PROVISORY: ca-certificates: install CA Bundle ODL

Provide the system CA Bundle ODL and install it to the location where it
will be picked up by tr181-security and imported into
Device.Security.CABundle data model.

In future the creation of ODL is to be replaced with automation script.

References: PCF-2487
References: PCF-2583
Signed-off-by: Piotr Nakraszewicz <piotr.nakraszewicz@consult.red>
This commit is contained in:
Piotr Nakraszewicz 2026-05-08 15:51:23 +02:00 committed by ahmed sassi
parent 2dad78b1ad
commit 3f1877d670
2 changed files with 13 additions and 0 deletions

View File

@ -49,6 +49,8 @@ endef
define Package/ca-certificates/install
$(INSTALL_DIR) $(1)/etc/ssl/certs
$(INSTALL_DIR) $(1)/etc/amx/tr181-security/defaults.d
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/ca-certificates/*/*.crt $(1)/etc/ssl/certs/
for CERTFILE in `ls -1 $(1)/etc/ssl/certs`; do \
@ -59,6 +61,7 @@ define Package/ca-certificates/install
done ; \
$(LN) "$$$$CERTFILE" "$(1)/etc/ssl/certs/$$$$HASH.$$$$SUFFIX" ; \
done
$(CP) ./files/00_default_ca-certificates.odl $(1)/etc/amx/tr181-security/defaults.d/
endef
define Package/ca-bundle/install

View File

@ -0,0 +1,10 @@
%populate {
object Security.CABundle {
instance add ("default") {
parameter Enable = true;
parameter Name = "default";
parameter CADirURI = "file:///etc/ssl/certs";
parameter CAFileURI = "file:///etc/ssl/certs/ca-certificates.crt";
}
}
}