openwebos/meta-webos — pull request #51 by morphis (2013-01-08 18:00:32+00:00)
Title: Implement certificate handling

You may have followed the certificate management discussion on the openwebos-general mailinglist. It turned out that Open webOS misses the needed certificates to connect to various services over a secure connection. For reference please take a look at [0], [1] and [2].

The commits attached to this PR implements certificate handling inside meta-webos based on the ca-certificates recipe in meta-oe (see [3]) which itself is based on the ca-certificates package from Debian.

The first commit installs a proper openssl configuration needed by pmcertificatemgr. I attached the configuration to the pmcertificatemgr and not the openssl recipe as it's specific to pmcertificatemgr and not to openssl. Further more openssl needs to be changed to install the needed c_rehash utility. Finally I implemented a simple upstart job to populate the certificate store.

Please take this PR as proposal as it depends on the use of the real meta-oe which isn't currently used by the upstream Open webOS system and the changes are currently in testing phase.

regards,
Simon

[0] http://mailman.openwebosproject.org/pipermail/openwebos-general/2013-January/000167.html
[1] http://mailman.openwebosproject.org/pipermail/openwebos-general/2012-December/000166.html
[2] http://mailman.openwebosproject.org/pipermail/openwebos-general/2012-December/000162.html
[3] http://cgit.openembedded.org/meta-openembedded/tree/meta-oe/recipes-support/ca-certificates/ca-certificates_20120623.bb