155 Commits

Author SHA1 Message Date
Armin Kuster
0f79f5aa67 swtpm: fix check for tscd deamon on host
Found a few  places that tscd check was trying to run the hosts.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-12 07:00:47 -07:00
Armin Kuster
e70a97b570 swtpm: file pip3 issue
need native pip3, was using host's

Signed-off-by: Armin Kuster <akuster808@gmail.com>

--
V2]
add python3-cryptography-native to DEPENDS
forgot to add changes.
2021-04-02 08:21:34 -07:00
Armin Kuster
6bcba5f95c swtpm: now need python-cryptography, pull in layer
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-02 08:21:34 -07:00
Armin Kuster
775870980b swtpm: update to 0.5.2
Add python package

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-25 18:29:41 +00:00
Armin Kuster
5e1ae67684 tpm2-tss-engine: update 1.1.0
LIC_FILES_CHKSUM hash changed between branches.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-25 18:29:41 +00:00
Armin Kuster
f9fdf97730 layer.conf: Add hardknott to LAYERSERIES_COMPAT
Thats codename for 3.3

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-18 08:01:19 -07:00
Armin Kuster
77b17e6865 tpm-tools: update to 1.3.9.1
drop patch included in update

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09 08:52:21 -08:00
Armin Kuster
31aa858948 trousers: update to 0.3.15
includes: CVE-2020-24332, CVE-2020-24330, CVE-2020-24331

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09 08:52:21 -08:00
Armin Kuster
b6e41623f6 tpm2-topt: update 0.3.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09 08:52:21 -08:00
Armin Kuster
c8c31f0c1e tpm2-pkcs11: update to 1.5.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09 08:52:21 -08:00
Armin Kuster
b246b2d696 tpm2-tss: update to 3.0.3
include automate 2.70 fix

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09 08:52:21 -08:00
Armin Kuster
ef93f8c906 tpm2-tools: update to 5.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09 08:52:21 -08:00
Armin Kuster
caa7a1b527 tpm2-abrmd: update to 2.4.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09 08:52:21 -08:00
Armin Kuster
dff404dc36 ibmtpm2tss: update to 1.6.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09 08:52:21 -08:00
Armin Kuster
7e4ceed4f5 libtpm: update to 0.8.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>

--
V2]
let include the updated changes
2021-03-09 08:51:51 -08:00
Yi Zhao
0a3c0f3499 ibmswtpm2: disable camellia algorithm
The openssl in oe-core has disabled several deprecated algorithms
including camellia. Disable this algorithm to fix the build error.

Fixes:
TpmToOsslSym.h:185:42: error: unknown type name 'CAMELLIA_KEY'
  185 | #define tpmKeyScheduleCAMELLIA           CAMELLIA_KEY
      |                                          ^~~~~~~~~~~~

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-23 15:19:33 -08:00
Adrian Ratiu
6053e8b8e2 tpm2-pkcs11: build and package python tools
Signed-off-by: Adrian Ratiu <adrian.ratiu@collabora.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-12-24 14:40:04 -08:00
Armin Kuster
58c17d008d meta-security: Add gatesgarth to LAYERSERIES_COMPAT
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-19 18:14:23 -07:00
Armin Kuster
0a07bf8046 tpm2-pkcs11: update to 1.4.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-15 21:15:03 -07:00
Armin Kuster
02b62b859d tpm2-tools: update to 4.3.0
LIC_FILES_CHKSUM changes do to added Copyright

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-15 21:15:03 -07:00
Armin Kuster
9d6e3ff0ed tpm2-abrmd: update to 2.3.3
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-15 21:15:03 -07:00
Armin Kuster
8566325c96 tpm2-totp: update to 0.2.1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-15 21:15:03 -07:00
Armin Kuster
6c6e967b98 tpm2-tss: update to 2.4.3
includes: CVE-2020-24455

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-15 21:15:03 -07:00
Jens Rehsack
7486ab3f5b ibmtpm2tss: add recipe
Add recipe for companion of IBM Software TPM 2.0 - IBM's TPM 2.0 TSS.
It's a user space TSS for TPM 2.0.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-13 07:08:49 -07:00
Jens Rehsack
b9c72cc8bc ibmswtpm2: update to 1637
Update ibmswtpm2 from 1628 to 1637. Build 1637 Includes:
* Increase NV memory size to match PC Client RSA 3072 requirements
* Add and fix ACT support
* Update Visual Studio files to 2019.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-12 08:55:28 -07:00
Zheng Ruoqin
4221e5621c trousers: Fix the problem that do_package fails when multilib is enabled.
The following error will occur when multilib is enabled:
ERROR: trousers-0.3.14+gitAUTOINC+e74dd1d967-r0 do_package: QA Issue: trousers: Files/directories were installed but not shipped in any package:
  /lib
  /lib/systemd
  /lib/systemd/system
  /lib/systemd/system/tcsd.service

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-12 08:55:28 -07:00
Armin Kuster
fa9f747360 cryptsetup-tpm-incubator: remove reference from other files
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-05 11:01:47 -07:00
Armin Kuster
95b8dd3619 cryptsetup-tpm-incubator: drop recipe
The upstream package appears to tbe dead so drop it.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-05 11:01:35 -07:00
Armin Kuster
55cbb63634 trousers: update to tip
Many for compile issue now being seen.

rpc/tcstp/.libs/libtspi_la-rpc_cmk.o:/usr/src/debug/trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/build/src/tspi/../../../git/src/include/tcsd.h:169: multiple definition of `tcsd_sa_int'; .libs/libtspi_la-tspi_context.o:/usr/src/debug/trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/build/src/tspi/../../../git/src/include/tcsd.h:169: first defined here
| collect2: error: ld returned 1 exit status

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-29 07:25:10 -07:00
Armin Kuster
787ba6faea trousers: Several Security fixes
Fixes:
CVE-2020-24332
CVE-2020-24330
CVE-2020-24331

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-17 15:08:14 -07:00
Armin Kuster
38715478be packagegroup-security-tpm: add more packages for building
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-25 09:00:39 -07:00
Yi Zhao
f923d63820 ibmswtpm2: upgrade 1563 -> 1628
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-25 09:00:39 -07:00
Armin Kuster
fc1693a967 layer.conf: add dynamic-layer for strongswan
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-18 18:26:44 -07:00
Armin Kuster
f4dd53438a strongswan: add bbappends for tpm changes
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-18 18:26:44 -07:00
Jeremy Puhlman
ed7875b085 packagegroup-security-tpm2: Depend on preferred provider for cryptsetup
Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-14 21:30:07 -07:00
Jeremy Puhlman
bedfdc1fb9 cryptsetup-tpm-incubator: RPROVIDES cryptsetup and cryptsetup-dev
Without this we get weird conflict when you include dev packages:
rror: Transaction check error:
  file /usr/include/libcryptsetup.h conflicts between attempted installs of
cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and
lib32-cryptsetup-dev-2.3.2-r0.1.i586
  file /usr/lib64/libcryptsetup.so conflicts between attempted installs of
cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and
cryptsetup-dev-2.3.2-r0.1.corei7_64
  file /usr/lib64/pkgconfig/libcryptsetup.pc conflicts between attempted
installs of cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and
cryptsetup-dev-2.3.2-r0.1.corei7_64
  file /usr/lib/libcryptsetup.so conflicts between attempted installs of
lib32-cryptsetup-tpm-incubator-dev-0.9.9-r0.i586 and
lib32-cryptsetup-dev-2.3.2-r0.1.i586
  file /usr/lib/pkgconfig/libcryptsetup.pc conflicts between attempted installs
of lib32-cryptsetup-tpm-incubator-dev-0.9.9-r0.i586 and
lib32-cryptsetup-dev-2.3.2-r0.1.i586

Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-14 21:30:07 -07:00
Armin Kuster
1fb8497081 tpm2-tcti-uefi: drop patch no longer needed
drop tpm2-get-caps-fixed.patch, tss update negated the need for this
change.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:23 -07:00
Armin Kuster
3cd65d96c1 libtpm: update to 0.7.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:23 -07:00
Armin Kuster
26bb4e7d08 tpm2-pkcs11: update 1.2.0
add yaml package
Updated LICNESE

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:23 -07:00
Armin Kuster
60f93f8066 tpm2-tss-engine: add branch to SRC_URI & update to tip
LICENSE changed to BSD 3

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:23 -07:00
Armin Kuster
df8a690941 tpm2-tss: update to 2.4.1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:23 -07:00
Armin Kuster
d9d31d1f66 tpm2-tools: update to 4.1.3
LICENSE changed to BSD3

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-19 16:03:16 -07:00
Martin Jansa
7f7897590c layer.conf: update LAYERSERIES_COMPAT for dunfell
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27 16:53:25 -07:00
André Draszik
d7ca573c36 linux-yocto: update the bbappend to 5.x
As linux-yocto upgraded to 5.x in oe-core, update
the bbappend to 5.x to remove the warning

ERROR: No recipes available for:
  .../meta-security/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend

This patch hasn't been verified any further than allowing bitbake
to complete with a non-linux-yocto kernel. In particular options could
be different, or new ones needed / desired.

Signed-off-by: André Draszik <git@andred.net>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08 14:13:07 -07:00
Armin Kuster
69ad1d51fd libtpm: fix build issue over pod2man
/bin/bash: pod2man: command not found
| Makefile:585: recipe for target 'TPMLIB_CancelCommand.3' failed

inherit perlnative to fix

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-05 08:06:51 -08:00
Armin Kuster
676d7166a2 ibmswtpm2: update to 1563
fix build issue

[v2]
Fix subject line

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-10 19:13:52 -08:00
Armin Kuster
5f258016b3 tpm2-tss: update to 2.3.2
clean up reciped. drop git fetching

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-10 19:13:52 -08:00
Armin Kuster
e87130f429 tpm2-tcti-uefi: fix build issue for i386 machine
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-10 19:13:52 -08:00
Armin Kuster
f2e9e8f96f tpm2-tools: update to 4.1.1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-10 19:13:52 -08:00
Armin Kuster
84fb57b53f swtpm: fix configure error
checking for whether to build with seccomp profile... configure: error: "Is libseccomp-devel installed? -- could not get cflags for libseccomp"

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-01 09:52:51 -08:00