meta-efi-secure-boot: Ensure openssl-native exists when we need it

mirror of https://github.com/jiazhang0/meta-secure-core.git synced 2026-07-24 04:48:45 +00:00

In order to deploy our secure boot keys in DER format we need to use
openssl.  This must be listed in our DEPENDS line in order for the
sysroot to be populated correctly when we run do_sign.  Also drop the
explicit fakeroot on our empty grub-efi do_sign as we may not have
globally populated virtual/fakeroot-native at that point in time.

Fixes: 92316d4b40 ("meta-signing-key: When deploying keys UEFI keys, deploy DER format")
Signed-off-by: Tom Rini <trini@konsulko.com>

This commit is contained in:

Tom Rini

2018-11-07 07:46:29 -05:00

committed by

Jia Zhang

parent 5c56f9534b

commit ff8db97cb8

4 changed files with 5 additions and 2 deletions

									
										meta-efi-secure-boot/recipes-kernel/linux/linux-yocto-efi-secure-boot.inc
									
		+1
		
												View File
												
				@@ -1,3 +1,4 @@

				DEPENDS += "openssl-native"

				FILESEXTRAPATHS_prepend := "${THISDIR}/linux-yocto:"

				efi_secure_boot_sccs = "\