From patchwork Thu Jul 3 19:36:23 2014 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Yann E. MORIN" X-Patchwork-Id: 366959 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from fraxinus.osuosl.org (fraxinus.osuosl.org [140.211.166.137]) by ozlabs.org (Postfix) with ESMTP id A3B4614013A for ; Fri, 4 Jul 2014 05:36:40 +1000 (EST) Received: from localhost (localhost [127.0.0.1]) by fraxinus.osuosl.org (Postfix) with ESMTP id EED308B774; Thu, 3 Jul 2014 19:36:39 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from fraxinus.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wEUsusfyaoEB; Thu, 3 Jul 2014 19:36:38 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by fraxinus.osuosl.org (Postfix) with ESMTP id 647598B67E; Thu, 3 Jul 2014 19:36:37 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from hemlock.osuosl.org (hemlock.osuosl.org [140.211.166.133]) by ash.osuosl.org (Postfix) with ESMTP id 60FFD1BFA5D for ; Thu, 3 Jul 2014 19:36:33 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by hemlock.osuosl.org (Postfix) with ESMTP id 5EF6B888A8 for ; Thu, 3 Jul 2014 19:36:33 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from hemlock.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sm0fdYPpBorj for ; Thu, 3 Jul 2014 19:36:32 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-we0-f169.google.com (mail-we0-f169.google.com [74.125.82.169]) by hemlock.osuosl.org (Postfix) with ESMTPS id 23680886B3 for ; Thu, 3 Jul 2014 19:36:31 +0000 (UTC) Received: by mail-we0-f169.google.com with SMTP id t60so729529wes.28 for ; Thu, 03 Jul 2014 12:36:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:from:to:cc:subject:date:message-id:in-reply-to:references; bh=rrgupDY6ad45MXIBDrMETJEVtbkQ4xoP4OZVgRTWG8Y=; b=dbdohGeZyM73Eud8HsIw3XDMWsWnXasLmRqbRFW1pz8/kilJiQpTYHQ7IQzb8wsQVM esPFGdzd+8m1u7+mNqx0Hcm6AXS55JuQ0J5jNxbzIz5Zp3hmseLQgLC7wbHgaG9KmCly qR3Jk7HSKgetag6ENPPeaXHXXzLDKFKm6Br59z7OBZ+CqALO6CQehToCNo2skJzRNPEP VfKt+95tXOKaIrktaGeA0x2f2cyszbMZ57swtaXomERmTNJr4QtoMKFAVLLMn1yVdFks nlp7lznb8hwy5E+LLDkvKMQknw8kJ2IORkjDNjAllqJLlt2KaZowjCuyq4Iwx7xRc/gq Nvig== X-Received: by 10.180.84.168 with SMTP id a8mr51693258wiz.36.1404416190670; Thu, 03 Jul 2014 12:36:30 -0700 (PDT) Received: from gourin.bzh.lan (ks3095497.kimsufi.com. [94.23.60.27]) by mx.google.com with ESMTPSA id i3sm70309870wiz.13.2014.07.03.12.36.29 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 03 Jul 2014 12:36:29 -0700 (PDT) From: "Yann E. MORIN" To: buildroot@buildroot.org Date: Thu, 3 Jul 2014 21:36:23 +0200 Message-Id: <00582a8025a651a3aefbf46849f1dd36fd1cb940.1404416102.git.yann.morin.1998@free.fr> X-Mailer: git-send-email 1.9.1 In-Reply-To: References: Cc: "Yann E. MORIN" Subject: [Buildroot] [PATCH 4/4] package/ca-certificates: add tarball's hashes X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: buildroot-bounces@busybox.net Sender: buildroot-bounces@busybox.net ca-certificates contains sensitive security-related information, and we want to ensure the archive that we download has not been compromised. Add the sha1 and sha256 hashes from Debian's packaging. Signed-off-by: "Yann E. MORIN" Cc: Martin Bark Reviewed-by: Samuel Martin --- Changes v4 -> v5: - update hashes since we've bumped the version --- package/ca-certificates/ca-certificates.hash | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 package/ca-certificates/ca-certificates.hash diff --git a/package/ca-certificates/ca-certificates.hash b/package/ca-certificates/ca-certificates.hash new file mode 100644 index 0000000..bcd0723 --- /dev/null +++ b/package/ca-certificates/ca-certificates.hash @@ -0,0 +1,3 @@ +# hashes from: $(CA_CERTIFICATES_SITE)/ca-certificates_$(CA_CERTIFICATES_VERSION).dsc : +sha1 ad57a45f0422fafd78a2e8191e5204f2306cc91b ca-certificates_20140223.tar.xz +sha256 815b7cd97200b0d76450bb3e7d9b65997ac494ab6467b17369f65b2ef94bcb0c ca-certificates_20140223.tar.xz