tree ee25c173ff991333a197f2ad65d4d7ed400eb8ff
parent 1314054a7f06a0c11677833323eca06eb4826b6e
author Adriana Kobylak <anoo@us.ibm.com> 1611077977 -0600
committer Brad Bishop <bradleyb@fuzziesquirrel.com> 1612463556 +0000

phosphor-software-manager: Add verify-full-signature

The phosphor-software-manager now supports signature checking of the
whole tarball contents, ensuring that all the expected images are
contained in the tarball. This new check adds an additional level of
security, and the new tarball signature file is included in the built
tarball now by default:
https://gerrit.openbmc-project.xyz/c/openbmc/meta-phosphor/+/39036
https://gerrit.openbmc-project.xyz/c/openbmc/phosphor-bmc-code-mgmt/+/39118

Change the verify_signature PACKAGECONFIG option to use the new
verify-full-signature since this is the recommended option now and the
previous one is marked as a legacy option.

Tested: Verified the generated config.h in the phosphor-software-manager
        build directory has both the original WANT_SIGNATURE_VERIFY and
        the new WANT_SIGNATURE_FULL_VERIFY defined.

Change-Id: I138d0c8ca9fc25d4e08e101c5a097c9cb4fbcbb5
Signed-off-by: Adriana Kobylak <anoo@us.ibm.com>