1
0
mirror of https://git.openwrt.org/openwrt/openwrt.git synced 2024-10-20 06:28:12 +02:00
openwrt/scripts
Josh Roys 90c6e3aedf
scripts: always check certificates
Remove flags from wget and curl instructing them to ignore bad server
certificates. Although other mechanisms can protect against malicious
modifications of downloads, other vectors of attack may be available
to an adversary.

TLS certificate verification can be disabled by turning oof the
"Enable TLS certificate verification during package download" option
enabled by default in the "Global build settings" in "make menuconfig"

Signed-off-by: Josh Roys <roysjosh@gmail.com>
[ add additional info on how to disable this option ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2022-09-10 15:24:22 +02:00
..
config build: scripts/config - update to kconfig-v5.14 2022-02-19 13:10:01 +01:00
flashing scripts: eva_ramboot.py: remove unused import 2021-10-30 15:00:22 +02:00
arm-magic.sh
brcmImage.pl
bundle-libraries.sh
cameo-imghdr.py scripts: add cameo image header generator 2022-06-28 22:20:09 +02:00
cameo-tag.py scripts: fix CAMEO tag generator 2022-07-05 10:18:06 +02:00
cfe-bin-header.py
cfe-partition-tag.py scripts: format to black 2022-04-16 14:53:17 +02:00
cfe-wfi-tag.py scripts: format to black 2022-04-16 14:53:17 +02:00
check-toolchain-clean.sh check-toolchain-clean.sh: workaround stray rebuilds 2022-02-28 15:17:11 +01:00
checkpatch.pl scripts: fix various typos 2021-10-31 21:24:47 +01:00
clean-package.sh
cleanfile
cleanpatch
combined-ext-image.sh
combined-image.sh
command_all.sh treewide: drop use of which 2022-01-17 09:14:26 +01:00
config.guess
config.rpath
config.sub
const_structs.checkpatch
deptest.sh
diffconfig.sh scripts/diffconfig.sh: ensure config/conf is built 2022-02-26 13:36:30 +01:00
dl_cleanup.py
dl_github_archive.py scripts: fix various typos 2021-10-31 21:24:47 +01:00
download.pl scripts: always check certificates 2022-09-10 15:24:22 +02:00
dump-target-info.pl scripts: dump-target-info print kernel versions 2021-12-29 14:06:10 +01:00
env scripts/env: fix env for git conf init.defaultBranch not set to "master" 2021-11-13 10:29:41 -10:00
ext-toolchain.sh scripts: ext-toolchain: add support for musl 2022-07-24 19:53:45 +02:00
feeds feeds: use git-src-full to allow Git versioning 2022-02-15 00:24:24 +01:00
fixup-makefile.pl
functions.sh
gen_image_generic.sh scripts/gen_image_generic.sh: fix order of files in EFI bootfs 2022-04-15 01:17:04 +01:00
gen-dependencies.sh
get_source_date_epoch.sh
getver.sh
ipkg-build build: use numeric-owner in ipkg-build 2022-04-19 22:59:50 +02:00
ipkg-make-index.sh
ipkg-remove
json_add_image_info.py build: store sha256_unsigned in JSON 2022-03-29 21:41:06 +01:00
json_overview_image_info.py scripts: fix various typos 2021-10-31 21:24:47 +01:00
kconfig.pl
linksys-image.sh scripts: fix various typos 2021-10-31 21:24:47 +01:00
make-ipkg-dir.sh
md5sum
metadata.pm base-files, metadata: support additional group membership 2021-10-28 16:27:21 +01:00
mkhash.c mkhash: fix build errors on FreeBSD 13.0 2022-03-05 18:01:04 +01:00
mkits-qsdk-ipq-image.sh
mkits-zyxel-fit.sh ramips: add support for ZyXEL NWA50AX / NWA55AXE 2022-07-20 21:52:06 +02:00
mkits.sh scripts/mkits.sh: replace forgotten '-' with ${REFERENCE_CHAR} 2022-03-24 00:46:45 +00:00
netgear-encrypted-factory.py image: add support for Netgear encrypted image 2022-07-19 14:49:03 +02:00
om-fwupgradecfg-gen.sh
package-metadata.pl
pad_image scripts: fix various typos 2021-10-31 21:24:47 +01:00
patch-kernel.sh
patch-specs.sh
portable_date.sh
qemustart Revert "ethtool: update to v5.14" 2021-10-23 21:39:00 +02:00
redboot-script.pl
relink-lib.sh
remote-gdb
rstrip.sh
sercomm-crypto.py
sercomm-kernel-header.py scripts: add support for Sercomm kernel header 2022-07-03 20:25:38 +02:00
sercomm-partition-tag.py
sercomm-payload.py
sercomm-pid.py scripts: add support for Sercomm PID 2022-07-03 20:25:38 +02:00
sign_images.sh scripts: fix various typos 2021-10-31 21:24:47 +01:00
size_compare.sh scripts: fix various typos 2021-10-31 21:24:47 +01:00
slugimage.pl scripts: fix various typos 2021-10-31 21:24:47 +01:00
spelling.txt
srecimage.pl
strip-kmod.sh
symlink-tree.sh
sysupgrade-tar.sh
target-metadata.pl base-files: add eMMC sysupgrade support 2021-12-02 20:42:58 +00:00
time.pl
timestamp.pl
ubinize-image.sh treewide: drop use of which 2022-01-17 09:14:26 +01:00
xxdi.pl scripts: xxdi.pl: add xxd -i compat mode 2022-09-06 08:04:53 +02:00