From b044b52ab9553b8d94cfc5565d2ea5013364159d Mon Sep 17 00:00:00 2001 From: Felix Fietkau Date: Tue, 12 Feb 2019 16:37:30 +0100 Subject: [PATCH] base-files: fix ucert verification ucert needs to check the firmware part with metadata, but without the signature. Use the new fwtool mode to extract that without altering the firmware image inside the check Signed-off-by: Felix Fietkau --- package/base-files/files/lib/upgrade/fwtool.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/base-files/files/lib/upgrade/fwtool.sh b/package/base-files/files/lib/upgrade/fwtool.sh index 6d7300bad6..a0b3fb0a04 100644 --- a/package/base-files/files/lib/upgrade/fwtool.sh +++ b/package/base-files/files/lib/upgrade/fwtool.sh @@ -18,7 +18,8 @@ fwtool_check_signature() { return 0 fi - ucert -V -m "$1" -c "/tmp/sysupgrade.ucert" -P /etc/opkg/keys + fwtool -q -T -s /dev/null "$1" | \ + ucert -V -m - -c "/tmp/sysupgrade.ucert" -P /etc/opkg/keys return $? } -- 2.25.1