packages/utils/attendedsysupgrade-common/files, branch masterMirror of packages feedhttps://git.openwrt.org/feed/packages/atom?h=master2022-10-29T08:00:27Zattendedsysupgrade-common: update ASU CA pubkey2022-10-29T08:00:27ZPaul Spooren2022-10-28T11:17:13Zurn:sha1:646fbeafdc6ad4b39217f767216c8fac27776151
The old key was overwritten during a machine migration and the current
worker key is no longer valid. To create new valid worker certificates
this commit adds a new CA pubkey.
To update running OpenWrt devices via a client one needs to force
install it or upgrade to the latest version of
`attendedsysupgrade-common` - I'm sorry for the inconvenience.
This change is only related to the `usign` pubkey and `ucert`
certificate which is used to sign all created images on the server.
While at it, use INSTALL_DATA instead of INSTALL_BIN.
Signed-off-by: Paul Spooren <mail@aparcar.org>
attendedsysupgrade-common: use sysupgrade.openwrt.org2021-09-24T22:00:26ZPaul Spooren2021-09-24T03:25:56Zurn:sha1:81b00bd6ab522f24ae91b073cd98af63a4eb0ba6
A new server was added which runs within the OpenWrt cloud, it's much
faster and should be used instead. For development the server at
https://asu.aparcar.org stays available.
Signed-off-by: Paul Spooren <mail@aparcar.org>
attendedsysupgrade-common: update server URL2021-08-05T22:07:37ZPaul Spooren2021-08-05T22:07:37Zurn:sha1:cdc0c70875c3a53750680d70e1a68bc69bb594d7
The service is now on a new server which supports IPv6.
Signed-off-by: Paul Spooren <mail@aparcar.org>
attendedsysupgrade-common: update to 20212021-04-30T06:06:40ZPaul Spooren2021-04-29T21:09:22Zurn:sha1:a54b9570ad6abc0b3e1079e881d1dbe9a475e33d
* Use $(COMMITCOUNT)
* Use SPDX
* Use CA (ucert) public key
* Update repo link
* Update maintainer email
* Format description
Signed-off-by: Paul Spooren <mail@aparcar.org>
attendedsyuspgrade-common: add key and set server2019-03-06T22:24:08ZPaul Spooren2019-03-06T20:43:01Zurn:sha1:54a2c8d087e65ce5389586b62b2ec41f00c0c8c0
In collaboration with @dangowrt the server makes use of `ucert`. Active
workers sign created firmware and clients check if the signature is
valid. Certs of *hacked* or inactive workers can be revoked. Private CA
key is **not** stored on the upgrade server.
Only for devices already supporting ucert via firmware metadata.
Signed-off-by: Paul Spooren <mail@aparcar.org>
attendedsysupgrade-common: add package2017-11-12T00:10:09ZPaul Spooren2017-11-05T17:45:44Zurn:sha1:861e5eda8673d5da67e3971d76cc5f5650f61e5d
due to various clients and the existence of rpcd-mod-rpcsys the package
rpcd-mod-attendedsysupgrade is superflous.
From now on the attendedsysupgrade-common package should be dependencie
of all kinds of clients.
Currently active or planned:
- luci-app-attendedsysupgrade
- attendedsysupgrade cli in shell
- attendedsysupgrade cli in c
Signed-off-by: Paul Spooren <paul@spooren.de>