Commit Graph

9 Commits

Author SHA1 Message Date
Richard Purdie
abf22bed20 Revert "nss: avoid to use the hardcode kernel version"
This reverts commit 4c80c557508e088fe226bfa1834464b505404652.

We *cannot* have nss becoming machine specific, that makes no sense.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-02-13 12:06:01 +00:00
Roy Li
01268c339f nss: avoid to use the hardcode kernel version
Read kernel version from ${STAGING_KERNEL_DIR}/kernel-abiversion, to avoid
to use the hardcode kernel version.

(From OE-Core rev: 4c80c557508e088fe226bfa1834464b505404652)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-02-13 11:41:22 +00:00
David Nyström
a42f84682f nss: Add nativesdk to BBCLASSEXTEND and bugfix
Since shsignlibs is used
from the nss postinstall hook. It should be included in
nativesdk to make offline rootfs construction possible.

(From OE-Core rev: 42bc72d21226e76c9b013fc052f17d847dc6a97a)

Signed-off-by: David Nyström <david.nystrom@enea.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-02-02 22:37:40 +00:00
Ming Liu
d531a566d4 nss: don't need set SRC_URI with both += and _append
(From OE-Core rev: b1252f91ef62ce62d4d55269f498b5692aba76e8)

Signed-off-by: Ming Liu <ming.liu@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-10-26 15:59:17 +01:00
David Nyström
58825b9b20 nss: Fix return codes in postinstall
exit 0 was done if $D != NULL, if one or more
shlibsign executions fails.

(From OE-Core rev: 5dc3eb72c4b9b68ab13310383a90fe7779bf92a7)

Signed-off-by: David Nyström <david.nystrom@enea.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-09-30 22:11:58 +01:00
Hongxu Jia
ee9bdf90ce nss:fix postinst failed at rootfs time
Create checksum file at rootfs time to support read-only rootfs.

[YOCTO #4879]

(From OE-Core rev: 64e87fc6e99bc1d4807034166735034b1f92bad8)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-07-29 13:09:01 +01:00
Hongxu Jia
c54004403a nss: fix incorrect shebang line of perl script
Replace incorrect shebang line with `#!/usr/bin/env perl'.

(From OE-Core rev: d78ecdbd66d8d93ecf67f56cfbbf4b954dec3c7b)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-07-13 18:23:36 +01:00
Hongxu Jia
912efc0c81 nss: create checksum files for the nss libraries
Add checksum files required for the NSS softoken to operate in FIPS 140 mode.
The shlibsign is invoked to sign the libraries, and it is built for the target
architecture and doesn't support cross-compiling so far.

Invoke shlibsign at target's first boot time to generate checksum files.

https://developer.mozilla.org/en-US/docs/NSS/NSS_Tech_Notes/nss_tech_note6
http://en.wikipedia.org/wiki/FIPS_140
https://bugzilla.mozilla.org/show_bug.cgi?id=681624

(From OE-Core rev: a4580f967c8064294a06d406acf5deb24aee2acc)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-07-13 18:23:35 +01:00
Hongxu Jia
e448ef6698 nss: add version 3.15.1
Network Security Services (NSS) is a set of libraries designed to support
cross-platform development of security-enabled client and server applications.
Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7,
PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security standards.

[YOCTO #4096]

(From OE-Core rev: 22c146fd3e829b89c07a2019005e180e93fece5d)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-07-13 18:23:35 +01:00