platform/core/security/ca-certificates.git
7 years agoUpgrade: do not make symlink during upgrade 63/101463/1 accepted/tizen_common accepted/tizen_ivi accepted/tizen_mobile accepted/tizen_tv accepted/tizen_wearable accepted/tizen/common/20161202.233426 accepted/tizen/ivi/20161205.001001 accepted/tizen/mobile/20161205.000830 accepted/tizen/tv/20161205.000900 accepted/tizen/unified/20170309.033344 accepted/tizen/wearable/20161205.000933 submit/tizen/20161202.090212 submit/tizen_unified/20170308.100408 tizen_4.0.m1_release
Sunmin Lee [Wed, 30 Nov 2016 05:35:32 +0000 (14:35 +0900)]
Upgrade: do not make symlink during upgrade

RO partition cannot be modified during upgrade process.
The change of RO partition should be included in RO image itself.

Change-Id: Ieae6aff145e749b17c0170336203d26d423039f2
(cherry picked from commit 4efb3bf24a2a26b35422d796eaaefc1dbdbc2ef1)

7 years agoUpgrade version to 0.0.4 49/97849/1
sangwan.kwon [Tue, 15 Nov 2016 06:40:42 +0000 (15:40 +0900)]
Upgrade version to 0.0.4

* changes : Remove expired ssl certificates

Change-Id: Icf812811efe74ecf6541e5599ec0318304929f73
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoRemove expired ssl certificates 26/97826/1
sangwan.kwon [Tue, 15 Nov 2016 05:42:53 +0000 (14:42 +0900)]
Remove expired ssl certificates

* deleted: certs/039c618a.0
* deleted: certs/1bc668cc.0
* deleted: certs/20533f91.0
* deleted: certs/3b2716e5.0
* deleted: certs/476182b1.0
* deleted: certs/6a680ea5.0
* deleted: certs/72de6920.0
* deleted: certs/73881aed.0
* deleted: certs/804c2a3a.0
* deleted: certs/84009bc3.0
* deleted: certs/88f89ea7.0
* deleted: certs/8f111d69.0
* deleted: certs/94010abc.0
* deleted: certs/9c472bf7.0
* deleted: certs/b42ff584.0
* deleted: certs/b6c5745d.0
* deleted: certs/c75dd286.0
* deleted: certs/c75dd286.1
* deleted: certs/c75dd286.2
* deleted: certs/cc154c6e.0
* deleted: certs/ce486240.0
* deleted: certs/cee8e824.0
* deleted: certs/cfa1c2ee.0
* deleted: certs/eeaa6d5c.0
* deleted: certs/fcac10e3.0

Change-Id: Ide5268f5a35ce264c8b25ac78eee8cc2a186b80b
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdd check ceritifcate-expiration-date script 87/97787/1
sangwan.kwon [Tue, 15 Nov 2016 04:55:50 +0000 (13:55 +0900)]
Add check ceritifcate-expiration-date script

[e.g.] $./check-expired-certs.sh ../certs/ 2016-12-31

Change-Id: I0fd9e143bed65edd5e9a9b044c008853bd8befd3
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdd absolute bin path on script 92/86592/1 accepted/tizen/3.0/common/20161114.105906 accepted/tizen/3.0/ivi/20161011.053542 accepted/tizen/3.0/mobile/20161015.032445 accepted/tizen/3.0/tv/20161016.003601 accepted/tizen/3.0/wearable/20161015.080400 accepted/tizen/common/20160912.181819 accepted/tizen/ivi/20160913.042117 accepted/tizen/mobile/20160913.042020 accepted/tizen/tv/20160913.042036 accepted/tizen/wearable/20160913.042102 submit/tizen/20160912.023936 submit/tizen/20160912.100526 submit/tizen_3.0_common/20161104.104000 submit/tizen_3.0_ivi/20161010.000000 submit/tizen_3.0_ivi/20161010.000010 submit/tizen_3.0_mobile/20161015.000000 submit/tizen_3.0_tv/20161015.000000 submit/tizen_3.0_wearable/20161015.000000
sangwan.kwon [Fri, 2 Sep 2016 04:29:32 +0000 (13:29 +0900)]
Add absolute bin path on script

Change-Id: I089f679099f214a722e3eef4a0a444945cbe71eb
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoRestore certificates permission on RW area 72/86272/3 accepted/tizen/common/20160901.143418 accepted/tizen/ivi/20160901.065524 accepted/tizen/mobile/20160901.065439 accepted/tizen/tv/20160901.065445 accepted/tizen/wearable/20160901.065506 submit/tizen/20160901.024233
sangwan.kwon [Wed, 31 Aug 2016 09:14:09 +0000 (18:14 +0900)]
Restore certificates permission on RW area

* cert-svc needs same DAC to read certificates on RW.
* TZ_SYS_CA_CERTS should have read permission for others.

Change-Id: I4eecba97817b3853b48f432f1da4a850a8ac6a17
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoUpgrade version to 0.0.3 28/85728/1 accepted/tizen/common/20160829.135723 accepted/tizen/ivi/20160830.060819 accepted/tizen/mobile/20160830.060700 accepted/tizen/tv/20160830.060727 accepted/tizen/wearable/20160830.060751 submit/tizen/20160829.005907
sangwan.kwon [Mon, 29 Aug 2016 01:19:54 +0000 (10:19 +0900)]
Upgrade version to 0.0.3

* It supports platform upgrade (Tizen 2.4 -> 3.0)

Change-Id: Id18c847c61cec3ee1be76a7327d75274be0f8535
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdd platform upgrade script on ca-bundle 49/85649/4
sangwan.kwon [Fri, 26 Aug 2016 05:55:38 +0000 (14:55 +0900)]
Add platform upgrade script on ca-bundle

* About Tizen 2.4 -> 3.0

Change-Id: Ib6833fe51c57da4b647ef810466a9f9517c374ee
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdjust permission about TZ_SYS_CA_CERTS 00/85600/2
sangwan.kwon [Fri, 26 Aug 2016 05:09:42 +0000 (14:09 +0900)]
Adjust permission about TZ_SYS_CA_CERTS

[AS-IS]
* Whole certs on RW area have smack label(System::Shared), 775 mode.

[TO-BE]
* Only ceritificates rw dir have smack label and 770 mode
* since security_fw group should have permission about ADD, DEL.
* Each certificates's(symlink) permission doesn't matter.

Change-Id: Ic794d1eb2ae6850de47f5f7a8834c30270aea43d
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoMove concat-cacerts script to scripts 93/85593/1
sangwan.kwon [Fri, 26 Aug 2016 04:45:24 +0000 (13:45 +0900)]
Move concat-cacerts script to scripts

Change-Id: Ic9f6dd0519225aabfe31b7dd5880518c9f759514
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdd platform upgrade script on certificates 94/85394/5
sangwan.kwon [Thu, 25 Aug 2016 02:28:34 +0000 (11:28 +0900)]
Add platform upgrade script on certificates

* About Tizen 2.4 -> 3.0

Change-Id: Ifc17b11a633beef01d1e1ff2962bca37797c1c8f
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoAdd gitignore file 05/85205/1
sangwan.kwon [Wed, 24 Aug 2016 07:05:08 +0000 (16:05 +0900)]
Add gitignore file

Change-Id: I5e8d67d67ef5fb27445fba37f74caf0f5ad7027a
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
7 years agoSort the certificates on making bundle file 68/84668/3 accepted/tizen/common/20160822.132551 accepted/tizen/ivi/20160823.041027 accepted/tizen/mobile/20160823.040922 accepted/tizen/tv/20160823.040944 accepted/tizen/wearable/20160823.041007 submit/tizen/20160822.023804
sangwan.kwon [Mon, 22 Aug 2016 02:22:46 +0000 (11:22 +0900)]
Sort the certificates on making bundle file

[Problem]
 'find' will be traversing the directory tree in the order
items are stored within the directory entries.
 However, some file systems will re-order directory entries
as part of compaction operations or when the size of the entry
needs to be expanded

[Solution]
 Feed the output through an extra sorting stage.

Change-Id: I4c896caea30a26e808cc64d8bab88202c1871179

8 years agochange a user from system to security_fw 13/65913/2 accepted/tizen/common/20160419.143217 accepted/tizen/ivi/20160419.050210 accepted/tizen/mobile/20160419.050143 accepted/tizen/tv/20160419.050201 accepted/tizen/wearable/20160419.050149 submit/tizen/20160418.074154 submit/tizen/20160419.001713
Dongsun Lee [Thu, 14 Apr 2016 02:56:47 +0000 (11:56 +0900)]
change a user from system to security_fw

Change-Id: Ib3a58c8b6ed86a3c6b009d9cdbcae69807d3094f
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>
8 years agoUpgrade version to 0.0.2 05/62205/1 accepted/tizen/common/20160315.221551 accepted/tizen/ivi/20160315.121439 accepted/tizen/mobile/20160315.121331 accepted/tizen/tv/20160315.121347 accepted/tizen/wearable/20160315.121411 submit/tizen/20160315.043906 submit/updateStructure/20160315.043303
sangwan.kwon [Tue, 15 Mar 2016 01:47:24 +0000 (10:47 +0900)]
Upgrade version to 0.0.2

Change-Id: I46e1ffba66212253aef31978e3b33fc5bfd836a5
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoUpdate Tizen 3.0 CA certs hierarchy 44/61944/5
sangwan.kwon [Fri, 11 Mar 2016 09:11:26 +0000 (18:11 +0900)]
Update Tizen 3.0 CA certs hierarchy

* RO area : TZ_SYS_RO_CA_CERTS_ORIG, TZ_SYS_RO_CA_CERTS,
            TZ_SYS_RO_CA_BUNDLE
* RW area : TZ_SYS_CA_CERTS, TZ_SYS_CA_BUNDLE

Change-Id: Iac25e00c4d2020c5b9cbc9d46dffcc13b48fd12c
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoFix the macro commonly 19/61019/3 accepted/tizen/common/20160314.065525 accepted/tizen/ivi/20160310.052641 accepted/tizen/mobile/20160310.052537 accepted/tizen/tv/20160310.052559 accepted/tizen/wearable/20160310.052615 submit/tizen/20160229.000000 submit/tizen/20160305.131859 submit/tizen_common/20160311.185532
sangwan.kwon [Thu, 3 Mar 2016 08:58:17 +0000 (17:58 +0900)]
Fix the macro commonly

Change-Id: I1cf6f7cc0ff90022b2eb5081cbc32c21bf1b14dd
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoUpdate tizen directory structure 93/60793/2
sangwan.kwon [Wed, 2 Mar 2016 08:40:09 +0000 (17:40 +0900)]
Update tizen directory structure

* TZ_SYS_SHARE -> TZ_SYS_RO_SHARE
* TZ_SYS_ETC   -> TZ_SYS_RO_ETC

Change-Id: Ifc8bea2166711c97ae5faff1e8664e363528689e
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoRequires filesystem to be installed after 02/56202/1 accepted/tizen/ivi/20160218.023935 accepted/tizen/mobile/20160106.003450 accepted/tizen/tv/20160106.003326 accepted/tizen/wearable/20160106.003417 submit/tizen/20160105.092109 submit/tizen_common/20160218.142243 submit/tizen_ivi/20160217.000000 submit/tizen_ivi/20160217.000003
Kyungwook Tak [Tue, 5 Jan 2016 08:05:42 +0000 (17:05 +0900)]
Requires filesystem to be installed after

Change-Id: I7cc8ec9a7ca624097709655e865d0b5b0cdc738d
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
8 years agoDeclare buildarch as noarch 01/56201/1
Kyungwook Tak [Tue, 5 Jan 2016 08:04:46 +0000 (17:04 +0900)]
Declare buildarch as noarch

Change-Id: Ib0f5143730d3328da3e96044418d3e318cafdf3b
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
8 years agoAdd CA certs resource 98/56098/1 accepted/tizen/mobile/20160105.044215 accepted/tizen/tv/20160105.044234 accepted/tizen/wearable/20160105.044305 submit/tizen/20160105.005520
sangwan.kwon [Mon, 4 Jan 2016 08:56:11 +0000 (17:56 +0900)]
Add CA certs resource

Change-Id: Ice2438195fd23ffd0990de54c674e233c82c4120
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoRelease initial root CA certs resource 97/55597/9 accepted/tizen/mobile/20160104.054359 accepted/tizen/tv/20160104.054422 accepted/tizen/wearable/20160104.054441 submit/tizen/20160104.015024
sangwan.kwon [Mon, 28 Dec 2015 05:50:36 +0000 (14:50 +0900)]
Release initial root CA certs resource

Change-Id: I7accfa1efd3af6ceedd45b3ce7c20c9dd6c8b734
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
8 years agoInitial empty repository master
Jinkun Jang [Mon, 28 Dec 2015 01:07:12 +0000 (17:07 -0800)]
Initial empty repository