mirrors/meta-secure-core
1
0
Fork 0
mirror of https://github.com/jiazhang0/meta-secure-core.git synced 2026-07-27 06:18:51 +00:00
Code Issues Projects Releases Wiki Activity

create-user-key-store.sh: support gpg 2.x used to generate rpm signing key

Browse Source 
Signed-off-by: Jia Zhang <lans.zhang2008@gmail.com>
This commit is contained in:
Jia Zhang
2017-08-20 15:06:22 +08:00
parent 038aa54bc2
commit cbdefad44c
1 changed files with 26 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-signing-key/scripts/create-user-key-store.sh
+26 -18
View File
@@ -188,21 +188,28 @@ create_ima_user_key() {
create_rpm_user_key() { create_rpm_user_key() {
local gpg_ver=`gpg --version | head -1 | awk '{ print $3 }' | awk -F. '{ print $1 }'` local gpg_ver=`gpg --version | head -1 | awk '{ print $3 }' | awk -F. '{ print $1 }'`
if [ x"$gpg_ver" != x"1" ]; then
echo "gpg version 2 is not supported"
exit 1
fi
local key_dir="$RPM_KEYS_DIR" local key_dir="$RPM_KEYS_DIR"
[ ! -d "$key_dir" ] && mkdir -p "$key_dir" [ ! -d "$key_dir" ] && mkdir -m 0700 -p "$key_dir"
local gpg_key_name="SecureCore" local gpg_key_name="SecureCore"
local priv_key="$key_dir/RPM-GPG-PRIVKEY-$gpg_key_name" local priv_key="$key_dir/RPM-GPG-PRIVKEY-$gpg_key_name"
local pub_key="$key_dir/RPM-GPG-KEY-$gpg_key_name" local pub_key="$key_dir/RPM-GPG-KEY-$gpg_key_name"
cat >"$key_dir/gen_rpm_keyring" <<EOF if [ "$gpg_ver" == "2" ]; then
gpg --homedir "$key_dir" --quick-generate-key --batch \
"$gpg_key_name" default default never
gpg --homedir "$key_dir" --export --armor "$gpg_key_name" > "$pub_key"
gpg --homedir "$key_dir" --export-secret-keys --armor "$gpg_key_name" > "$priv_key"
cd "$key_dir"
rm -rf openpgp-revocs.d private-keys-v1.d pubring.kbx* \
trustdb.gpg
cd -
else
cat >"$key_dir/gen_rpm_keyring" <<EOF
Key-Type: RSA Key-Type: RSA
Key-Length: 2048 Key-Length: 2048
Name-Real: $gpg_key_name Name-Real: $gpg_key_name
@@ -215,22 +222,23 @@ Expire-Date: 0
%echo RPM keyring $gpg_key_name created %echo RPM keyring $gpg_key_name created
EOF EOF
gpg --batch --gen-key "$key_dir/gen_rpm_keyring" gpg --batch --gen-key "$key_dir/gen_rpm_keyring"
gpg="gpg --no-default-keyring --secret-keyring \ gpg="gpg --no-default-keyring --secret-keyring \
$priv_key.sec --keyring $pub_key.pub" $priv_key.sec --keyring $pub_key.pub"
$gpg --list-secret-keys $gpg --list-secret-keys
print_error "Please type passwd to modify the passphrase, and type quit to exit" print_error "Please type passwd to modify the passphrase, and type quit to exit"
$gpg --edit-key "$gpg_key_name" $gpg --edit-key "$gpg_key_name"
$gpg --export --armor "$gpg_key_name" > "$pub_key" $gpg --export --armor "$gpg_key_name" > "$pub_key"
$gpg --export-secret-keys --armor "$gpg_key_name" > "$priv_key" $gpg --export-secret-keys --armor "$gpg_key_name" > "$priv_key"
rm -f "$key_dir/gen_rpm_keyring" rm -f "$key_dir/gen_rpm_keyring"
rm -f "$priv_key.sec" "$pub_key.pub" rm -f "$priv_key.sec" "$pub_key.pub"
fi
} }
create_user_keys() { create_user_keys() {