Skip to content

WIFI-15401: Add version anti-rollback function for RAP7110C-341X/RAP750W-311A/RAP750E-S/RAP750E-H#1035

Open
JackTsai-CBT wants to merge 2 commits intonextfrom
staging-WIFI-15401-Add-version-anti-rollback-function-for-RAP7110C-341X
Open

WIFI-15401: Add version anti-rollback function for RAP7110C-341X/RAP750W-311A/RAP750E-S/RAP750E-H#1035
JackTsai-CBT wants to merge 2 commits intonextfrom
staging-WIFI-15401-Add-version-anti-rollback-function-for-RAP7110C-341X

Conversation

@JackTsai-CBT
Copy link
Copy Markdown
Contributor

@JackTsai-CBT JackTsai-CBT commented Mar 30, 2026

  1. RAP7110C-341X: Starting from TIP4.1.0, its certificate format changes to ext4. So we need to prohibit to downgrade the versions earlier than TIP4.1.0.
  2. RAP750W,RAP750E-S and RAP750E-H: Their certificate formats change to UBIFS. The relevant PR#1027 was merged. Need to the restricted version should be the latest version.

Thanks!

@JackTsai-CBT JackTsai-CBT requested a review from blogic March 30, 2026 09:52
@JackTsai-CBT JackTsai-CBT changed the title WIFI-15401: Add version anti-rollback function for RAP7110C-341X WIFI-15401: Add version anti-rollback function for RAP7110C-341X/RAP750W-311A/RAP750E-S/RAP750E-H Apr 3, 2026
@blogic
Copy link
Copy Markdown
Contributor

blogic commented Apr 6, 2026

why is this needed ? we already have this feature in our sysupgrade code path where we ensure that none pki2.0 images cannot be installed on pki2.0 devices.

@blogic blogic closed this Apr 6, 2026
@richardzhang-sw2
Copy link
Copy Markdown

Hi John, we cannot find "this feature in our sysupgrade code path where we ensure that none pki2.0 images cannot be installed on pki2.0 devices." . Do you mean this feature will be implemented in TIP5.0 release? Thanks!

@blogic
Copy link
Copy Markdown
Contributor

blogic commented Apr 9, 2026

@richardzhang-sw2
Copy link
Copy Markdown

Hi John,
I think this PR is necessary:

  1. RAP7110C-341X: Starting from TIP4.1.0, its certificate format changes to ext4. So we need to prohibit to downgrade the versions earlier than TIP4.1.0.
  2. RAP750W,RAP750E-S and RAP750E-H: Their certificate formats change to UBIFS. The relevant PR(Fixed WIFI-15306:certificates partition fails to mount on rap750w-311a. Need to use UBIFS format certificates on NAND flash. #1027) was merged. Need to the restricted version should be the latest version.
    Thanks!

@blogic
Copy link
Copy Markdown
Contributor

blogic commented Apr 16, 2026

@richardzhang-sw2 that it is important to write understandable and comprehensive patch descriptions. no one apart from you knew that this is partition type and not pki2.0 related.

@blogic blogic reopened this Apr 16, 2026
According 6c4ca10,
RAP7110C-341X: Starting from TIP4.1.0, its certificate format changes to ext4. So we need to prohibit to downgrade the versions earlier than TIP4.1.0.

It is necessary to add version checking and anti-rollback functionality for the RAP7110C-341X to prevent certificate partition-related issues on older firmware versions.

Signed-off-by: jackcybertan <jack.tsai@cybertan.com.tw>
…1A/RAP750E-S/RAP750E-H

RAP750W,RAP750E-S and RAP750E-H: Their certificate formats change to UBIFS.
The relevant PR #1027 was merged.
Need to the restricted version should be the latest version.

Signed-off-by: jackcybertan <jack.tsai@cybertan.com.tw>
@JackTsai-CBT JackTsai-CBT force-pushed the staging-WIFI-15401-Add-version-anti-rollback-function-for-RAP7110C-341X branch from 017587a to 1381ecb Compare April 16, 2026 06:49
@richardzhang-sw2
Copy link
Copy Markdown

Hi John,
Got it. We'v updated the description. We will add the descriptions in detail as much as possible from now on. Thanks a lot!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants