The code signing infrastructure is available since 2019 in PTXdist. Now
it's time to document it, especially since RAUC also uses it.
Unfortunately this did not make it into ptxdist-2020.06.0.
To make things easier introduce a code-signing-provider template.
Changes since v2:
- introduce ptxd_template_read_options letting the user decide between
limited options
- ask user about HSM type
- split HSM/SoftHSM ptxdist-set-keys.sh cases into separate files
- introduce wizard.sh to generate ptxdist-set-keys.sh HSM case specific
- set dependencies HSM case specific
- introduce pre rule template to extend CODE_SIGNING_ENV HSM case
specific
- rename srk object name for consistency reasons
- adjust doc section "Creating Custom Code Signing Providers" to
updated code signing provider templates
- remove "necessary package dependencies for code signing provider"
from ref_code_signing_helpers, generated code signing providers now
select all necessary host tools by default
Changes since (implicit) v1:
- rebased on master
- reference code signing consumers section in ref_code_signing_helpers
- split into sections: {SoftHSM Provider,Generic Provider,Consumer} Functions
- add introductory sentence for each section
- added Reviewed-by Roland
- added Tested-by Ladis
Bastian Krause (6):
ptxd_lib_template: add ptxd_template_read_options
package templates: add code-signing-provider template
doc: dev_manual: split up into multiple files
doc: move code signing docs from scripts/ into doc/
doc: dev_code_signing: rework and extend code signing section
doc: introduce ref_code_signing_helpers
doc/dev_add_bin_only_files.rst | 105 +
doc/dev_add_new_pkgs.rst | 1339 +++++++++++++
doc/dev_code_signing.rst | 138 ++
doc/dev_create_new_pkg_templates.rst | 77 +
doc/dev_dir_hierarchy.rst | 108 +
doc/dev_layers_in_ptxdist.rst | 111 ++
doc/dev_manual.rst | 1765 +----------------
doc/ref_code_signing_helpers.rst | 248 +++
doc/ref_manual.rst | 1 +
.../ptxdist-set-keys-hsm.sh | 42 +
.../ptxdist-set-keys-softhsm.sh | 58 +
.../templates/code-signing-provider/wizard.sh | 10 +
.../template-code-signing-provider-choice-in | 5 +
.../template-code-signing-provider-in | 14 +
.../template-code-signing-provider-make | 41 +
.../template-code-signing-provider-pre-make | 15 +
scripts/lib/ptxd_lib_code_signing.sh | 32 +-
scripts/lib/ptxd_lib_template.sh | 57 +
18 files changed, 2381 insertions(+), 1785 deletions(-)
create mode 100644 doc/dev_add_bin_only_files.rst
create mode 100644 doc/dev_add_new_pkgs.rst
create mode 100644 doc/dev_code_signing.rst
create mode 100644 doc/dev_create_new_pkg_templates.rst
create mode 100644 doc/dev_dir_hierarchy.rst
create mode 100644 doc/dev_layers_in_ptxdist.rst
create mode 100644 doc/ref_code_signing_helpers.rst
create mode 100755
rules/templates/code-signing-provider/ptxdist-set-keys-hsm.sh
create mode 100755
rules/templates/code-signing-provider/ptxdist-set-keys-softhsm.sh
create mode 100644 rules/templates/code-signing-provider/wizard.sh
create mode 100644 rules/templates/template-code-signing-provider-choice-in
create mode 100644 rules/templates/template-code-signing-provider-in
create mode 100644 rules/templates/template-code-signing-provider-make
create mode 100644 rules/templates/template-code-signing-provider-pre-make
--
2.27.0
_______________________________________________
ptxdist mailing list
[email protected]
To unsubscribe, send a mail with subject "unsubscribe" to
[email protected]
