1 fwtool_check_signature
() {
2 [ $# -gt 1 ] && return 1
4 [ ! -x /usr
/bin
/ucert
] && {
5 if [ "$REQUIRE_IMAGE_SIGNATURE" = 1 ]; then
12 if ! fwtool
-q -s /tmp
/sysupgrade.ucert
"$1"; then
13 v
"Image signature not present"
14 [ "$REQUIRE_IMAGE_SIGNATURE" = 1 -a "$FORCE" != 1 ] && {
15 v
"Use sysupgrade -F to override this check when downgrading or flashing to vendor firmware"
17 [ "$REQUIRE_IMAGE_SIGNATURE" = 1 ] && return 1
21 fwtool
-q -T -s /dev
/null
"$1" | \
22 ucert
-V -m - -c "/tmp/sysupgrade.ucert" -P /etc
/opkg
/keys
27 fwtool_check_image
() {
28 [ $# -gt 1 ] && return 1
30 .
/usr
/share
/libubox
/jshn.sh
32 if ! fwtool
-q -i /tmp
/sysupgrade.meta
"$1"; then
33 v
"Image metadata not present"
34 [ "$REQUIRE_IMAGE_METADATA" = 1 -a "$FORCE" != 1 ] && {
35 v
"Use sysupgrade -F to override this check when downgrading or flashing to vendor firmware"
37 [ "$REQUIRE_IMAGE_METADATA" = 1 ] && return 1
41 json_load
"$(cat /tmp/sysupgrade.meta)" ||
{
42 v
"Invalid image metadata"
46 device
="$(cat /tmp/sysinfo/board_name)"
47 devicecompat
="$(uci -q get system.@system[0].compat_version)"
48 [ -n "$devicecompat" ] || devicecompat
="1.0"
50 json_get_var imagecompat compat_version
51 json_get_var compatmessage compat_message
52 [ -n "$imagecompat" ] || imagecompat
="1.0"
54 # select correct supported list based on compat_version
55 # (using this ensures that compatibility check works for devices
56 # not knowing about compat-version)
57 local supported
=supported_devices
58 [ "$imagecompat" != "1.0" ] && supported
=new_supported_devices
59 json_select
$supported ||
return 1
61 json_get_keys dev_keys
62 for k
in $dev_keys; do
64 if [ "$dev" = "$device" ]; then
65 # major compat version -> no sysupgrade
66 if [ "${devicecompat%.*}" != "${imagecompat%.*}" ]; then
67 v
"The device is supported, but this image is incompatible for sysupgrade based on the image version ($devicecompat->$imagecompat)."
68 [ -n "$compatmessage" ] && v
"$compatmessage"
72 # minor compat version -> sysupgrade with -n required
73 if [ "${devicecompat#.*}" != "${imagecompat#.*}" ] && [ "$SAVE_CONFIG" = "1" ]; then
74 v
"The device is supported, but the config is incompatible to the new image ($devicecompat->$imagecompat). Please upgrade without keeping config (sysupgrade -n)."
75 [ -n "$compatmessage" ] && v
"$compatmessage"
83 v
"Device $device not supported by this image"
84 vn
"Supported devices:"
85 for k
in $dev_keys; do