[OE-core] [PATCH] ca-certificates: Fix symlinks to the certificates in nativesdk

Serhii Popovych spopovyc at cisco.com
Wed Mar 29 12:51:04 UTC 2017


> 
> On Tue, Mar 28, 2017 at 12:00 PM, Serhii Popovych <spopovyc at cisco.com
> <mailto:spopovyc at cisco.com>> wrote:
> 
>     Symlinks to certificates in buildtools-tarball at /etc/ssl/certs
>     installed with absolute pathes making these sumlinks pointing
>     outside of toolchain to the host system locations.
> 
>     These locations may not contain some certificates (thus link to
>     the certificate in toolchain is broken) or host system
>     certificate may be revoked by CRL or outdated.
> 
>     Since this change seems non intrusive for target package apply
>     patch for all builds.
> 
>     Cc: XE-Linux <xe-linux-external at cisco.com
>     <mailto:xe-linux-external at cisco.com>>
>     Signed-off-by: Serhii Popovych <spopovyc at cisco.com
>     <mailto:spopovyc at cisco.com>>
> 
> 
> We actually run a script against the entire sdk sysroot to convert all
> absolute links to relative (see `POPULATE_SDK_POST_TARGET_COMMAND +=
> “rootfs_sysroot_relativelinks;` in image.bbclass and
> rootfs_sysroot_relativelinks in rootfs-postcommands.bbclass), but this
> script had a bug. I recently sent a patch (this morning) to it to fix
> this exact issue.
That's great. What the subject of this change in openembedded-core?
I wish to test it.

Because with current *master* I see problem is still here.

Thanks,
Serhii

Of course, it wouldn’t hurt to also change the
> behavior in the recipe, but it’s not necessary with the script fixed.


> -- 
> Christopher Larson
> kergoth at gmail dot com
> Founder - BitBake, OpenEmbedded, OpenZaurus
> Senior Software Engineer, Mentor Graphics



More information about the Openembedded-core mailing list