summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorScott Murray <scott.murray@konsulko.com>2022-06-06 20:05:49 -0400
committerScott Murray <scott.murray@konsulko.com>2022-06-06 20:30:26 -0400
commitae8491ac60f249d7ab09033c9b6971bfd6d512ef (patch)
tree99cdc1fb579db3779801ed8e9877fca31cc1ffa5
parent59f8e2629f4295e89197a9d475241e87f0b9749b (diff)
kuksa-val: split client certificates into a separate package
Split the certificates required by clients (so client and CA) into a separate kuksa-val-client-certificates package so that they can be reused in the cluster demo image without having the full KUKSA.val server installed. Bug-AGL: SPEC-4405 Signed-off-by: Scott Murray <scott.murray@konsulko.com> Change-Id: Ifd46e4484e9020ec7ecd2490b1e41bc9920c1772
-rw-r--r--recipes-connectivity/kuksa-val/kuksa-val_git.bb14
1 files changed, 13 insertions, 1 deletions
diff --git a/recipes-connectivity/kuksa-val/kuksa-val_git.bb b/recipes-connectivity/kuksa-val/kuksa-val_git.bb
index 033e81e09..a8e2c31f1 100644
--- a/recipes-connectivity/kuksa-val/kuksa-val_git.bb
+++ b/recipes-connectivity/kuksa-val/kuksa-val_git.bb
@@ -40,7 +40,7 @@ EXTRA_OECMAKE = " \
do_install:append() {
# Lower the logging level used in the installed config.ini from the upstream
- # default of "ALL", which seems to cause performance issues at the moment.
+ # default of "ALL", which spams the logs.
sed -i 's/^log-level = .*/log-level = WARNING/' ${D}/${sysconfdir}/kuksa-val/config.ini
if ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then
@@ -58,5 +58,17 @@ do_install:append() {
chgrp 900 ${D}${sysconfdir}/kuksa-val/Server.pem
}
+# Put client certificates into their own package so we can avoid
+# duplicates of them for e.g. cluster clients. Longer term this
+# will need to be revisited.
+PACKAGE_BEFORE_PN += "${PN}-client-certificates"
+
+FILES:${PN}-client-certificates = " \
+ ${sysconfdir}/kuksa-val/Client.key \
+ ${sysconfdir}/kuksa-val/Client.pem \
+ ${sysconfdir}/kuksa-val/CA.pem \
+"
+
FILES:${PN} += "${systemd_system_unitdir} ${datadir}"
+RDEPENDS:${PN} += "${PN}-client-certificates"