meta-secure-core

8 Commits

Author	SHA1	Message	Date
Lans Zhang	9fd5778732	secure-core-image: install ima-related packages if ima feature configured Signed-off-by: Lans Zhang <jia.zhang@windriver.com>	2017-06-26 12:50:52 +08:00
Lans Zhang	e280094b5b	shim: enable http boot support Signed-off-by: Lans Zhang <jia.zhang@windriver.com>	2017-06-26 11:43:10 +08:00
Lans Zhang	d82dc56d88	cryptfs-tpm2: sync up with upstream Signed-off-by: Lans Zhang <jia.zhang@windriver.com>	2017-06-26 11:42:18 +08:00
Lans Zhang	8e01c0a442	IMA: refresh kernel cfg Signed-off-by: Lans Zhang <jia.zhang@windriver.com>	2017-06-26 11:33:39 +08:00
Lans Zhang	dcc933df6e	linux-yocto-efi-secure-boot: don't use sccs to define the included kernel cfg The variable sccs is used internally and thus it will be corrupted by the external definition. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>	2017-06-26 11:25:31 +08:00
Meng Li	92f65d3394	openssl-tpm-engine: parse an encrypted tpm SRK password from env Before, we support reading SRK password from env TPM_SRK_PW, but it is a plain password and not secure. So, we improve it and support to get an encrypted (AES algorithm) SRK password from env, and then parse it. The default decrypting AES password and salt is set in bb file. When we initialize TPM, and set a SRK pw, and then we need to encrypt it with the same AES password and salt by AES algorithm. At last, we set a env as below: export TPM_SRK_ENC_PW=xxxxxxxx "xxxxxxxx" is the encrypted SRK password for libtpm.so. Signed-off-by: Meng Li <Meng.Li@windriver.com> Signed-off-by: Lans Zhang <jia.zhang@windriver.com>	2017-06-23 21:52:57 +08:00
Guojian Zhou	e6c0acbede	Ignore the KEYS DIR in the do_package and do_sign task dependence Signed-off-by: Guojian Zhou <guojian.zhou@windriver.com> Signed-off-by: Lans Zhang <jia.zhang@windriver.com>	2017-06-23 13:16:20 +08:00
Lans Zhang	1b3e594449	meta-secure-core: initial commit Signed-off-by: Lans Zhang <jia.zhang@windriver.com>	2017-06-22 15:24:04 +08:00