From 245f4c2e3505c5a3a781285ec751b935d68eb093 Mon Sep 17 00:00:00 2001 From: Johannes Schneider Date: Wed, 4 Nov 2026 09:32:01 +0000 Subject: [PATCH] signing.bbclass: set all softhsm config keys explicitly The generated softhsm2.conf only sets directories.tokendir and objectstore.backend. SoftHSM warns about every other key it falls back to the default for, and it logs through syslog(), so every process loading the module during a build (rauc, extract-cert, ...) puts three "Missing ... in configuration" lines into the build host's journal. Set log.level, slots.removable and slots.mechanisms explicitly. The latter two keep their defaults; log.level = ERROR keeps SoftHSM's INFO/WARNING chatter out of the host journal while errors are still logged. Assisted-by: Claude:claude-opus-5-5 Signed-off-by: Johannes Schneider Signed-off-by: Khem Raj --- meta-oe/classes/signing.bbclass | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/meta-oe/classes/signing.bbclass b/meta-oe/classes/signing.bbclass index b02825bd00..431ceab8e3 100644 --- a/meta-oe/classes/signing.bbclass +++ b/meta-oe/classes/signing.bbclass @@ -112,6 +112,9 @@ signing_import_prepare() { echo "directories.tokendir = $SOFTHSM2_DIR" > "$SOFTHSM2_CONF" echo "objectstore.backend = db" >> "$SOFTHSM2_CONF" + echo "log.level = ERROR" >> "$SOFTHSM2_CONF" + echo "slots.removable = false" >> "$SOFTHSM2_CONF" + echo "slots.mechanisms = ALL" >> "$SOFTHSM2_CONF" rm -rf "$SOFTHSM2_DIR" mkdir -p "$SOFTHSM2_DIR" @@ -353,6 +356,9 @@ signing_prepare() { echo "directories.tokendir = $SOFTHSM2_DIR" > "$SOFTHSM2_CONF" echo "objectstore.backend = db" >> "$SOFTHSM2_CONF" + echo "log.level = ERROR" >> "$SOFTHSM2_CONF" + echo "slots.removable = false" >> "$SOFTHSM2_CONF" + echo "slots.mechanisms = ALL" >> "$SOFTHSM2_CONF" cat > "${OPENSSL_CONF}" <