286 Commits

Author SHA1 Message Date
Armin Kuster 02b62b859d tpm2-tools: update to 4.3.0
LIC_FILES_CHKSUM changes do to added Copyright

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-15 21:15:03 -07:00
Armin Kuster 9d6e3ff0ed tpm2-abrmd: update to 2.3.3
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-15 21:15:03 -07:00
Armin Kuster 8566325c96 tpm2-totp: update to 0.2.1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-15 21:15:03 -07:00
Armin Kuster 6c6e967b98 tpm2-tss: update to 2.4.3
includes: CVE-2020-24455

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-15 21:15:03 -07:00
Jens Rehsack 7486ab3f5b ibmtpm2tss: add recipe
Add recipe for companion of IBM Software TPM 2.0 - IBM's TPM 2.0 TSS.
It's a user space TSS for TPM 2.0.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-13 07:08:49 -07:00
Jens Rehsack b9c72cc8bc ibmswtpm2: update to 1637
Update ibmswtpm2 from 1628 to 1637. Build 1637 Includes:
* Increase NV memory size to match PC Client RSA 3072 requirements
* Add and fix ACT support
* Update Visual Studio files to 2019.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-12 08:55:28 -07:00
Zheng Ruoqin 4221e5621c trousers: Fix the problem that do_package fails when multilib is enabled.
The following error will occur when multilib is enabled:
ERROR: trousers-0.3.14+gitAUTOINC+e74dd1d967-r0 do_package: QA Issue: trousers: Files/directories were installed but not shipped in any package:
  /lib
  /lib/systemd
  /lib/systemd/system
  /lib/systemd/system/tcsd.service

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-12 08:55:28 -07:00
Armin Kuster fa9f747360 cryptsetup-tpm-incubator: remove reference from other files
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-05 11:01:47 -07:00
Armin Kuster 95b8dd3619 cryptsetup-tpm-incubator: drop recipe
The upstream package appears to tbe dead so drop it.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-05 11:01:35 -07:00
Armin Kuster 55cbb63634 trousers: update to tip
Many for compile issue now being seen.

rpc/tcstp/.libs/libtspi_la-rpc_cmk.o:/usr/src/debug/trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/build/src/tspi/../../../git/src/include/tcsd.h:169: multiple definition of `tcsd_sa_int'; .libs/libtspi_la-tspi_context.o:/usr/src/debug/trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/build/src/tspi/../../../git/src/include/tcsd.h:169: first defined here
| collect2: error: ld returned 1 exit status

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-29 07:25:10 -07:00
Armin Kuster 787ba6faea trousers: Several Security fixes
Fixes:
CVE-2020-24332
CVE-2020-24330
CVE-2020-24331

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-17 15:08:14 -07:00
Armin Kuster 38715478be packagegroup-security-tpm: add more packages for building
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-25 09:00:39 -07:00
Yi Zhao f923d63820 ibmswtpm2: upgrade 1563 -> 1628
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-25 09:00:39 -07:00
Armin Kuster fc1693a967 layer.conf: add dynamic-layer for strongswan
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-18 18:26:44 -07:00
Armin Kuster f4dd53438a strongswan: add bbappends for tpm changes
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-18 18:26:44 -07:00
Jeremy Puhlman ed7875b085 packagegroup-security-tpm2: Depend on preferred provider for cryptsetup
Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-14 21:30:07 -07:00
Jeremy Puhlman bedfdc1fb9 cryptsetup-tpm-incubator: RPROVIDES cryptsetup and cryptsetup-dev
Without this we get weird conflict when you include dev packages:
rror: Transaction check error:
  file /usr/include/libcryptsetup.h conflicts between attempted installs of
cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and
lib32-cryptsetup-dev-2.3.2-r0.1.i586
  file /usr/lib64/libcryptsetup.so conflicts between attempted installs of
cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and
cryptsetup-dev-2.3.2-r0.1.corei7_64
  file /usr/lib64/pkgconfig/libcryptsetup.pc conflicts between attempted
installs of cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and
cryptsetup-dev-2.3.2-r0.1.corei7_64
  file /usr/lib/libcryptsetup.so conflicts between attempted installs of
lib32-cryptsetup-tpm-incubator-dev-0.9.9-r0.i586 and
lib32-cryptsetup-dev-2.3.2-r0.1.i586
  file /usr/lib/pkgconfig/libcryptsetup.pc conflicts between attempted installs
of lib32-cryptsetup-tpm-incubator-dev-0.9.9-r0.i586 and
lib32-cryptsetup-dev-2.3.2-r0.1.i586

Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-14 21:30:07 -07:00
Armin Kuster 1fb8497081 tpm2-tcti-uefi: drop patch no longer needed
drop tpm2-get-caps-fixed.patch, tss update negated the need for this
change.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:23 -07:00
Armin Kuster 3cd65d96c1 libtpm: update to 0.7.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:23 -07:00
Armin Kuster 26bb4e7d08 tpm2-pkcs11: update 1.2.0
add yaml package
Updated LICNESE

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:23 -07:00
Armin Kuster 60f93f8066 tpm2-tss-engine: add branch to SRC_URI & update to tip
LICENSE changed to BSD 3

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:23 -07:00
Armin Kuster df8a690941 tpm2-tss: update to 2.4.1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:23 -07:00
Armin Kuster d9d31d1f66 tpm2-tools: update to 4.1.3
LICENSE changed to BSD3

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:16 -07:00
Martin Jansa 7f7897590c layer.conf: update LAYERSERIES_COMPAT for dunfell
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27 16:53:25 -07:00
André Draszik d7ca573c36 linux-yocto: update the bbappend to 5.x
As linux-yocto upgraded to 5.x in oe-core, update
the bbappend to 5.x to remove the warning

ERROR: No recipes available for:
  .../meta-security/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend

This patch hasn't been verified any further than allowing bitbake
to complete with a non-linux-yocto kernel. In particular options could
be different, or new ones needed / desired.

Signed-off-by: André Draszik <git@andred.net>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08 14:13:07 -07:00
Armin Kuster 69ad1d51fd libtpm: fix build issue over pod2man
/bin/bash: pod2man: command not found
| Makefile:585: recipe for target 'TPMLIB_CancelCommand.3' failed

inherit perlnative to fix

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-05 08:06:51 -08:00
Armin Kuster 676d7166a2 ibmswtpm2: update to 1563
fix build issue

[v2]
Fix subject line

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-10 19:13:52 -08:00
Armin Kuster 5f258016b3 tpm2-tss: update to 2.3.2
clean up reciped. drop git fetching

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-10 19:13:52 -08:00
Armin Kuster e87130f429 tpm2-tcti-uefi: fix build issue for i386 machine
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-10 19:13:52 -08:00
Armin Kuster f2e9e8f96f tpm2-tools: update to 4.1.1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-10 19:13:52 -08:00
Armin Kuster 84fb57b53f swtpm: fix configure error
checking for whether to build with seccomp profile... configure: error: "Is libseccomp-devel installed? -- could not get cflags for libseccomp"

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-01 09:52:51 -08:00
Philip Tricca 4029f92ac8 tpm2-abrmd: Port command line options to new version.
These have changed upstream.

Signed-off-by: Philip Tricca <flihp@twobit.org>
Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-07 15:31:42 -08:00
Trevor Woerner 6d059a9d34 tpm2-abrmd-init.sh: fix for /dev/tpmrmX
Newer kernels, in addition to the traditional /dev/tpmX device nodes, are now
also creating /dev/tpmrmX device nodes. This causes this script to get
confused and abort, meaning tpm2-abrmd does not get started during boot.

Fix for https://github.com/flihp/meta-measured/issues/56

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-07 15:31:42 -08:00
Armin Kuster 72b05edff5 meta-security: add layer index callouts
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-07 15:31:34 -08:00
Armin Kuster 5b1d0ff414 tpm2-totp: update to 0.2.0
LIC_FILES_CHKSUM update to be true BSD-3-clause text
Drop patch included

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-05 18:00:46 -08:00
Armin Kuster 42df7b4eb0 tpm2-tss-engine: update to tip to us tss-tools 4.0.x
LIC_FILES_CHKSUM update to be true BSD-3-clause text

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-05 18:00:46 -08:00
Armin Kuster d49f702580 tpm2-tools: update to 4.0.1
LIC_FILES_CHKSUM added new copyrights

Migrate to https d/l from git clone

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-05 18:00:46 -08:00
Armin Kuster 405ad633aa tpm2-abrmd": update to 2.3.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-05 18:00:46 -08:00
Armin Kuster 02bd1dc6c7 tpm2-pkcs11: update to tip
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-05 18:00:37 -08:00
Norbert Kaminski 3743c5daae meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.1.bb: add new udev dir to FILES and append EXTRA_OECONF
The tpm2 tool freezes in a XEN distro. It stores the udev rules in
/lib/udev directory,
thus these changes append the FILES and EXTRA_OECONF to make tpm2 work
properly.

Signed-off-by: Norbert Kaminski <norbert.kaminski@3mdeb.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-27 13:38:58 -08:00
Christophe PRIOUZEAU 4dd3835150 cryptsetup tpm incubator: fix installed vs shipped
Fix [installed-vs-shipped] by adding /usr/lib/tmpfiles.d
on FILES.

Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-27 13:38:50 -08:00
Armin Kuster a0dee993cd layer.conf: Update for zeus series
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Acked-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-11 07:41:01 -07:00
Armin Kuster 76d3625bcf tpm2-pkcs11: update to tip
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-12 16:04:47 -07:00
Armin Kuster 278ef0fafa tpm2-tcti-uefi: update to tip
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-12 16:04:47 -07:00
Armin Kuster 17a3944dbf tpm2-totp: update to 0.1.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-12 16:04:47 -07:00
Armin Kuster c51ba72837 tpm2-tss-engine: update to 1.0.1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-12 16:04:47 -07:00
Armin Kuster b87717157e tpm2-tss: update to 2.3.0
drop patch already in update

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-12 16:04:47 -07:00
Armin Kuster c30907fda0 tpm2-abrmd: update to 2.2.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-12 16:04:47 -07:00
Armin Kuster b8528ffe48 swtpm: update to 0.2.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-12 16:04:47 -07:00
Armin Kuster 13b26b8df9 libtpm: update to 0.7.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-12 16:04:47 -07:00