320 Commits

Author SHA1 Message Date
Armin Kuster 82379e0700 tpm2-abrmd: add UPSTREAM_CHECK_URI
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-30 14:11:27 -07:00
Armin Kuster 3584967332 tpm2-pkcs11: Add UPSTREAM_CHECK_URI
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-30 14:11:27 -07:00
Armin Kuster c997039c17 tpm2-openssl: Add UPSTREAM_CHECK_URI
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-30 14:11:27 -07:00
Armin Kuster dc0d72e51a tpm2-tools: Add UPSTREAM_CHECK_URI
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-30 14:11:27 -07:00
Armin Kuster 293d3ba9ad tpm2-tss: add UPSTREAM_CHECK_URI
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-30 14:11:27 -07:00
Armin Kuster edcb1537de tpm2-tss-engine: add UPSTREAM_CHECK_URI
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-30 14:11:27 -07:00
Armin Kuster 770c7f3c05 ibmtpm2tss: fix SRC_URI
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-30 14:11:27 -07:00
Armin Kuster 77910422fa packagegroup-security-tpm: add libhoth to pkg grp
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-30 14:11:27 -07:00
John Edward Broadbent 71199365ff meta-security: Add recipe for libhoth
Libhoth is usb protocol implementation which is required for hoth class
devices

Signed-off-by: John Edward Broadbent <jebr@google.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-30 14:11:27 -07:00
Armin Kuster b5642c519b oeqa: meta-tpm shut swtpm down before and after testing
fixes:
swtpm: Could not open TCP socket: Address already in use

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-23 18:47:59 -07:00
Armin Kuster 5c215dd679 layer.conf: Post release codename changes
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-07 16:58:24 -07:00
Armin Kuster c78cfc5cd0 tpm2-pkcs11: we really need the symlinks
MASK dev-so
Drop un-needed install append steps.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-07 16:58:24 -07:00
Armin Kuster 3db9e08300 oeqa/tpm2: fix and cleanup tests
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-07 16:58:24 -07:00
Armin Kuster 50eff83d42 oeqa/swtpm: add swtpm runtime
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-07 16:58:24 -07:00
Armin Kuster 3cb0ec3086 swtpm: enable gnutls
needed for cert support

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-07 16:58:24 -07:00
Armin Kuster a2783a8d8b security-tpm2-image: add swtpm
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-07 16:58:24 -07:00
Armin Kuster f658bd542a swtpm: enable seccomp if DISTRO is enabled
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-07 16:58:24 -07:00
Anton Antonov 7628a3e90b meta-parsec: Update Parsec runtime tests
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-05-26 16:09:42 -07:00
Armin Kuster 8be830dd85 oeqa/cases/tpm2: fix and enhance test suite
local.conf
TEST_SUITES = "ssh ping tpm2"
IMAGE_INSTALL:append = " swtpm tpm2-pkcs11"

RESULTS:
RESULTS - ping.PingTest.test_ping: PASSED (0.05s)
RESULTS - ssh.SSHTest.test_ssh: PASSED (2.19s)
RESULTS - tpm2.Tpm2Test.test_tpm2_pcrread: PASSED (1.06s)
RESULTS - tpm2.Tpm2Test.test_tpm2_pkcs11: PASSED (1.17s)
RESULTS - tpm2.Tpm2Test.test_tpm2_swtpm_reset: PASSED (0.59s)
RESULTS - tpm2.Tpm2Test.test_tpm2_swtpm_socket: PASSED (307.72s)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-05-23 07:11:55 -07:00
Armin Kuster 311b7daea1 tpm2-tools: Add missing rdepends
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-05-23 07:11:55 -07:00
Armin Kuster 3045de13ab tpm2-pkcs11: tpm2-pkcs11 module missing
Correctly fix symlink issue by putting module in -dev pkg.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-05-23 07:11:55 -07:00
Joe Slater 93f2146211 LICENSE: update to SPDX standard names
Use convert-spdx-licenses.py to update LICENSE in recipes.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-13 13:45:44 -07:00
Petr Gotthard d4fffc44f3 tpm2-pkcs11: update to 1.8.0
The build patches are now included in the upstream,
the local binary checkes can be disabled with --disable-ptool-checks,
the boostrap doesn't need to be called if the release .tar.gz is used.

Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-13 13:45:44 -07:00
Petr Gotthard f576e38379 tpm2-tss-engine: fix version string and build with openssl 3.0
Calling autoreconf outside git repo causes the version number to
be null. This patch makes the version number fixed.

Since Yocto now uses OpenSSL 3.0, the file packaging need to
be updated.

Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-13 13:45:44 -07:00
Petr Gotthard da8cbb3b16 tpm2-abrmd: update to 2.4.1
The version number is correctly assigned only when the release .tar.gz
is used.

Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-13 13:45:44 -07:00
Petr Gotthard 5855990d6f tpm2-tss: update to 3.2.0
This deletes the patches that were unused for a long time,
updates the tpm2-tss package and introduces a fix to the version
number problem that got introduced with the 3.2.0 version.

Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-13 13:45:44 -07:00
Petr Gotthard f203d64c1f tpm2-openssl: update to 1.1.0
Also, the recipe is fixed to correctly package the openssl provider.

This new tpm2-openssl:
- Fixed segmentation fault when a signature algorithm is beging initialized
  without a private key.
- Fixed RSA/EC key equality checks. Works with OpenSSL 3.0.1.
- Added support for the `TPM2OPENSSL_PARENT_AUTH` environment variable.

Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-13 13:45:44 -07:00
Petr Gotthard c010297b49 tpm2-tools: fix missing version number
Calling autoreconf outside git repo causes the version number to
be null. This patch makes the version number fixed.

Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-13 13:45:44 -07:00
Armin Kuster da23c2a094 tpm2-tss: fix user perms
[Yocto #14724]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-11 21:12:46 -08:00
Armin Kuster 46622a3b26 tpm-tools: Fix pod2man race
On some systems, pod2man is not available so add native depends.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-11 21:08:41 -08:00
Armin Kuster 47bbac5242 libtpm: update to 0.9.2
includes: CVE-2021-3623

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-11 21:08:22 -08:00
Armin Kuster 6ea6a4982c swtpm: update to 0.7.1
fixes: CVE-2022-23645.
Add implementation of SWTPM_HMAC using OpenSSL 3.0 APIs

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-11 21:08:22 -08:00
Armin Kuster 75073a5617 packagegroup-security-tpm: Fix QA Error
ERROR: packagegroup-security-tpm-1.0-r0 do_package_write_rpm: An allarch packagegroup shouldn't depend on packages which are dynamically renamed (libtpm-dbg to libtpms-dbg)
ERROR: packagegroup-security-tpm-1.0-r0 do_package_write_rpm: An allarch packagegroup shouldn't depend on packages which are dynamically renamed (libtpm to libtpms0)
ERROR: packagegroup-security-tpm-1.0-r0 do_package_write_rpm: An allarch packagegroup shouldn't depend on packages which are dynamically renamed (libtpm-dev to libtpms-dev)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-11 21:07:52 -08:00
Armin Kuster 30a4227e3c layer.conf: Update to use kirkstone
Update the layers to use the kirkstone namespace. No compatibility is made
for honister due to the variable renaming.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-02-20 19:39:36 -08:00
Patrick Williams a6fc2597b4 tpm2-pkcs11: fix RDEPENDS variable
The RDEPENDS variable was misspelled and as a result was never fixed up
with the `_${PN}` to `:${PN}` transition.  Fix both aspects.

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-02-20 19:39:36 -08:00
Armin Kuster 32c0e160ea tpm2-tss: update to 3.1.0
Drop 001-configure.ac-fix-compatibility-with-autoconf-2.70.patch which is included in update.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-02-20 19:38:30 -08:00
Armin Kuster deeadddfb4 tpm2-pkcs11_1.7.0: Drop dstat from DPENDS
dstat was removed from meta-oe.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-01-30 12:14:37 -08:00
Armin Kuster 0594aee231 packagegroup-security-tpm2.bb: remove dynamic pkgs
fixes:
packagegroup-security-tpm2-1.0-r0 do_package_write_rpm: An allarch packagegroup shouldn't depend on packages which are dynamically renamed (libtss2-tcti-device to libtss2-tcti-device0)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-01-30 12:14:37 -08:00
Armin Kuster c20b35b527 meta-tpm: drop strongswan bbappends
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-27 11:47:56 -08:00
Armin Kuster 147ed69a19 packagegroup-security-tpm2: drop ibmswtpm2
ibmswtpm2 has not been ported to openssl 3

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-27 11:47:15 -08:00
Armin Kuster e3b50febf8 tpm2-pkcs11: backport openssl 3.x build fixes
bump to tip of current sources.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-27 11:47:11 -08:00
Armin Kuster 9bf5c504d1 tpm2-pkcs11: update to 1.7.0
drop patch now included.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-25 11:29:19 -08:00
Yi Zhao 59295103f1 openssl-tpm-engine: fix warning for append operator combined with +=
Fixes:
WARNING: openssl-tpm-engine_0.5.0.bb: CFLAGS:append += is not a
recommended operator combination, please replace it.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-28 16:16:19 -08:00
Stefan Mueller-Klieser 696651d0c3 tpm2-tss: fix fapi package config
When enabling fapi, the build breaks with:

 | configure: error: Package requirements (libcurl) were not met:
 | No package 'libcurl' found

This adds the missing dependency and bundles the additional config files
in the base package.

Signed-off-by: Stefan Müller-Klieser <s.mueller-klieser@phytec.de>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-07 11:26:49 -08:00
Armin Kuster 7e27eb5fca recipes: Update SRC_URI branch and protocols
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-04 08:18:00 -07:00
Armin Kuster 8215ed27aa tpm2-pkcs11: update to 1.7.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-26 08:20:55 -07:00
Armin Kuster d77b7765e7 tpm2-openssl: add new pkg
openssl 3.x support for tpm2 tss function found in tpm2-ssl

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-26 08:20:51 -07:00
Armin Kuster b5e277022b openssl-tpm-engine: fix build issue with openssl 3
ERROR: openssl-tpm-engine-0.5.0-r0 do_package: QA Issue: openssl-tpm-engine: Files/directories were installed but not shipped in any package:
  /usr/lib/engines-3/tpm.so

fix engine locations

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-26 07:23:30 -07:00
Armin Kuster 5d2afb321c tpm2-tools: update to 5.2
openssl 3.0 support

see https://github.com/tpm2-software/tpm2-tools/releases/tag/5.2

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-26 07:23:30 -07:00
Kristian Klausen 01bdc2918c swtpm: update to 0.6.1
swtpm no longer depends on Python[1] so the dependencies have been
removed.

"inherit perlnative" has been added due to (in oe-core):
deda455b3c ("bitbake.conf: drop pod2man from hosttools")

Some leftover dependencies have also been removed, ex: tpm-tools
required in the past by swtpm_setup.sh (<0.4.0)[2].

[1] https://github.com/stefanberger/swtpm/issues/437
[2] https://github.com/stefanberger/swtpm/commit/eee8cb5dfb13f87140dddda38f65bf61aff19508

Signed-off-by: Kristian Klausen <kristian@klausen.dk>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-18 21:50:13 -07:00