kuksa-val: Rework to support updated SSL certificates 03/28703/3
authorScott Murray <scott.murray@konsulko.com>
Mon, 24 Apr 2023 22:01:29 +0000 (18:01 -0400)
committerJan-Simon Moeller <jsmoeller@linuxfoundation.org>
Thu, 27 Apr 2023 09:56:18 +0000 (09:56 +0000)
commitfdb58afacf2dff95cca48a772d653e45a1b577f3
tree1617355cb79b7549ff84eb424dab6daee64a1343
parent34fd1612e443164364287894f50bde3de693eeb1
kuksa-val: Rework to support updated SSL certificates

Changes:
- Tweak the kuksa-val recipe to remove installing a newer server
  certificate (since it will be done elsewhere), and to split the
  certificates up into finer grained packages to ease installing
  them piecemeal and replacing them with other packages.
- Remove the unused genCerts.sh certificate script patch form the
  kuksa-val recipe, an updated patch will be added in the near
  future.
- Added a patch in the kuksa-viss-client recipe that enables the
  library to use certificates installed in /etc/kuksa-certificates or
  /etc/kuksa-val instead of the default ones that are shipped.
- Add kuksa-certificates-agl recipe that installs AGL specific CA,
  server, and client certificates plus the required server and client
  keys to act as a replacement for the default ones shipped with
  KUKSA.val.  The kuksa-certificates-agl name is used to avoid needing
  a rename with a future switch to kuksa-databroker.  Note that the
  RPROVIDES variable is used for the various certificate packages to
  make them installable alternatives to the kuksa-val-certificates-*
  ones.  The certificates installed are valid for 1 year and have
  AGL as the providing organization, longer validity ones will be
  added in follow up commits for Octopus and Pike.
- Update the existing users of kuksa-val-*-certificates with the new
  kuksa-val-certificates-* package names.
- Add PREFERRED_RPROVIDER definitions for the kuksa-val-certificates-*
  packages to quiet the BitBake warnings coming from having multiple
  providers.

Bug-AGL: SPEC-4763

Change-Id: Ic6f1ca8b54f637674cd5ae42df0bed6ca4e729aa
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
17 files changed:
conf/include/agl-demo.inc
recipes-connectivity/kuksa-val/kuksa-certificates-agl.bb [new file with mode: 0644]
recipes-connectivity/kuksa-val/kuksa-certificates-agl/CA.pem [new file with mode: 0644]
recipes-connectivity/kuksa-val/kuksa-certificates-agl/Client.key [new file with mode: 0644]
recipes-connectivity/kuksa-val/kuksa-certificates-agl/Client.pem [new file with mode: 0644]
recipes-connectivity/kuksa-val/kuksa-certificates-agl/Server.key [new file with mode: 0644]
recipes-connectivity/kuksa-val/kuksa-certificates-agl/Server.pem [new file with mode: 0644]
recipes-connectivity/kuksa-val/kuksa-val/0001-genCerts.sh-add-Subject-Alt-Name-extension-to-server.patch [deleted file]
recipes-connectivity/kuksa-val/kuksa-val/Server.key [deleted file]
recipes-connectivity/kuksa-val/kuksa-val/Server.pem [deleted file]
recipes-connectivity/kuksa-val/kuksa-val_git.bb
recipes-connectivity/kuksa-val/kuksa-viss-client/0002-kuksa_viss_client-Add-external-certificates-support.patch [new file with mode: 0644]
recipes-connectivity/kuksa-val/kuksa-viss-client_git.bb
recipes-core/nss/nss-agl-driver-db_git.bb
recipes-demo/cluster-dashboard/cluster-dashboard_git.bb
recipes-platform/images/agl-cluster-demo-platform-flutter.bb
recipes-platform/packagegroups/packagegroup-agl-ivi-services.bb