Commit Graph

31 Commits

Author SHA1 Message Date
Zheng Ruoqin dc9caf5d1d cryptsetup: upgrade 2.2.1 -> 2.2.2
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-06 19:58:01 -08:00
Yuan Chao 4f29ebd4ea cryptsetup: upgrade 2.2.0 -> 2.2.1
Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-19 00:09:43 -07:00
Oleksandr Kravchuk 6817c01328 botan: update to 2.11.0
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-16 18:24:48 -07:00
Hongxu Jia 6a5d6bc9ad cryptsetup: add libdevmapper to RDEPENDS
Since commit [libdevmapper/lvm2: force recipe libdevmapper to populate
sysroot only] applied, if recipe DEPENDS on libdevmapper, we have to
add it to packages RDEPENDS to fix [file-rdeps] QA issue

Set PREFERRED_RPROVIDER_libdevmapper = "lvm2" in layer.conf to explicit
RDEPENDS on libdevmapper in cryptsetup

Suggested-by : peter.kjellerstedt@axis.com
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-31 01:24:55 -07:00
Hongxu Jia d8685320a4 cryptsetup: add libdevmapper to RDEPENDS
Since commit [libdevmapper/lvm2: force recipe libdevmapper to populate
sysroot only] applied, if recipe DEPENDS on libdevmapper, we have to
add it to packages RDEPENDS to fix [file-rdeps] QA issue

Skip [build-deps] and [file-rdeps] QA checking, add lvm2 to DEPENDS will
triger circular dependencies, use recipe libdevmapper to replace,
ignore the QA checking is fine.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-29 09:07:34 -07:00
Zang Ruochen 4f9d5b97d6 cryptsetup: upgrade 2.1.0 -> 2.2.0.
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-19 18:20:38 -07:00
Zang Ruochen 80e0113f7a libkcapi: upgrade 1.1.4 -> 1.1.5
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-05 20:22:51 -07:00
Zang Ruochen a58021bd40 libsodium: upgrade 1.0.17 -> 1.0.18
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-02 18:04:41 -07:00
Yi Zhao 11ff107a85 cryptsetup: set the default luks format to LUKS1
The cryptsetup 2.1 uses LUKS2 format as the default LUKS format. This
change introduced the following issues:

* LUKS2 requires kernel userspace crypto API to be available
  (CONFIG_CRYPTO_USER_API and CONFIG_CRYPTO_USER_API_SKCIPHER). But
  linux-yocto doesn't enable these options by default. If missing these
  kernel modules, the cryptsetup will fall back to using dmcrypt-device
  for keyslot processing.

  $ cryptsetup --debug --type luks luksFormat /dev/sda3
    [snip]
    Checking if cipher aes-xts-plain64 is usable.
    Userspace crypto wrapper cannot use aes-xts-plain64 (-95).
    Using dmcrypt to access keyslot area.
    [snip]

* The grub can not decrypt a LUKS2 encrypted boot partition because it
  doesn't support LUKS2 now.
  See grub bug: https://savannah.gnu.org/bugs/?55093

Add a PACKAGCONFIG for luks format and set the default LUKS format to
LUKS1. The users can specify '--type luks2' in cryptsetup command line
if they want to use LUKS2.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-11 14:01:28 -07:00
Robert Joslyn 5aaaf8e972 cryptsetup: Don't enable udev for native build
When building cryptsetup-native, don't enable udev support since there
is not a udev-native recipe.

When udev is enabled, change the dependency from a DEPENDS to an
RDEPENDS. The --enable-udev option adds a runtime check for udev before
using udev features of libdevmapper. Because of this, udev isn't needed
at build time, just runtime.

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Reviewed-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:33 -07:00
Robert Joslyn 1ce71d6ec3 cryptsetup: Add PACKAGECONFIG options
Add various PACKAGECONFIG options, keeping the default options enabled.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:33 -07:00
Oleksandr Kravchuk d3bfe0a626 libsodium: update to 1.0.17
License checkusm has been changed due to the copiright year change in
the LICENSE file.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-15 13:57:47 -07:00
Mingli Yu e9434ec4ce cryptsetup: Upgrade to 2.1.0
Instead of hardcoding the version in SRC_URI,
get the version for the folder of the source
dynamically in SRC_URI.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-15 06:58:55 -08:00
Khem Raj f58ae7a64b botan: Upgrade to 2.9.0
License-Update: Update copyright years to 2019

https://github.com/randombit/botan/commit/d5edb39e968893bafe87a6a5ef12af45914c0d70#diff-98cd14c95bb22f9d397da0603a77d950

Swith to tarball fetcher

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-30 17:17:54 -08:00
Krzysztof Kozlowski 7cf2f4996f libkcapi: Bump to v1.1.4
License file was updated with new dates ("2016" -> "2016 - 2019").

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-26 11:00:07 -08:00
Krzysztof Kozlowski 7c52d8ab71 libkcapi: Fix missing bash (for apps) and unneeded checksums (for testapp) when building
Fix build failures:
1. with "apps" PACKAGECONFIG:

    ERROR: libkcapi-1.1.3+gitAUTOINC+1c736c43eb-r0 do_package:
    QA Issue: libkcapi: Files/directories were installed but not shipped in any package:
      /usr/bin/.sha1hmac.hmac
      /usr/lib/.libkcapi.so.1.1.3.hmac

2. with "testapp" PACKAGECONFIG:

    ERROR: libkcapi-1.1.3+gitAUTOINC+1c736c43eb-r0 do_package_qa:
    QA Issue: /usr/libexec/libkcapi/test.sh contained in package libkcapi requires /bin/bash,
    but no providers found in RDEPENDS_libkcapi? [file-rdeps]

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-26 11:00:07 -08:00
Khem Raj 70a0692211 botan: Add recipe
botan is a common crypto library used by various infrastructures e.g.
qtcreator chromium etc. Its beneficial to build it once for the system
and let apps use it if possible

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-29 02:10:12 -07:00
Khem Raj 7b6c088b87 libkcapi: Disable Wsign-compare warning with clang/musl
clang 7.0 is grumpy and complains about cmsg structures and macros from
sys/socket.h

kcapi-kernel-if.c:25:11: error: comparison of integers of different signs: 'unsigned long' and 'long' [-Werror,-Wsign-compare] header = CMSG_NXTHDR(&msg, header);

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-09 12:08:46 -07:00
Khem Raj 0d69645f3b pkcs11-helper: Upgrade to 1.25.1
* Fixes build with OpenSSL 1.1.x

License-Update:

* update year to 2018
* remove 'All rights reserved'

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-08 13:32:12 -07:00
Khem Raj 58062ba654 libkcapi: Upgrade to 1.1.3
Drop upstream patches

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Krzysztof Kozlowski <krzk@kernel.org>
2018-08-30 23:54:38 -07:00
Mingli Yu 4fb7aa816c cryptsetup: Upgrade to 2.0.4
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-29 18:18:14 -07:00
Mingli Yu 1507fa0aa2 cryptsetup: Upgrade to 2.0.3
* Update the homepage to https://gitlab.com/cryptsetup/cryptsetup
* Add json-c to DEPENDS as cryptsetup requires the
  json-c library for JSON data processing since cryptsetup
  2.0.0 per "The LUKS2 format and features" part of
  https://mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.0/v2.0.0-ReleaseNotes
* Add file /usr/lib/tmpfiles.d/cryptsetup.conf to
  FILES_${PN} when systemd enabled in DISTRO_FEATURES

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-20 16:07:12 -07:00
Krzysztof Kozlowski d6836356c4 libkcapi: Add new recipe for v1.1.1
Add new recipe with libkcapi v1.1.1, Linux Kernel Crypto API User Space
Interface Library.

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-14 11:28:12 -07:00
leimaohui a5ea75f516 engine-pkcs11: has been merged to libp11, so deleted.
Reference to https://github.com/OpenSC/engine_pkcs11,there is no need to maitain this recipe.

Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-20 10:07:41 -07:00
Oleksandr Kravchuk edf011c303 libsodium: update to 1.0.16
Added link to bug tracker and updated md5sum of LICENSE, which has been
updated with the copyright year.

Signed-off-by: Oleksandr Kravchuk <dev@sashko.rv.ua>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-14 09:01:12 -07:00
Yi Zhao 44ba923dc5 libmcrypt: add UPSTREAM_CHECK_URI
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-29 12:56:19 -07:00
Armin Kuster 40877b1244 cryptsetup: move to crypto
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01 16:10:37 -08:00
Armin Kuster 0df104e33d libcrypto: move to recipes-crypto
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01 16:10:37 -08:00
Armin Kuster 74013bfa9a pkcs11-helper: move to recipes-crypto
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01 16:10:37 -08:00
Armin Kuster 73a9895ed4 engine-pkcs11: move to recipes-crypto
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01 16:10:37 -08:00
Armin Kuster 3d91c97e1d libmcryt: movre to recipes-crypto
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01 16:10:36 -08:00