Re: crda packaging

["Luis R. Rodriguez" <lrodriguez@atheros.com>]

On Mon, Oct 20, 2008 at 01:36:27PM -0700, Davide Pesavento wrote:
> 2008/10/20 Luis R. Rodriguez <mcgrof@gmail.com>:
> > We just need to get this git tree created. What crda will need though
> > is to wget the RSA public key so it can be built with support for new
> > arbitrary updates to the binary db. Give us a few days, we'll get this
> > setup.
> >
> 
> I'm not sure I can follow you here. This is what I understood so far:
> 
> (1) Someone (e.g. John Linville) creates a RSA key pair and puts the
> public key in a public place (e.g. linuxwireless.org website).

Sure, although I'd use "wireless.kernel.org" from here on as we have no
control over linuxwireless.org and the domain owner didn't want to give us
ownership of it so we cannot be sure it'll always be updated.

> (2) John "compiles" db.txt into its binary form (regulatory.bin),
> signs it with his private key and makes it publicly available
> somewhere (e.g. again linuxwireless.org).

ACK

> (3) Packagers create a package for the crda daemon alone, and a
> package containing regulatory.bin and the public part of the key pair
> used to sign it.

The public key will need to be wget'd to build crda binary as the public
key is built in as part of the binary.

> (4) When the regulatory database is updated, John releases a new
> version by "compiling" and signing it again.

ACK

  Luis