platform/core/security/ca-certificates.git
6 years agoRemove old update script 56/149656/3
Sunmin Lee [Tue, 5 Sep 2017 07:42:50 +0000 (16:42 +0900)]
Remove old update script

RW update script for Tizen 2.4 (to 3.0) is not necessary.
There is no big change between 3.0 and 4.0. So no migration script is required.

Change-Id: I8febbb73df31c31bb7ee1662224ab8fb0eb03b6b
(cherry picked from commit a2f804cb30d7c50457d94ab7c0d4c3aaf64d05aa)

6 years agoFix upgrade script number 92/136592/2 accepted/tizen/4.0/unified/20170816.013642 accepted/tizen/4.0/unified/20170829.020605 accepted/tizen/unified/20170705.163016 submit/tizen/20170704.073704 submit/tizen/20170705.025248 submit/tizen_4.0/20170811.094300 submit/tizen_4.0/20170828.100004 submit/tizen_4.0/20170828.110004
sangwan.kwon [Fri, 30 Jun 2017 08:15:24 +0000 (17:15 +0900)]
Fix upgrade script number

* Accordig to OS upgrade team's guide, these scripts would be run as 241, 242.

Change-Id: I98910774e82a0029a58248a4caa85bd504a2b7a5
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
(cherry picked from commit 0856f8f4506c2f0c2a0465b6709b5b253db095eb)

6 years agoRefine upgrade script for support previous versions 76/135576/1
sangwan.kwon [Thu, 22 Jun 2017 07:00:32 +0000 (16:00 +0900)]
Refine upgrade script for support previous versions

* Support both platform and product Tizen 2.4

Change-Id: Ifc0d340dcfc5eb506c0e7e061cb9929b22ae61bd
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
(cherry picked from commit 071e0d121d6958b7dc3e7570970b5acd7e9ad0ca)

7 years agoAdd number to upgrade scripts 44/102244/2
sangwan.kwon [Mon, 5 Dec 2016 08:30:58 +0000 (17:30 +0900)]
Add number to upgrade scripts

Change-Id: I73b0d4b5bf40abcc3f0b9623f1809d5907b82c06
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoUpgrade: do not make symlink during upgrade 63/101463/1 accepted/tizen_common accepted/tizen_ivi accepted/tizen_mobile accepted/tizen_tv accepted/tizen_wearable accepted/tizen/common/20161202.233426 accepted/tizen/ivi/20161205.001001 accepted/tizen/mobile/20161205.000830 accepted/tizen/tv/20161205.000900 accepted/tizen/unified/20170309.033344 accepted/tizen/wearable/20161205.000933 submit/tizen/20161202.090212 submit/tizen_unified/20170308.100408 tizen_4.0.m1_release
Sunmin Lee [Wed, 30 Nov 2016 05:35:32 +0000 (14:35 +0900)]
Upgrade: do not make symlink during upgrade

RO partition cannot be modified during upgrade process.
The change of RO partition should be included in RO image itself.

Change-Id: Ieae6aff145e749b17c0170336203d26d423039f2
(cherry picked from commit 4efb3bf24a2a26b35422d796eaaefc1dbdbc2ef1)

7 years agoUpgrade version to 0.0.4 49/97849/1
sangwan.kwon [Tue, 15 Nov 2016 06:40:42 +0000 (15:40 +0900)]
Upgrade version to 0.0.4

* changes : Remove expired ssl certificates

Change-Id: Icf812811efe74ecf6541e5599ec0318304929f73
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoRemove expired ssl certificates 26/97826/1
sangwan.kwon [Tue, 15 Nov 2016 05:42:53 +0000 (14:42 +0900)]
Remove expired ssl certificates

* deleted: certs/039c618a.0
* deleted: certs/1bc668cc.0
* deleted: certs/20533f91.0
* deleted: certs/3b2716e5.0
* deleted: certs/476182b1.0
* deleted: certs/6a680ea5.0
* deleted: certs/72de6920.0
* deleted: certs/73881aed.0
* deleted: certs/804c2a3a.0
* deleted: certs/84009bc3.0
* deleted: certs/88f89ea7.0
* deleted: certs/8f111d69.0
* deleted: certs/94010abc.0
* deleted: certs/9c472bf7.0
* deleted: certs/b42ff584.0
* deleted: certs/b6c5745d.0
* deleted: certs/c75dd286.0
* deleted: certs/c75dd286.1
* deleted: certs/c75dd286.2
* deleted: certs/cc154c6e.0
* deleted: certs/ce486240.0
* deleted: certs/cee8e824.0
* deleted: certs/cfa1c2ee.0
* deleted: certs/eeaa6d5c.0
* deleted: certs/fcac10e3.0

Change-Id: Ide5268f5a35ce264c8b25ac78eee8cc2a186b80b
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdd check ceritifcate-expiration-date script 87/97787/1
sangwan.kwon [Tue, 15 Nov 2016 04:55:50 +0000 (13:55 +0900)]
Add check ceritifcate-expiration-date script

[e.g.] $./check-expired-certs.sh ../certs/ 2016-12-31

Change-Id: I0fd9e143bed65edd5e9a9b044c008853bd8befd3
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdd absolute bin path on script 92/86592/1 accepted/tizen/3.0/common/20161114.105906 accepted/tizen/3.0/ivi/20161011.053542 accepted/tizen/3.0/mobile/20161015.032445 accepted/tizen/3.0/tv/20161016.003601 accepted/tizen/3.0/wearable/20161015.080400 accepted/tizen/common/20160912.181819 accepted/tizen/ivi/20160913.042117 accepted/tizen/mobile/20160913.042020 accepted/tizen/tv/20160913.042036 accepted/tizen/wearable/20160913.042102 submit/tizen/20160912.023936 submit/tizen/20160912.100526 submit/tizen_3.0_common/20161104.104000 submit/tizen_3.0_ivi/20161010.000000 submit/tizen_3.0_ivi/20161010.000010 submit/tizen_3.0_mobile/20161015.000000 submit/tizen_3.0_tv/20161015.000000 submit/tizen_3.0_wearable/20161015.000000
sangwan.kwon [Fri, 2 Sep 2016 04:29:32 +0000 (13:29 +0900)]
Add absolute bin path on script

Change-Id: I089f679099f214a722e3eef4a0a444945cbe71eb
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoRestore certificates permission on RW area 72/86272/3 accepted/tizen/common/20160901.143418 accepted/tizen/ivi/20160901.065524 accepted/tizen/mobile/20160901.065439 accepted/tizen/tv/20160901.065445 accepted/tizen/wearable/20160901.065506 submit/tizen/20160901.024233
sangwan.kwon [Wed, 31 Aug 2016 09:14:09 +0000 (18:14 +0900)]
Restore certificates permission on RW area

* cert-svc needs same DAC to read certificates on RW.
* TZ_SYS_CA_CERTS should have read permission for others.

Change-Id: I4eecba97817b3853b48f432f1da4a850a8ac6a17
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoUpgrade version to 0.0.3 28/85728/1 accepted/tizen/common/20160829.135723 accepted/tizen/ivi/20160830.060819 accepted/tizen/mobile/20160830.060700 accepted/tizen/tv/20160830.060727 accepted/tizen/wearable/20160830.060751 submit/tizen/20160829.005907
sangwan.kwon [Mon, 29 Aug 2016 01:19:54 +0000 (10:19 +0900)]
Upgrade version to 0.0.3

* It supports platform upgrade (Tizen 2.4 -> 3.0)

Change-Id: Id18c847c61cec3ee1be76a7327d75274be0f8535
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdd platform upgrade script on ca-bundle 49/85649/4
sangwan.kwon [Fri, 26 Aug 2016 05:55:38 +0000 (14:55 +0900)]
Add platform upgrade script on ca-bundle

* About Tizen 2.4 -> 3.0

Change-Id: Ib6833fe51c57da4b647ef810466a9f9517c374ee
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdjust permission about TZ_SYS_CA_CERTS 00/85600/2
sangwan.kwon [Fri, 26 Aug 2016 05:09:42 +0000 (14:09 +0900)]
Adjust permission about TZ_SYS_CA_CERTS

[AS-IS]
* Whole certs on RW area have smack label(System::Shared), 775 mode.

[TO-BE]
* Only ceritificates rw dir have smack label and 770 mode
* since security_fw group should have permission about ADD, DEL.
* Each certificates's(symlink) permission doesn't matter.

Change-Id: Ic794d1eb2ae6850de47f5f7a8834c30270aea43d
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoMove concat-cacerts script to scripts 93/85593/1
sangwan.kwon [Fri, 26 Aug 2016 04:45:24 +0000 (13:45 +0900)]
Move concat-cacerts script to scripts

Change-Id: Ic9f6dd0519225aabfe31b7dd5880518c9f759514
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdd platform upgrade script on certificates 94/85394/5
sangwan.kwon [Thu, 25 Aug 2016 02:28:34 +0000 (11:28 +0900)]
Add platform upgrade script on certificates

* About Tizen 2.4 -> 3.0

Change-Id: Ifc17b11a633beef01d1e1ff2962bca37797c1c8f
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdd gitignore file 05/85205/1
sangwan.kwon [Wed, 24 Aug 2016 07:05:08 +0000 (16:05 +0900)]
Add gitignore file

Change-Id: I5e8d67d67ef5fb27445fba37f74caf0f5ad7027a
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoSort the certificates on making bundle file 68/84668/3 accepted/tizen/common/20160822.132551 accepted/tizen/ivi/20160823.041027 accepted/tizen/mobile/20160823.040922 accepted/tizen/tv/20160823.040944 accepted/tizen/wearable/20160823.041007 submit/tizen/20160822.023804
sangwan.kwon [Mon, 22 Aug 2016 02:22:46 +0000 (11:22 +0900)]
Sort the certificates on making bundle file

[Problem]
 'find' will be traversing the directory tree in the order
items are stored within the directory entries.
 However, some file systems will re-order directory entries
as part of compaction operations or when the size of the entry
needs to be expanded

[Solution]
 Feed the output through an extra sorting stage.

Change-Id: I4c896caea30a26e808cc64d8bab88202c1871179

8 years agochange a user from system to security_fw 13/65913/2 accepted/tizen/common/20160419.143217 accepted/tizen/ivi/20160419.050210 accepted/tizen/mobile/20160419.050143 accepted/tizen/tv/20160419.050201 accepted/tizen/wearable/20160419.050149 submit/tizen/20160418.074154 submit/tizen/20160419.001713
Dongsun Lee [Thu, 14 Apr 2016 02:56:47 +0000 (11:56 +0900)]
change a user from system to security_fw

Change-Id: Ib3a58c8b6ed86a3c6b009d9cdbcae69807d3094f
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>
8 years agoUpgrade version to 0.0.2 05/62205/1 accepted/tizen/common/20160315.221551 accepted/tizen/ivi/20160315.121439 accepted/tizen/mobile/20160315.121331 accepted/tizen/tv/20160315.121347 accepted/tizen/wearable/20160315.121411 submit/tizen/20160315.043906 submit/updateStructure/20160315.043303
sangwan.kwon [Tue, 15 Mar 2016 01:47:24 +0000 (10:47 +0900)]
Upgrade version to 0.0.2

Change-Id: I46e1ffba66212253aef31978e3b33fc5bfd836a5
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoUpdate Tizen 3.0 CA certs hierarchy 44/61944/5
sangwan.kwon [Fri, 11 Mar 2016 09:11:26 +0000 (18:11 +0900)]
Update Tizen 3.0 CA certs hierarchy

* RO area : TZ_SYS_RO_CA_CERTS_ORIG, TZ_SYS_RO_CA_CERTS,
            TZ_SYS_RO_CA_BUNDLE
* RW area : TZ_SYS_CA_CERTS, TZ_SYS_CA_BUNDLE

Change-Id: Iac25e00c4d2020c5b9cbc9d46dffcc13b48fd12c
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoFix the macro commonly 19/61019/3 accepted/tizen/common/20160314.065525 accepted/tizen/ivi/20160310.052641 accepted/tizen/mobile/20160310.052537 accepted/tizen/tv/20160310.052559 accepted/tizen/wearable/20160310.052615 submit/tizen/20160229.000000 submit/tizen/20160305.131859 submit/tizen_common/20160311.185532
sangwan.kwon [Thu, 3 Mar 2016 08:58:17 +0000 (17:58 +0900)]
Fix the macro commonly

Change-Id: I1cf6f7cc0ff90022b2eb5081cbc32c21bf1b14dd
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoUpdate tizen directory structure 93/60793/2
sangwan.kwon [Wed, 2 Mar 2016 08:40:09 +0000 (17:40 +0900)]
Update tizen directory structure

* TZ_SYS_SHARE -> TZ_SYS_RO_SHARE
* TZ_SYS_ETC   -> TZ_SYS_RO_ETC

Change-Id: Ifc8bea2166711c97ae5faff1e8664e363528689e
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoRequires filesystem to be installed after 02/56202/1 accepted/tizen/ivi/20160218.023935 accepted/tizen/mobile/20160106.003450 accepted/tizen/tv/20160106.003326 accepted/tizen/wearable/20160106.003417 submit/tizen/20160105.092109 submit/tizen_common/20160218.142243 submit/tizen_ivi/20160217.000000 submit/tizen_ivi/20160217.000003
Kyungwook Tak [Tue, 5 Jan 2016 08:05:42 +0000 (17:05 +0900)]
Requires filesystem to be installed after

Change-Id: I7cc8ec9a7ca624097709655e865d0b5b0cdc738d
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
8 years agoDeclare buildarch as noarch 01/56201/1
Kyungwook Tak [Tue, 5 Jan 2016 08:04:46 +0000 (17:04 +0900)]
Declare buildarch as noarch

Change-Id: Ib0f5143730d3328da3e96044418d3e318cafdf3b
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
8 years agoAdd CA certs resource 98/56098/1 accepted/tizen/mobile/20160105.044215 accepted/tizen/tv/20160105.044234 accepted/tizen/wearable/20160105.044305 submit/tizen/20160105.005520
sangwan.kwon [Mon, 4 Jan 2016 08:56:11 +0000 (17:56 +0900)]
Add CA certs resource

Change-Id: Ice2438195fd23ffd0990de54c674e233c82c4120
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoRelease initial root CA certs resource 97/55597/9 accepted/tizen/mobile/20160104.054359 accepted/tizen/tv/20160104.054422 accepted/tizen/wearable/20160104.054441 submit/tizen/20160104.015024
sangwan.kwon [Mon, 28 Dec 2015 05:50:36 +0000 (14:50 +0900)]
Release initial root CA certs resource

Change-Id: I7accfa1efd3af6ceedd45b3ce7c20c9dd6c8b734
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoInitial empty repository master
Jinkun Jang [Mon, 28 Dec 2015 01:07:12 +0000 (17:07 -0800)]
Initial empty repository