qca / open-ath9k-htc-firmware

The firmware for QCA AR7010/AR9271 802.11n USB NICs
Other
428 stars 182 forks source link

add cryptographic assurances when fetching the toolchain #94

Closed olerem closed 7 years ago

olerem commented 7 years ago

Previously, anyone tampering with the network could have modified the toolchain source code in transit and the build would have proceeded as expected.

With this patch, we can ensure that we're getting the expected tarballs from upstream.

If the required toolchain packages change in the future, the sha256 digests of the new packages should be updated in Makefile as well.

Updated-by: Oleksij Rempel linux@rempel-privat.de

It is update for https://github.com/qca/open-ath9k-htc-firmware/pull/59