[OE-core] [PATCH] ca-certificates: Fix symlinks to the certificates in nativesdk

Christopher Larson kergoth at gmail.com
Tue Mar 28 20:12:01 UTC 2017


On Tue, Mar 28, 2017 at 12:00 PM, Serhii Popovych <spopovyc at cisco.com>
wrote:

> Symlinks to certificates in buildtools-tarball at /etc/ssl/certs
> installed with absolute pathes making these sumlinks pointing
> outside of toolchain to the host system locations.
>
> These locations may not contain some certificates (thus link to
> the certificate in toolchain is broken) or host system
> certificate may be revoked by CRL or outdated.
>
> Since this change seems non intrusive for target package apply
> patch for all builds.
>
> Cc: XE-Linux <xe-linux-external at cisco.com>
> Signed-off-by: Serhii Popovych <spopovyc at cisco.com>
>

We actually run a script against the entire sdk sysroot to convert all
absolute links to relative (see `POPULATE_SDK_POST_TARGET_COMMAND +=
“rootfs_sysroot_relativelinks;` in image.bbclass and
rootfs_sysroot_relativelinks in rootfs-postcommands.bbclass), but this
script had a bug. I recently sent a patch (this morning) to it to fix this
exact issue. Of course, it wouldn’t hurt to also change the behavior in the
recipe, but it’s not necessary with the script fixed.
-- 
Christopher Larson
kergoth at gmail dot com
Founder - BitBake, OpenEmbedded, OpenZaurus
Senior Software Engineer, Mentor Graphics
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openembedded.org/pipermail/openembedded-core/attachments/20170328/9a12f81c/attachment-0002.html>


More information about the Openembedded-core mailing list