From ce5cd75dd87565f6d9ee81432344a1d66aab42bf Mon Sep 17 00:00:00 2001 From: Scott Murray Date: Mon, 6 Jun 2022 20:05:49 -0400 Subject: [PATCH] kuksa-val: split client certificates into a separate package Split the certificates required by clients (so client and CA) into a separate kuksa-val-client-certificates package so that they can be reused in the cluster demo image without having the full KUKSA.val server installed. Bug-AGL: SPEC-4405 Signed-off-by: Scott Murray Change-Id: I6b78b212ead395c8f731eab40ef0525a515bdb7c --- recipes-connectivity/kuksa-val/kuksa-val_git.bb | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/recipes-connectivity/kuksa-val/kuksa-val_git.bb b/recipes-connectivity/kuksa-val/kuksa-val_git.bb index 033e81e09..a8e2c31f1 100644 --- a/recipes-connectivity/kuksa-val/kuksa-val_git.bb +++ b/recipes-connectivity/kuksa-val/kuksa-val_git.bb @@ -40,7 +40,7 @@ EXTRA_OECMAKE = " \ do_install:append() { # Lower the logging level used in the installed config.ini from the upstream - # default of "ALL", which seems to cause performance issues at the moment. + # default of "ALL", which spams the logs. sed -i 's/^log-level = .*/log-level = WARNING/' ${D}/${sysconfdir}/kuksa-val/config.ini if ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then @@ -58,5 +58,17 @@ do_install:append() { chgrp 900 ${D}${sysconfdir}/kuksa-val/Server.pem } +# Put client certificates into their own package so we can avoid +# duplicates of them for e.g. cluster clients. Longer term this +# will need to be revisited. +PACKAGE_BEFORE_PN += "${PN}-client-certificates" + +FILES:${PN}-client-certificates = " \ + ${sysconfdir}/kuksa-val/Client.key \ + ${sysconfdir}/kuksa-val/Client.pem \ + ${sysconfdir}/kuksa-val/CA.pem \ +" + FILES:${PN} += "${systemd_system_unitdir} ${datadir}" +RDEPENDS:${PN} += "${PN}-client-certificates" -- 2.16.6