From: Joshua Lock via Openembedded-core Date: Fri, 26 Jul 2019 11:26:49 +0000 (+0000) Subject: classes/sstate: don't use unsigned sstate when verification enabled X-Git-Tag: uninative-2.7~657 X-Git-Url: https://code.ossystems.io/gitweb?a=commitdiff_plain;h=571235978d98552e3734bf382454dd51272db782;p=openembedded-core.git classes/sstate: don't use unsigned sstate when verification enabled When signature verification of shared state objects is enabled (SSTATE_VERIFY_SIG) use of an unsigned object, even though it produces a warning, seems unexpected. Instead skip unsigned objects and force the non-accelerated task to be run. Signed-off-by: Joshua Lock Signed-off-by: Richard Purdie --- diff --git a/meta/classes/sstate.bbclass b/meta/classes/sstate.bbclass index d8fdcece6a..3342c5ef50 100644 --- a/meta/classes/sstate.bbclass +++ b/meta/classes/sstate.bbclass @@ -340,7 +340,8 @@ def sstate_installpkg(ss, d): if bb.utils.to_boolean(d.getVar("SSTATE_VERIFY_SIG"), False): signer = get_signer(d, 'local') if not signer.verify(sstatepkg + '.sig'): - bb.warn("Cannot verify signature on sstate package %s" % sstatepkg) + bb.warn("Cannot verify signature on sstate package %s, skipping acceleration..." % sstatepkg) + return False # Empty sstateinst directory, ensure its clean if os.path.exists(sstateinst):