ADHOC/replicant-vendor_replicant
3
0
Fork 0
Code Issues 6 Pull Requests Releases Activity

Do not leave certificates creation in undefined state

Browse Source 
Create either all or none keys and certificates.

Signed-off-by: doak <doak+dev@posteo.net>
Acked-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
This commit is contained in:
doak 2019-01-30 01:09:15 +01:00 committed by Denis 'GNUtoo' Carikli
parent 1d677d9f9f
commit c1c94e5fec
No known key found for this signature in database
GPG Key ID: 5F5DFCC14177E263
1 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
sign-build
View File

@ -83,10 +83,17 @@ generate_keys () {
read_var "Email Address" KEY_EA read_var "Email Address" KEY_EA
SUBJECT="/C=$KEY_C/ST=$KEY_ST/L=$KEY_L/O=$KEY_O/OU=$KEY_OU/CN=$KEY_CN/emailAddress=$KEY_EA" SUBJECT="/C=$KEY_C/ST=$KEY_ST/L=$KEY_L/O=$KEY_O/OU=$KEY_OU/CN=$KEY_CN/emailAddress=$KEY_EA"
mkdir $KEY_DIR # Ensure that all keys and certificates are deleted in case of an error during creation,
for x in releasekey platform shared media; do \ # i.e. either all certificates are in place or none.
./development/tools/make_key $KEY_DIR/$x "$SUBJECT" || true; \ trap 'rm -rf "$KEY_DIR"' EXIT INT
mkdir "$KEY_DIR"
for x in releasekey platform shared media; do
./development/tools/make_key "$KEY_DIR/$x" "$SUBJECT" || true
# The return value of 'make_key' cannot be trusted. Check on our own
# if key and certificate has been created successfully.
test -r "$KEY_DIR/$x.x509.pem"
done done
trap - EXIT INT
} }
if [ "$DEVICE" = "" ] if [ "$DEVICE" = "" ]