KumiSystems/openwrtv4
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
No description
36464 commits 3 branches 0 tags 154 MiB
Find a file
Hannu Nyman 9097dc5ad8 uhttpd: create self-signed certificates with unique subjects 
Add a partially random O= item to the certificate subject in order
to make the automatically generated certificates' subjects unique.

Firefox has problems when several self-signed certificates
with CA:true attribute and identical subjects have been
seen (and stored) by the browser. Reference to upstream bugs:
https://bugzilla.mozilla.org/show_bug.cgi?id=1147544
https://bugzilla.mozilla.org/show_bug.cgi?id=1056341
https://bugzilla.redhat.com/show_bug.cgi?id=1204670#c34

Certificates created by the OpenSSL one-liner fall into that category.

Avoid identical certificate subjects by including a new 'O=' item
with CommonName + a random part (8 chars). Example:
/CN=LEDE/O=LEDEb986be0b/L=Unknown/ST=Somewhere/C=ZZ

That ensures that the browser properly sees the accumulating
certificates as separate items and does not spend time
trying to form a trust chain from them.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2016-10-26 15:16:52 +02:00
.github Add Issue submission template (redirect to bugs.lede-project.org) 2016-09-01 09:01:04 -04:00
config config: enable shadow passwords unconditionally 2016-09-26 17:57:56 +02:00
docs build: Prevent more gzip timestamps 2015-07-14 09:57:45 +00:00
include kernel: update kernel 3.18 to version 3.18.43 2016-10-24 20:25:14 +03:00
package uhttpd: create self-signed certificates with unique subjects 2016-10-26 15:16:52 +02:00
scripts scripts/freebsd.sh: Remove script 2016-10-15 11:36:53 +02:00
target ar71xx: Ignore firmware building errors of UBNT and CyberTAN devices 2016-10-26 14:07:20 +02:00
toolchain toolchain/gdb: update to version 7.12 2016-10-24 08:45:06 +02:00
tools ar71xx: Add support to TP-Link EAP120 2016-10-18 09:18:55 +02:00
.gitattributes add .gitattributes to prevent the git autocrlf option from messing with CRLF/LF in files 2012-05-08 13:30:49 +00:00
.gitignore build: add integration for managing opkg package feed keys 2015-04-06 19:39:51 +00:00
BSDmakefile add missing copyright header 2007-02-26 01:05:09 +00:00
Config.in branding: add LEDE branding 2016-03-24 22:40:13 +01:00
feeds.conf.default feeds: switch from github to lede-project.org mirrors 2016-08-01 22:34:18 +02:00
LICENSE finally move buildroot-ng to trunk 2016-03-20 17:29:15 +01:00
Makefile build: move merged package directory from bin/ to staging_dir 2016-08-03 12:22:18 +02:00
README README: Update project README 2016-05-12 03:29:36 +02:00
rules.mk build: add checksum target 2016-08-01 18:11:21 +02:00

README 

This is the buildsystem for the LEDE Linux distribution.

Please use "make menuconfig" to choose your preferred
configuration for the toolchain and firmware.

You need to have installed gcc, binutils, bzip2, flex, python, perl, make,
find, grep, diff, unzip, gawk, getopt, subversion, libz-dev and libc headers.

Run "./scripts/feeds update -a" to get all the latest package definitions
defined in feeds.conf / feeds.conf.default respectively
and "./scripts/feeds install -a" to install symlinks of all of them into
package/feeds/.

Use "make menuconfig" to configure your image.

Simply running "make" will build your firmware.
It will download all sources, build the cross-compile toolchain, 
the kernel and all choosen applications.

To build your own firmware you need to have access to a Linux, BSD or MacOSX system
(case-sensitive filesystem required). Cygwin will not be supported because of
the lack of case sensitiveness in the file system.


Sunshine!
	Your LEDE Community
	http://www.lede-project.org