From: Ross Burton <Ross.Burton@arm.com>
To: "hrsourabh011@gmail.com" <hrsourabh011@gmail.com>
Cc: "yocto@lists.yoctoproject.org" <yocto@lists.yoctoproject.org>
Subject: Re: [yocto] How to add missing ca-certificates to truststore in older version of yocto?
Date: Mon, 27 Mar 2023 18:27:59 +0000 [thread overview]
Message-ID: <C522C48E-CA7D-4527-990B-D5A6DA875AD0@arm.com> (raw)
In-Reply-To: <MWCT.1679934973535004564.JPB2@lists.yoctoproject.org>
If the certificates are in newer releases of the ca-certificates store, then upgrading the recipe will be easiest. As you see from the filename, the certificates in morty are from 2016. Take the latest release that is in langdale and you’ll have all the newer certs.
Ross
> On 27 Mar 2023, at 17:36, Sourabh Hegde via lists.yoctoproject.org <hrsourabh011=gmail.com@lists.yoctoproject.org> wrote:
>
> Hello,
>
> i am working with "Morty" release of yocto. Due to organizational reasons we still have to use "Morty" but will be upgraded soon.
> But, there are some certificates missing in the OpenSSL truststore. Now, I would like to add them to the image during build. Certificates are mainly for Amazon services (Amazon_Root_CAs). I beleive this can be done with ca-certificates_%.bbappend. I would like to know how will the .crt files be converted to .pem format and also how will ca-certficates.crt file will be updated in /etc/ssl/certs/ dir? The recipe is http://cgit.openembedded.org/openembedded-core/tree/meta/recipes-support/ca-certificates/ca-certificates_20160104.bb?h=morty
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#59529): https://lists.yoctoproject.org/g/yocto/message/59529
> Mute This Topic: https://lists.yoctoproject.org/mt/97886388/6875888
> Group Owner: yocto+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [ross.burton@arm.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
next prev parent reply other threads:[~2023-03-27 18:28 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-03-27 16:36 How to add missing ca-certificates to truststore in older version of yocto? Sourabh Hegde
2023-03-27 18:27 ` Ross Burton [this message]
2023-03-27 18:37 ` Sourabh Hegde
2023-03-30 12:06 ` [yocto] " Ross Burton
2023-03-31 12:05 ` Sourabh Hegde
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=C522C48E-CA7D-4527-990B-D5A6DA875AD0@arm.com \
--to=ross.burton@arm.com \
--cc=hrsourabh011@gmail.com \
--cc=yocto@lists.yoctoproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).