53 lines
1.3 KiB
Bash
53 lines
1.3 KiB
Bash
|
#!/bin/bash -e
|
||
|
|
|
||
|
|
BASEPATH=~/firmware
|
||
|
|
|
||
|
|
cat <<EOF
|
||
|
|
This script is intended to make signing stable firmwares easier.
|
||
|
|
It will ask you which firmware you want to sign and will ask you for your private key.
|
||
|
|
|
||
|
|
EOF
|
||
|
|
|
||
|
|
cd $BASEPATH
|
||
|
|
firmware=(v*/)
|
||
|
|
echo Available firmware versions in $(pwd):
|
||
|
|
for i in ${!firmware[*]}; do
|
||
|
|
echo $i. ${firmware[$i]}
|
||
|
|
done
|
||
|
|
read -p 'Enter the number of the firmware you wish to sign: ' fw
|
||
|
|
firmware=${firmware[$fw]}
|
||
|
|
echo Selected firmware: ${firmware}
|
||
|
|
|
||
|
|
echo
|
||
|
|
echo Manifests to be signed:
|
||
|
|
for betastable in beta stable; do
|
||
|
|
m=${BASEPATH}/${firmware}/stable/images/sysupgrade/${betastable}.manifest
|
||
|
|
echo "####### Manifest: ${m}"
|
||
|
|
if ! head -3 $m; then
|
||
|
|
echo ERROR: no beta.manifest, try update_manifests.sh first.
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
|
||
|
|
echo
|
||
|
|
echo Press enter if you want to sign the manifests listed above. To abort, hit Ctrl+C.
|
||
|
|
read -r confirm
|
||
|
|
|
||
|
|
echo
|
||
|
|
echo Starting the signature process.
|
||
|
|
read -sp 'Please enter your private key (hidden) and press enter: ' privkey
|
||
|
|
echo
|
||
|
|
|
||
|
|
echo
|
||
|
|
echo Signing manifests...
|
||
|
|
for betastable in beta stable; do
|
||
|
|
m=${BASEPATH}/${firmware}/stable/images/sysupgrade/${betastable}.manifest
|
||
|
|
echo "####### Manifest: ${m}"
|
||
|
|
# check if the separator is already in the file
|
||
|
|
if ! fgrep -q -- --- $m; then
|
||
|
|
echo --- >> $m
|
||
|
|
fi
|
||
|
|
# generate the signature
|
||
|
|
ecdsasign <( awk '/^BRANCH/,/^---/' $m | egrep -v ^--- ) <<< "$privkey" >> $m
|
||
|
|
done
|