • 5e069ecc5c swupdate.inc: add OFL-1.1 to LICENSE Every package level license must also be listed in the recipe LICENSE variable. This patch fixes that. ERROR: swupdate-signed-2026.05.1-r0 do_package_qa: QA Issue: LICENSE:swupdate-signed-www includes licenses (OFL-1.1) that are not listed in LICENSE [unlisted-pkg-lics] Signed-off-by: Jonas Juffinger <mail@jonasjuffinger.com>

5 giorni fa

vdd synced commits to wrynose at vdd/meta-swupdate from mirror

  • 6741dead61 swupdate: don't set default mongoose port in args Avoid setting the mongoose listing port in the command line arg list. This is unnecessary as it is the default one and it makes it harder to change it, as it overrides the user's choice in swupdate.cfg. Removing it should not have any impact on existing configurations. Signed-off-by: Oliver Kästner <okaestner@rosen-nxt.com>
  • 98d21af739 swupdate.inc: add OFL-1.1 to LICENSE:${PN}-www The www sub-package ships Font Awesome fonts (examples/www/v2/webfonts/fa-solid-900.{ttf,woff2}) which are licensed under SIL OFL 1.1. LICENSES/OFL-1.1.txt is already present in the source tree and referenced in LIC_FILES_CHKSUM, but LICENSE:${PN}-www only declared MIT, omitting OFL-1.1. Signed-off-by: Hamish Guthrie <hamish.guthrie@kistler.com>
  • 8e6b4f4253 swupdate-common: add support for multiple CMS signers So far SWUPDATE_CMS_CERT and SWUPDATE_CMS_KEY accepted only a single certificate and private key. Allow both variables to hold a space delimited list paired by position and emit one "-signer"/"-inkey" pair per entry on the openssl command line. This enables hybrid signing e.g. a classical RSA or ECDSA signature combined with a post-quantum ML-DSA signature in the same CMS structure. Note that SWUpdate's CMS_verify() treats the signers as an AND: every listed signer's certificate must be present in the verification trust store on the target. A single certificate/key pair produces exactly the same openssl command as before, so existing recipes are unaffected. Signed-off-by: Ayoub Zaki <ayoub.zaki@embetrix.com>
  • Visualizza comparazione tra questi 3 commit »

6 giorni fa

vdd synced commits to scarthgap at vdd/meta-swupdate from mirror

  • 6eee1733b4 swupdate: don't set default mongoose port in args Avoid setting the mongoose listing port in the command line arg list. This is unnecessary as it is the default one and it makes it harder to change it, as it overrides the user's choice in swupdate.cfg. Removing it should not have any impact on existing configurations. Signed-off-by: Oliver Kästner <okaestner@rosen-nxt.com>
  • 354c4c6bb6 swupdate.inc: add OFL-1.1 to LICENSE:${PN}-www The www sub-package ships Font Awesome fonts (examples/www/v2/webfonts/fa-solid-900.{ttf,woff2}) which are licensed under SIL OFL 1.1. LICENSES/OFL-1.1.txt is already present in the source tree and referenced in LIC_FILES_CHKSUM, but LICENSE:${PN}-www only declared MIT, omitting OFL-1.1. Signed-off-by: Hamish Guthrie <hamish.guthrie@kistler.com>
  • c8ed5a3523 swupdate-common: add support for multiple CMS signers So far SWUPDATE_CMS_CERT and SWUPDATE_CMS_KEY accepted only a single certificate and private key. Allow both variables to hold a space delimited list paired by position and emit one "-signer"/"-inkey" pair per entry on the openssl command line. This enables hybrid signing e.g. a classical RSA or ECDSA signature combined with a post-quantum ML-DSA signature in the same CMS structure. Note that SWUpdate's CMS_verify() treats the signers as an AND: every listed signer's certificate must be present in the verification trust store on the target. A single certificate/key pair produces exactly the same openssl command as before, so existing recipes are unaffected. Signed-off-by: Ayoub Zaki <ayoub.zaki@embetrix.com>
  • Visualizza comparazione tra questi 3 commit »

6 giorni fa

vdd synced commits to master at vdd/meta-swupdate from mirror

  • 075be4c9aa swupdate: don't set default mongoose port in args Avoid setting the mongoose listing port in the command line arg list. This is unnecessary as it is the default one and it makes it harder to change it, as it overrides the user's choice in swupdate.cfg. Removing it should not have any impact on existing configurations. Signed-off-by: Oliver Kästner <okaestner@rosen-nxt.com>
  • 1177d733b5 swupdate.inc: add OFL-1.1 to LICENSE:${PN}-www The www sub-package ships Font Awesome fonts (examples/www/v2/webfonts/fa-solid-900.{ttf,woff2}) which are licensed under SIL OFL 1.1. LICENSES/OFL-1.1.txt is already present in the source tree and referenced in LIC_FILES_CHKSUM, but LICENSE:${PN}-www only declared MIT, omitting OFL-1.1. Signed-off-by: Hamish Guthrie <hamish.guthrie@kistler.com>
  • 41b37d191c swupdate-common: add support for multiple CMS signers So far SWUPDATE_CMS_CERT and SWUPDATE_CMS_KEY accepted only a single certificate and private key. Allow both variables to hold a space delimited list paired by position and emit one "-signer"/"-inkey" pair per entry on the openssl command line. This enables hybrid signing e.g. a classical RSA or ECDSA signature combined with a post-quantum ML-DSA signature in the same CMS structure. Note that SWUpdate's CMS_verify() treats the signers as an AND: every listed signer's certificate must be present in the verification trust store on the target. A single certificate/key pair produces exactly the same openssl command as before, so existing recipes are unaffected. Signed-off-by: Ayoub Zaki <ayoub.zaki@embetrix.com>
  • Visualizza comparazione tra questi 3 commit »

6 giorni fa

vdd synced commits to wrynose at vdd/meta-swupdate from mirror

  • c3eba00d32 swupdate-common: add SWUPDATE_CMS_MD to select the CMS digest The CMS signing command "openssl cms -sign" without an explicit -md thus leaving openssl to pick the signing key's default digest. Keys that advertise no default digest cannot be used this way: openssl aborts with "no default digest". This is the case for the post-quantum ML-DSA keys supported since OpenSSL 3.5 + which are hashless and require the digest to be explicitly supplied. Add an optional SWUPDATE_CMS_MD variable when set is passed to openssl cms -sign as -md <value> (e.g: sha256, sha512). When unset the previous behaviour is preserved. Signed-off-by: Ayoub Zaki <ayoub.zaki@embetrix.com>

3 settimane fa

vdd synced commits to scarthgap at vdd/meta-swupdate from mirror

  • 438e8ea2d9 swupdate-common: add SWUPDATE_CMS_MD to select the CMS digest The CMS signing command "openssl cms -sign" without an explicit -md thus leaving openssl to pick the signing key's default digest. Keys that advertise no default digest cannot be used this way: openssl aborts with "no default digest". This is the case for the post-quantum ML-DSA keys supported since OpenSSL 3.5 + which are hashless and require the digest to be explicitly supplied. Add an optional SWUPDATE_CMS_MD variable when set is passed to openssl cms -sign as -md <value> (e.g: sha256, sha512). When unset the previous behaviour is preserved. Signed-off-by: Ayoub Zaki <ayoub.zaki@embetrix.com>

3 settimane fa

vdd synced commits to master at vdd/meta-swupdate from mirror

  • 30b8bb07bd swupdate-common: add SWUPDATE_CMS_MD to select the CMS digest The CMS signing command "openssl cms -sign" without an explicit -md thus leaving openssl to pick the signing key's default digest. Keys that advertise no default digest cannot be used this way: openssl aborts with "no default digest". This is the case for the post-quantum ML-DSA keys supported since OpenSSL 3.5 + which are hashless and require the digest to be explicitly supplied. Add an optional SWUPDATE_CMS_MD variable when set is passed to openssl cms -sign as -md <value> (e.g: sha256, sha512). When unset the previous behaviour is preserved. Signed-off-by: Ayoub Zaki <ayoub.zaki@embetrix.com>

3 settimane fa

vdd synced commits to wrynose at vdd/meta-swupdate from mirror

  • 5fa2d69061 Update to 2026.05.1 Signed-off-by: Stefano Babic <stefano.babic@swupdate.org>

1 mese fa

vdd synced commits to scarthgap at vdd/meta-swupdate from mirror

  • 49af8ea317 Update to 2026.05.1 Signed-off-by: Stefano Babic <stefano.babic@swupdate.org>

1 mese fa

vdd synced commits to master at vdd/meta-swupdate from mirror

  • 90fc79e788 Update to 2026.05.1 Signed-off-by: Stefano Babic <stefano.babic@swupdate.org>

1 mese fa

vdd synced commits to wrynose at vdd/meta-swupdate from mirror

  • 885d8a5739 Bump to 2196dcfb This fixes breakage in Pull mode due to check of swupdate_HASH_final(). Signed-off-by: Stefano Babic <stefano.babic@swupdate.org>

1 mese fa

vdd synced commits to scarthgap at vdd/meta-swupdate from mirror

  • 42bb94b829 Bump to 2196dcfb This fixes breakage in Pull mode due to check of swupdate_HASH_final(). Signed-off-by: Stefano Babic <stefano.babic@swupdate.org>

1 mese fa

vdd synced commits to master at vdd/meta-swupdate from mirror

  • c7b1a17f27 Bump to 2196dcfb This fixes breakage in Pull mode due to check of swupdate_HASH_final(). Signed-off-by: Stefano Babic <stefano.babic@swupdate.org>

1 mese fa

vdd synced commits to wrynose at vdd/meta-swupdate from mirror

  • 4cfc4c98e6 swupdate_git: fix wrong version Version was set to 2026.06, it is 2026.05. Signed-off-by: Stefano Babic <stefano.babic@swupdate.org>

2 mesi fa

vdd synced commits to scarthgap at vdd/meta-swupdate from mirror

  • cb709b865a swupdate_git: fix wrong version Version was set to 2026.06, it is 2026.05. Signed-off-by: Stefano Babic <stefano.babic@swupdate.org>

2 mesi fa

vdd synced commits to master at vdd/meta-swupdate from mirror

  • 2b129075d6 swupdate_git: fix wrong version Version was set to 2026.06, it is 2026.05. Signed-off-by: Stefano Babic <stefano.babic@swupdate.org>

2 mesi fa

vdd synced commits to wrynose at vdd/meta-swupdate from mirror

2 mesi fa

vdd synced commits to scarthgap at vdd/meta-swupdate from mirror

  • a6e2e54bfd Bump to 2026.05 Signed-off-by: Stefano Babic <stefano.babic@swupdate.org>

2 mesi fa