Skip to content

makefiles/suit: make it possible to accept multiple SUIT keys #18459

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jan 13, 2023

Conversation

benpicco
Copy link
Contributor

Contribution description

A board may be flashed with a development firmware. The development firmware should accept SUIT updates signed with both the development and the production key.

Therefore allow to include multiple public keys to verify the SUIT manifest with.

Testing procedure

Run tests/suit_manifest with multiple keys, e.g.

SUIT_SECS="/home/benpicco/dev/RIOT/keys/default.pem /home/benpicco/.local/share/RIOT/keys/default.pem" make -C tests/suit_manifest all term

The tests should still success even though the 'wrong' key is tried first.

Issues/PRs references

@github-actions github-actions bot added Area: build system Area: Build system Area: OTA Area: Over-the-air updates Area: sys Area: System Area: tools Area: Supplementary tools labels Aug 16, 2022
@benpicco benpicco added the CI: ready for build If set, CI server will compile all applications for all available boards for the labeled PR label Aug 25, 2022
@benpicco
Copy link
Contributor Author

bors merge

@benpicco benpicco removed Area: tools Area: Supplementary tools Area: sys Area: System labels Jan 13, 2023
@benpicco
Copy link
Contributor Author

bors merge

@bors
Copy link
Contributor

bors bot commented Jan 13, 2023

Already running a review

bors bot added a commit that referenced this pull request Jan 13, 2023
18459: makefiles/suit: make it possible to accept multiple SUIT keys r=benpicco a=benpicco



18724: nanocoap_sock: implement DTLS socket r=benpicco a=benpicco



18763: sys/tiny_strerror: add missing error codes r=maribu a=maribu

### Contribution description

When double-checking the error codes provided by newlib by default (without magic defines, such as `__LINUX_ERRNO_EXTENSIONS__` or `__CYGWIN__`), some where still missing in `tiny_strerror()`. This adds the missing ones.

This in turn showed that three errno codes were missing in the avr-libc compat `errno.h`, which are added as well.

### Testing procedure

Murdock should double check that the added errno codes indeed are defined by default.

### Issues/PRs references

None

Co-authored-by: Benjamin Valentin <benjamin.valentin@ml-pa.com>
Co-authored-by: Benjamin Valentin <benjamin.valentin@bht-berlin.de>
Co-authored-by: Marian Buschsieweke <marian.buschsieweke@ovgu.de>
@kaspar030
Copy link
Contributor

re-shuffling merge train:

bors cancel
bors merge

@bors
Copy link
Contributor

bors bot commented Jan 13, 2023

Canceled.

bors bot added a commit that referenced this pull request Jan 13, 2023
18459: makefiles/suit: make it possible to accept multiple SUIT keys r=kaspar030 a=benpicco



18724: nanocoap_sock: implement DTLS socket r=benpicco a=benpicco



18763: sys/tiny_strerror: add missing error codes r=maribu a=maribu

### Contribution description

When double-checking the error codes provided by newlib by default (without magic defines, such as `__LINUX_ERRNO_EXTENSIONS__` or `__CYGWIN__`), some where still missing in `tiny_strerror()`. This adds the missing ones.

This in turn showed that three errno codes were missing in the avr-libc compat `errno.h`, which are added as well.

### Testing procedure

Murdock should double check that the added errno codes indeed are defined by default.

### Issues/PRs references

None

19136: CI: re-add "synchronize" event to check-labels r=kaspar030 a=kaspar030



Co-authored-by: Benjamin Valentin <benjamin.valentin@ml-pa.com>
Co-authored-by: Benjamin Valentin <benjamin.valentin@bht-berlin.de>
Co-authored-by: Marian Buschsieweke <marian.buschsieweke@ovgu.de>
Co-authored-by: Kaspar Schleiser <kaspar@schleiser.de>
@bors
Copy link
Contributor

bors bot commented Jan 13, 2023

Build failed (retrying...):

@miri64
Copy link
Member

miri64 commented Jan 13, 2023

bors retry

@bors
Copy link
Contributor

bors bot commented Jan 13, 2023

Already running a review

@miri64
Copy link
Member

miri64 commented Jan 13, 2023

bors cancel
bors merge

@bors
Copy link
Contributor

bors bot commented Jan 13, 2023

Canceled.

@benpicco
Copy link
Contributor Author

bors merge

@bors
Copy link
Contributor

bors bot commented Jan 13, 2023

Already running a review

@bors bors bot merged commit fb603f2 into RIOT-OS:master Jan 13, 2023
@bors
Copy link
Contributor

bors bot commented Jan 13, 2023

Build succeeded:

@benpicco benpicco deleted the suit/multi-key branch January 13, 2023 17:12
@jia200x jia200x added this to the Release 2023.04 milestone Apr 25, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Area: build system Area: Build system Area: OTA Area: Over-the-air updates CI: ready for build If set, CI server will compile all applications for all available boards for the labeled PR
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants