<div dir="ltr"><br><div class="gmail_extra"><div class="gmail_quote">On 7 February 2017 at 17:07, Mariano Lopez <span dir="ltr"><<a href="mailto:mariano.lopez@linux.intel.com" target="_blank">mariano.lopez@linux.intel.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF"><span class="gmail-">
<p>On 06/02/17 09:17, Jussi Kukkonen
wrote:<br></p>
<blockquote type="cite">
<div dir="ltr"><br>
<div class="gmail_extra"><br>
<div class="gmail_quote">On 6 February 2017 at 16:56, Burton,
Ross <span dir="ltr"><<a href="mailto:ross.burton@intel.com" target="_blank">ross.burton@intel.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">
<div class="gmail_extra"><span><br>
<div class="gmail_quote">On 6 February 2017 at
14:43, Sona Sarmadi <span dir="ltr"><<a href="mailto:sona.sarmadi@enea.com" target="_blank">sona.sarmadi@enea.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div id="gmail-m_3873397909308596662m_5881053407445794043:1vq" class="gmail-m_3873397909308596662m_5881053407445794043a3s gmail-m_3873397909308596662m_5881053407445794043aXjCH gmail-m_3873397909308596662m_5881053407445794043m15a13e1fae6963e3">
bbdebug 2 "Updating cve-check-tool database
located in $cve_dir"<br>
if cve-check-update -d "$cve_dir" ; then<br>
printf "CVE database was updated on %s
UTC\n\n" "$(LANG=C date --utc +'%F %T')" >
"$cve_file"<br>
else<br>
bbwarn "Error in executing
cve-check-update"
<<<<<<<<<<<<<<<<<<<<<<<<<</div>
</blockquote>
</div>
<br>
</span>This definitely needs to be rewritten so you
can see the output if it fails. Just run
cve-check-update -d <dir> yourself and see what
it says. Last time I had this failing it was because
the mitre servers were offline.</div>
</div>
</blockquote>
<div><br>
</div>
<div>Agreed about the error output.</div>
</div>
</div>
</div>
</blockquote>
<br></span>
Also you need to patch the tool, most of the time there is no output
from it; I think Ikey would integrate those patches without
hesitation.<span class="gmail-"> <br></span></div></blockquote><div><br></div><div>I don't know... the branch we're using is called 'legacy-tool' and is quite different from master (which isn't usable).</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div bgcolor="#FFFFFF"><span class="gmail-">
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote">
<div><br>
</div>
<div>I think recipe specific sysroots broke the setup
somehow (so the tools are not actually in sysroot when
they're needed). I'm taking a look at this tomorrow.</div>
</div>
</div>
</div>
</blockquote>
<br></span>
I tried today, but I'm having a hard time with the proxies (like
always) so I can't really verify this. Were you able to check?</div></blockquote><div><br></div><div>Yes, the problem is indeed that cve-check-update is not found when do_populate_cve_db() is run. In addition to that curl-native is currently broken by recipe-specific sysroots as well (CA certificates are looked for in the wrong place) and this makes all downloads in cve-check-tool fail.</div><div><br></div><div>TL;DR: working on it.</div><div><br></div><div>Jussi</div><div><br></div></div></div></div>