summaryrefslogtreecommitdiff
path: root/meta-phosphor/recipes-phosphor/certificate/phosphor-nslcd-cert-config.bb
AgeCommit message (Collapse)AuthorFilesLines
2019-11-05Support uploading multiple certificates per authority serviceZbigniew Kurzynski1-1/+3
Since the certificate manager can support multiple certificates the CERTPATH for mode=authentication will be changed to directory. This change depends on anothere review, see Depends-On tag. Becase the TrustStore will be used by TLS authentication, any operation on certificates should result in bmcweb restart, that is why #Units to restart entry is added. Since update procedure will not replace configuration file in /etc all configuration files for the certificate-manager will be deployed in /usr/share/phosphor-certificate-manager. (From meta-phosphor rev: 0c09ff71d089c614b14d076d933e849f2f74281e) Signed-off-by: Zbigniew Kurzynski <zbigniew.kurzynski@intel.com> Change-Id: Ib7f4ba60760ab8cd1ac647bc51dadf50af7fedc7 Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
2019-09-20meta-phosphor: Remove references to PHOSPHORBASEBrad Bishop1-1/+1
PHOSPHORBASE is only used for pointing at licenses...point at the licenses in oe-core in meta/files/common-licenses instead. to match the defacto convention used in other oe layers like meta-openembedded. (From meta-phosphor rev: a1cee09419cb1467c3d2b7bf996b40089f0d06f4) Change-Id: If136d24638a8022671988cf0a01620e7fffc545f Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
2019-03-26certificates: clean up config recipesBrad Bishop1-6/+19
Since the config recipe packages will create symlinks to the certificate manager template, RDEPEND rather than RRECOMMEND on the certificate manager package (which provides the template). Avoid obmc-phosphor-systemd. Enabling systemd units is the realm of packaging scripts and the SYSTEMD_LINK feature in obmc-phosphor-systemd implements this incorrectly. Just directly code install, pkg_postinst and pkg_prerm here rather than trying to fix obmc-phosphor-systemd - the extra indirection is more harmful to ease of comprehension for seasoned Yocto developers than the couple of lines of code it saves. (From meta-phosphor rev: 1a4e65e5847e299348b5f28ffa2b4b1837769deb) Change-Id: Ideb12d62461b3b18ff5c92f3a76f1aa20c94a269 Tested: Built witherspoon image and verified rootfs unchanged. Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
2018-09-28Fix MD5 sum digest number in certificate recipesMarri Devender Rao1-1/+1
(From meta-phosphor rev: cb27451978f0228de6b3806c43be39abbac043cb) Change-Id: I914c482f659fbabf30af34d849b2821ce7932ee8 Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com> Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
2018-09-28phosphor-certificate-manager: Add recipe and certificate serviceMarri Devender Rao1-0/+15
Add recipe and service files to start/stop nginx and nslcd services To start/stop nginx service use systemctl stop phosphor-certificate-manager@nginx.service systemctl start phosphor-certificate-manager@nginx.service To start/stop nslcd service use systemctl stop phosphor-certificate-manager@nslcd.service systemctl start phosphor-certificate-manager@nslcd.service (From meta-phosphor rev: 08b55912f01f7a2b53ccc11fb8e508c9c8bc8a14) Change-Id: Ie55613f8da061f9f948d645086db12be8239beea Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com> Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>