John Crispin e923974fc1 apk: use deterministic ECDSA signatures ...

The host apk signs with LibreSSL, which uses a random ECDSA nonce. A
package that is signed again has different bytes and often a different
size, even if its content did not change. The rootfs records the
package size in /lib/apk/db/installed, so a rebuild of one package
changes all images.

Add a patch that derives the nonce as specified in RFC 6979. Signed
packages and images are now identical after a rebuild.

Signed-off-by: John Crispin <john@phrozen.org>

2026-09-22 18:46:30 +02:00

..

apk

apk: use deterministic ECDSA signatures

2026-09-22 18:46:30 +02:00

ca-certificates

ca-certificates: update to 20260816

2026-08-23 11:34:58 +02:00

fstools

fstools: update to git HEAD of 2026-07-25

2026-07-25 17:30:51 +01:00

fwtool

…

gpio-cdev/nu801

…

iucode-tool

…

mtd

mtd: fis: fix buffer overflow from negative memset size

2026-07-17 10:02:59 +02:00

openwrt-keyring

…

opkg

…

procd

procd: fix procd-ujail build on ARMv4

2026-09-19 09:42:56 +01:00

refpolicy

refpolicy: update to 2.20260312

2026-04-27 10:50:54 +02:00

rpcd

rpcd: update to Git HEAD (2026-07-19)

2026-07-21 22:59:58 +02:00

selinux-policy

…

ubox

…

ubus

ubus: update to Git HEAD (2026-06-28)

2026-06-28 16:48:20 +02:00

ucert

…

uci

…

urandom-seed

…

urngd

…

usign

…

zram-swap

…