'smartcardoptions' config item for setting up HSMs with fdroid

These options are needed to configure Java's keytool and jarsigner to use
a Hardware Security Module aka HSM aka smartcard.  The defaults provided
are meant to make things work as easily as possible.
This commit is contained in:
Hans-Christoph Steiner 2014-04-03 22:07:45 -04:00
parent 0950cdac09
commit 2bd62239f7
3 changed files with 28 additions and 5 deletions

View file

@ -642,7 +642,8 @@ def make_index(apps, apks, repodir, archive, categories):
p = FDroidPopen(['keytool', '-exportcert',
'-alias', config['repo_keyalias'],
'-keystore', config['keystore'],
'-storepass:file', config['keystorepassfile']])
'-storepass:file', config['keystorepassfile']]
+ config['smartcardoptions'])
if p.returncode != 0:
logging.critical("Failed to get repo pubkey")
sys.exit(1)
@ -799,7 +800,8 @@ def make_index(apps, apks, repodir, archive, categories):
'-storepass:file', config['keystorepassfile'],
'-keypass:file', config['keypassfile'],
'-digestalg', 'SHA1', '-sigalg', 'MD5withRSA',
os.path.join(repodir, 'index.jar') , config['repo_keyalias']])
os.path.join(repodir, 'index.jar') , config['repo_keyalias']]
+ config['smartcardoptions'])
# TODO keypass should be sent via stdin
if p.returncode != 0:
logging.info("Failed to sign index")