From patchwork Wed Jun 18 14:35:06 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Johannes Schneider X-Patchwork-Id: 65264 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D69BFC7115F for ; Wed, 18 Jun 2025 14:35:23 +0000 (UTC) Received: from DU2PR03CU002.outbound.protection.outlook.com (DU2PR03CU002.outbound.protection.outlook.com [52.101.65.26]) by mx.groups.io with SMTP id smtpd.web11.338.1750257316205101331 for ; Wed, 18 Jun 2025 07:35:16 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@leica-geosystems.com header.s=selector1 header.b=EMwEB7qS; spf=permerror, err=parse error for token &{10 18 %{i}._ip.%{h}._ehlo.%{d}._spf.vali.email}: invalid domain name (domain: leica-geosystems.com, ip: 52.101.65.26, mailfrom: johannes.schneider@leica-geosystems.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=xvQ+WAAzsEm6F47z/5ETbsWcsqUjqtYJ0s1VKyxGbBhsioYXuqaG0A0NoPTDYdfitLmPoW9V6fwyw5CpHS6Dm6uSMVLLRXX9al0aOAOnAtzCjuJIilP+ru6obLYQpRFNbk/wsW56jcFpxO8UKEjvEPVU+tV7QKnX/OLn2NoD3yvuRANTeFYbS4UfNM+KoctNG54n3gS/C7V/wjX9eMpiphzn3ZugGyK5GDkUrbxJFhpojd9UnMMpzx1tByKIVnGAWUIe97vqxpjrlnzNKZIM//KjnLb+/oCf1HuT1ElUT3+93HasuFoa/QlFy+hdJxSgD8SXcNRLeiTkWvQuhKHmFA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=6AAPL/Flr7AP83QOEtreHvKyrOM8SY1rjGOOe033gIc=; b=TXrqNRJz+zc/X9+6rlPgYudGfQBIwEBClDfAGm09dDb4zo/G8mAutp+MrHwCVnnFvwj7453kOiPU9E7iLRwQ1vAFKR3gFg5M12K4xbbgU5dTezM9P1+V5ZLKjDOzyR5slwt1AsqPTyIQAiwx0+RHGfISl2Y/U9pWgXacoSpY9o9h8WUr5J343kTdYAbUT1lM07gYFbYBNVm+tS7RaY+XY+DG4sdi3+ICFOrDcSCtZWVUbHqRIuDFhyUQQqo5KJn5yKm2Q+29rEGfP0I4Ehk+NQSGZ6vTy/IMmWCNoiANSrGDifNQM1POQKFOXA1Lep4tVy2FSxM6FGqs4ERQR3ppwg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 193.8.40.94) smtp.rcpttodomain=lists.openembedded.org smtp.mailfrom=leica-geosystems.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=leica-geosystems.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=leica-geosystems.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6AAPL/Flr7AP83QOEtreHvKyrOM8SY1rjGOOe033gIc=; b=EMwEB7qS7bVLsE8ettzoxqXaHvSYz/+faVfhGGFjITn73kMO5sZ78REo+Bjm3Zf/UtEgAnV1VCBOJzcIHl+5Ma/SBY5CWj4++R12kpKGmhY+xOYF+uVGkLSGkOf4oqIdI796gRtdrH2MfCKOnAWleZlL+3iFrpMlKAixskmQ9dw= Received: from DBBPR09CA0007.eurprd09.prod.outlook.com (2603:10a6:10:c0::19) by AM8PR06MB7634.eurprd06.prod.outlook.com (2603:10a6:20b:317::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8835.29; Wed, 18 Jun 2025 14:35:11 +0000 Received: from DU2PEPF00028D10.eurprd03.prod.outlook.com (2603:10a6:10:c0:cafe::a0) by DBBPR09CA0007.outlook.office365.com (2603:10a6:10:c0::19) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8835.34 via Frontend Transport; Wed, 18 Jun 2025 14:35:11 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 193.8.40.94) smtp.mailfrom=leica-geosystems.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=leica-geosystems.com; Received-SPF: Pass (protection.outlook.com: domain of leica-geosystems.com designates 193.8.40.94 as permitted sender) receiver=protection.outlook.com; client-ip=193.8.40.94; helo=hexagon.com; pr=C Received: from hexagon.com (193.8.40.94) by DU2PEPF00028D10.mail.protection.outlook.com (10.167.242.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8857.21 via Frontend Transport; Wed, 18 Jun 2025 14:35:11 +0000 Received: from aherlnxbspsrv01.lgs-net.com ([10.60.34.116]) by hexagon.com with Microsoft SMTPSVC(10.0.17763.1697); Wed, 18 Jun 2025 16:35:07 +0200 From: Johannes Schneider Date: Wed, 18 Jun 2025 16:35:06 +0200 Subject: [PATCH meta-oe v3 3/6] signing.bbclass: add get_root_cert MIME-Version: 1.0 Message-Id: <20250618-signing-set-ca-v3-3-4ba014735f0e@leica-geosystems.com> References: <20250618-signing-set-ca-v3-0-4ba014735f0e@leica-geosystems.com> In-Reply-To: <20250618-signing-set-ca-v3-0-4ba014735f0e@leica-geosystems.com> To: openembedded-devel@lists.openembedded.org, raj.khem@gmail.com, jlu@pengutronix.de Cc: bsp-development.geo@leica-geosystems.com, Johannes Schneider X-Mailer: b4 0.14.2 X-OriginalArrivalTime: 18 Jun 2025 14:35:07.0529 (UTC) FILETIME=[300D5790:01DBE05E] X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DU2PEPF00028D10:EE_|AM8PR06MB7634:EE_ X-MS-Office365-Filtering-Correlation-Id: f1535934-d23f-4cd6-f6ad-08ddae7554bb X-SET-LOWER-SCL-SCANNER: YES X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|36860700013|82310400026|1800799024|376014; X-Microsoft-Antispam-Message-Info: =?utf-8?q?sQV6pYLhlDv6W2EhaIElHMNXeKOhwSj?= =?utf-8?q?m0XnMI+HXKL7SicR786kcl/U5dIg+z/mdenLah0sJ+3u8WpKWwbCjO1ANnStOe5f1?= =?utf-8?q?IquGMDEJA53Jj4q+cuP5jcN+TS/H6dB+1Ev80lAnSUZSa4lMIHc0kpgdhwBEcoAfr?= =?utf-8?q?FWGWSLTqIncmgakYBZ8lQ5bo/HQt9yza6SuIMFbqcXwgil3QJF+gxUWq2s+l4+okY?= =?utf-8?q?M3Dm4udbOBB9TmQDyntb/1bfUhFk81cGprdkeFQHRjKZH/zV4KZwXuk+3vWU5CURy?= =?utf-8?q?LMJzccZyD1LI8psS1rcJhIX6DvanLgfYaWzg03TYwNAg6FONF6i679/1/PQjv9uGU?= =?utf-8?q?uAXnUBCekYN+pIm1wHjDpmUFU0+PCkBX3q1fWIzqrf6mDbJ6fawoPWlEAeFh9FoGI?= =?utf-8?q?eeS+SnVxzLMHdmdDOzn05sIOtccItCQbZtYrULTcoj5H6WuAz2ncNZ7SQNGj1Wn9M?= =?utf-8?q?O+3mRzSVJKHtuBbSJl7OZ2wbnRdwUno6lFVQqwE1ZqwsgZilb0kZ4ntKtm850lUt9?= =?utf-8?q?NLo8jLepKvpiI4iPOuZuQsseBl/9A3lfPLNTzig84Siwa0Mwx3KfRrk2NDwZqzK0h?= =?utf-8?q?p8Ry8LaKs9bTWJMkrc4EG8hZgnQay2ruxFThnB4AYtFAa76bbhQMXV0xgJ2Rgcmk3?= =?utf-8?q?pNCEtfMcPLArqFLE8u+D+SBKp+okCG38uz6bmHEL4Ng2IEv0tuz9xZgfvgNi/ngZ5?= =?utf-8?q?9dfeWwsPbjONPDPt23W3Jzi2Wv/vWNuUj111Z+/O3jeWajoBk+h5GZVCdHGCS3124?= =?utf-8?q?HBKxnKQUMBtaqjf7HcwbBECEN7JQp/r4XY8egAMVdKoONbYR/lsiuc/YPc4WN2EZ0?= =?utf-8?q?M7UX+/VcyQn9leeLWH8SNHcRpRKxNNq+pOliyPPwNFUNnRfpcoSVgT2BOIMcM6269?= =?utf-8?q?aaSBWxvjBc+7ahPRUyYAMhfFIwYfOS1BHfRrD595VBOKtMchWBN/assw7yNG0B1cU?= =?utf-8?q?g1awfVVx/9mYsB/BhTMi3El3NAshqJPV2qTGG09yqQ+l+kpI07UHeN5d1d6EZM0Kk?= =?utf-8?q?5Qz6E+t3M6/5mLRQBbn1BkpBZT99l9chCkGmkgVLAuxAbN83unrPJTdJwZngzUg/d?= =?utf-8?q?N2V1NoBIUjVdo7nSFFrvG40RAxIpIsyE4yyVPRfT1lgCqQ+lZn8K3OSPBKQ+rNtPf?= =?utf-8?q?Mp3i+GsA3LHybIVFC6CDfbUzgwOjI0Z7Md33/23DYpeh7t+qDajCmbNLjrfbqcQhb?= =?utf-8?q?Giewlj/cIY2meot3yKB94q3sTvmlOUZKtJL95XchYltG2AroYXWIRC/uS/CtAT+QS?= =?utf-8?q?6rVSKlw2b9hDCKiiNksaQlm/dc9MfpmJPhEfndNkOaZB7YrWkKSheVIFctX43M6+Y?= =?utf-8?q?KiqebPcHXG7Dy9TL0u1txOBAA1gFR1L9YUIyYMWpNp5vijj08LWE+ILMNP2nFC3kj?= =?utf-8?q?JMbOF3RBHKJHOTjwGxiugH0BCmOz+WCCat6NECpGDq2Rk0zWiu6lovIbl/+l9P0d2?= =?utf-8?q?ayrVPm5nFX?= X-Forefront-Antispam-Report: CIP:193.8.40.94;CTRY:CH;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:hexagon.com;PTR:ahersrvdom50.leica-geosystems.com;CAT:NONE;SFS:(13230040)(36860700013)(82310400026)(1800799024)(376014);DIR:OUT;SFP:1101; X-OriginatorOrg: leica-geosystems.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Jun 2025 14:35:11.1855 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: f1535934-d23f-4cd6-f6ad-08ddae7554bb X-MS-Exchange-CrossTenant-Id: 1b16ab3e-b8f6-4fe3-9f3e-2db7fe549f6a X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=1b16ab3e-b8f6-4fe3-9f3e-2db7fe549f6a;Ip=[193.8.40.94];Helo=[hexagon.com] X-MS-Exchange-CrossTenant-AuthSource: DU2PEPF00028D10.eurprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM8PR06MB7634 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 18 Jun 2025 14:35:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/117940 Add a helper method to retrieve the root CA certificate for a given role, by walking the chain that has been setup with signing_import_set_ca up to the last element - which is the root. Reviewed-by: Jan Luebbe Signed-off-by: Johannes Schneider --- meta-oe/classes/signing.bbclass | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/meta-oe/classes/signing.bbclass b/meta-oe/classes/signing.bbclass index 04bd92bc033e8854eac245e399126554dbaa2fea..2a94f5f5b376f99f521494239f7158662df4a3c6 100644 --- a/meta-oe/classes/signing.bbclass +++ b/meta-oe/classes/signing.bbclass @@ -194,6 +194,22 @@ signing_has_ca() { return $? } +# signing_get_root_cert +# +# return the role/name of the CA root certificate for a given +# , by walking the chain setup with signing_import_set_ca +# all the way to the last in line that doesn't have a CA set - which +# would be the root. +# +# To be used with SoftHSM. +signing_get_root_cert() { + local cert_name="${1}" + while signing_has_ca "${cert_name}"; do + cert_name="$(signing_get_ca ${cert_name})" + done + echo "${cert_name}" +} + # signing_import_cert_chain_from_pem # # Import a certificate *chain* from a PEM file to a role.