From b044b52ab9553b8d94cfc5565d2ea5013364159d Mon Sep 17 00:00:00 2001 From: Felix Fietkau Date: Tue, 12 Feb 2019 16:37:30 +0100 Subject: [PATCH] base-files: fix ucert verification ucert needs to check the firmware part with metadata, but without the signature. Use the new fwtool mode to extract that without altering the firmware image inside the check Signed-off-by: Felix Fietkau --- package/base-files/files/lib/upgrade/fwtool.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/base-files/files/lib/upgrade/fwtool.sh b/package/base-files/files/lib/upgrade/fwtool.sh index 6d7300bad63..a0b3fb0a048 100644 --- a/package/base-files/files/lib/upgrade/fwtool.sh +++ b/package/base-files/files/lib/upgrade/fwtool.sh @@ -18,7 +18,8 @@ fwtool_check_signature() { return 0 fi - ucert -V -m "$1" -c "/tmp/sysupgrade.ucert" -P /etc/opkg/keys + fwtool -q -T -s /dev/null "$1" | \ + ucert -V -m - -c "/tmp/sysupgrade.ucert" -P /etc/opkg/keys return $? } -- 2.30.2