From patchwork Sun May 4 12:01:50 2014 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Yann E. MORIN" X-Patchwork-Id: 345469 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from fraxinus.osuosl.org (fraxinus.osuosl.org [140.211.166.137]) by ozlabs.org (Postfix) with ESMTP id D6381140194 for ; Sun, 4 May 2014 22:02:30 +1000 (EST) Received: from localhost (localhost [127.0.0.1]) by fraxinus.osuosl.org (Postfix) with ESMTP id 31BDF8B1F9; Sun, 4 May 2014 12:02:19 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from fraxinus.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YTxyUa-FdRHx; Sun, 4 May 2014 12:02:16 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by fraxinus.osuosl.org (Postfix) with ESMTP id AA3848B992; Sun, 4 May 2014 12:02:11 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from hemlock.osuosl.org (hemlock.osuosl.org [140.211.166.133]) by ash.osuosl.org (Postfix) with ESMTP id AB4561C2226 for ; Sun, 4 May 2014 12:02:09 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by hemlock.osuosl.org (Postfix) with ESMTP id A807B87DCF for ; Sun, 4 May 2014 12:02:09 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from hemlock.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S8t-duU1Aysv for ; Sun, 4 May 2014 12:02:09 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-we0-f177.google.com (mail-we0-f177.google.com [74.125.82.177]) by hemlock.osuosl.org (Postfix) with ESMTPS id DFB4387D56 for ; Sun, 4 May 2014 12:02:08 +0000 (UTC) Received: by mail-we0-f177.google.com with SMTP id x48so1032582wes.22 for ; Sun, 04 May 2014 05:02:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:from:to:cc:subject:date:message-id:in-reply-to:references; bh=0JRkxHHHM7N2M90a9J4pdA69mcCqmnhj6MksIPKwYPQ=; b=fQEwFBT63dl2TJhF2ZT+/vIfSvCWWPX0WF01Bx+lWNa1EGKgi55zlnKCvXQwW02NYL zUgpr0d3Mr8XC0DWOTgMQdSz3S+Z+5zw1UAZnX0BPVpwrl7T3qaQ0QmHdo7wQoHZBrOI ZgriepPhGBrcPuH1EJ71tKZ7L+pJfTz25Dke79AYaUf5T7ntR53zBy/wLaE8c6naDriB cK9oWjEnNUJ286lwnXLTNrE6823bT++Rsj0ERi+OePjaXtTaf0ykE+j8Bkvk7kBRr0Hp mBOKDeQ+NTcHuRX6Z/ov6uSMPy8DFrVWimqeR5CDfdobO3WhRs+cSNLnDvI63mAMh9gr 3lhQ== X-Received: by 10.194.81.98 with SMTP id z2mr23025233wjx.12.1399204927423; Sun, 04 May 2014 05:02:07 -0700 (PDT) Received: from gourin.bzh.lan (ks3095497.kimsufi.com. [94.23.60.27]) by mx.google.com with ESMTPSA id iy13sm10455501wic.1.2014.05.04.05.02.06 for (version=TLSv1.1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sun, 04 May 2014 05:02:06 -0700 (PDT) From: "Yann E. MORIN" To: buildroot@buildroot.org Date: Sun, 4 May 2014 14:01:50 +0200 Message-Id: X-Mailer: git-send-email 1.8.3.2 In-Reply-To: References: Cc: "Yann E. MORIN" Subject: [Buildroot] [PATCH 11/11] package/ca-certificates: add tarball's hashes X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: buildroot-bounces@busybox.net Sender: buildroot-bounces@busybox.net From: "Yann E. MORIN" ca-certificates contains sensitive security-related information, and we want to ensure the archive that we download has not been compromised. Add the sha1 and sha256 hashes from Debian's packaging. Signed-off-by: "Yann E. MORIN" Cc: Martin Bark Reviewed-by: Samuel Martin --- Changes v4 -> v5: - update hashes since we've bumped the version --- package/ca-certificates/ca-certificates.hash | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 package/ca-certificates/ca-certificates.hash diff --git a/package/ca-certificates/ca-certificates.hash b/package/ca-certificates/ca-certificates.hash new file mode 100644 index 0000000..bcd0723 --- /dev/null +++ b/package/ca-certificates/ca-certificates.hash @@ -0,0 +1,3 @@ +# hashes from: $(CA_CERTIFICATES_SITE)/ca-certificates_$(CA_CERTIFICATES_VERSION).dsc : +sha1 ad57a45f0422fafd78a2e8191e5204f2306cc91b ca-certificates_20140223.tar.xz +sha256 815b7cd97200b0d76450bb3e7d9b65997ac494ab6467b17369f65b2ef94bcb0c ca-certificates_20140223.tar.xz