summaryrefslogtreecommitdiffstats
path: root/meta-encrypted-storage/recipes-tpm
Commit message (Collapse)AuthorAgeFilesLines
* recipes: update SRC_URI branch and protocolsYi Zhao2021-11-151-1/+1
| | | | | | | Update SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* cryptfs-tpm2: upgrade to latest git revYi Zhao2021-11-123-83/+1
| | | | | | Drop backported patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* cryptfs-tpm2: fix encrypt_secret.py for python3Yi Zhao2021-08-202-0/+57
| | | | | | | | | Fixes: encrypt_secret.py -i "H31i05" > "primary_key.secret" || exit 1 ERROR: Unable to encrypt the secret Suggested-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* cryptfs-tpm2: fix LDFLAGS expansionYi Zhao2021-08-202-0/+44
| | | | | | | | When LDFLAGS expands, The -fmacro-prefix-map and -fdebug-prefix-map will be prefixed with -Wl, which will cause compilation error: ld: -f may not be used without -shared Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* meta-secure-core: Convert to new override syntaxYi Zhao2021-08-091-5/+5
| | | | | | Converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* cryptfs-tpm2: fix build reproducibility issueYi Zhao2021-08-092-0/+59
| | | | | | | | | | | | | | Fixes: | main.c: In function 'show_banner': | main.c:43:62: error: macro "__DATE__" might prevent reproducible builds [-Werror=date-time] | 43 | info_cont("Build Time: " __DATE__ " " __TIME__ "\n\n"); | | ^ | main.c:43:34: error: macro "__TIME__" might prevent reproducible builds [-Werror=date-time] | 43 | info_cont("Build Time: " __DATE__ " " __TIME__ "\n\n"); | | ^~~~~~~~ | cc1: all warnings being treated as errors Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* cyrptfs-tpm2: set correct soname for libcryptfs-tpm2Yi Zhao2020-07-183-0/+49
| | | | | | | | | | | | | | | | | | | The current soname of libcryptfs-tpm2 is libcryptfs-tpm2.so: $ readelf -d libcryptfs-tpm2.so.0.7.0 | grep SONAME 0x000000000000000e (SONAME) Library soname: [libcryptfs-tpm2.so] The libcryptfs-tpm2.so is a symbolic link of libcryptfs-tmp2.so.0.7.0 and it is not installed by default because it is packaged to dev package. Then we will encounter an error when run command cryptfs-tpm2: $ cryptfs-tpm2 cryptfs-tpm2: error while loading shared libraries: libcryptfs-tpm2.so: cannot open shared object file: No such file or directory $ ldd cryptfs-tpm2 | grep libcryptfs-tpm2 libcryptfs-tpm2.so => not found Set the soname to libcryptfs-tpm2.so.$(MAJOR_VERSION) to fix the issue. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* update tpm2-tools_3.2.1 -> tpm2-tools_4.1.1.bb, tpm2-abrmd_2.0.3 -> ↵richard2020-06-272-0/+12
| | | | tpm2-abrmd_2.3.0, tpm2-tss_2.2.3.bb -> tpm2-tss_2.3.2.bb
* cryptfs-tpm2: convert the script to python3Yi Zhao2020-03-192-0/+33
| | | | | | | | | | | Convert the script to python3 to fix the do_compile failure. Fixes: /buildarea/poky/build/tmp/work/core2-64-poky-linux/cryptfs-tpm2/0.7.0+gitAUTOINC+888c46c827-r0/git/scripts/encrypt_secret.py -i "H31i05" > "primary_key.secret" || exit 1 /usr/bin/env: ‘python’: No such file or directory Makefile:64: recipe for target 'primary_key.secret' failed Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* cryptfs-tpm2: Add support for QEMU swtpm tpm2Jason Wessel2019-11-082-0/+34
| | | | | | | | | | The device nodes are in a different place when using the swtpm + ovfm + qemu. The luks-setup.sh needs to look in an additional location to properly support qemu. [ Issue: LINUXEXEC-2450 ] Signed-off-by: Jason Wessel <jason.wessel@windriver.com>
* cryptfs-tpm2: Fix build faiure due to -fstack-protector-strongJia Zhang2018-09-171-0/+1
| | | | | | | SECURITY_LDFLAGS includes -fstack-protector-strong which cannot work with CCLD. To work around this issue, filter out it from LDFLAGS. Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
* cryptfs-tpm2: Update to the latestJia Zhang2018-09-171-3/+4
| | | | | | | - Follow up the regular way to include header file. - Use CCLD to build executable and library. Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
* cryptfs-tpm2: uprev to 0.7Yunguo Wei2018-09-121-6/+6
| | | | | | | | Now cryptfs-tpm2 supports both TSS 1.x and 2.x API. Please specify "TSS2_VER=1" in EXTRA_OEMAKE to support 1.x API. Signed-off-by: Yunguo Wei <yunguo.wei@windriver.com>
* cryptfs-tpm2: update to 0.6.3Jia Zhang2018-06-161-2/+2
| | | | Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
* tpm2.0-tss: rename -> tpm2-tssTrevor Woerner2018-05-301-1/+1
| | | | | | Unify how the TPM2 recipes are named. Signed-off-by: Trevor Woerner <twoerner@gmail.com>
* tpm2.0-tools: rename -> tpm2-toolsTrevor Woerner2018-05-301-2/+2
| | | | | | Unify how the TPM2 recipes are named. Signed-off-by: Trevor Woerner <twoerner@gmail.com>
* cryptfs-tpm2: Update the upstream URLJia Zhang2018-03-131-2/+2
| | | | Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
* meta-secure-core: update TSS 2.0 to the latest stable versionJia Zhang2018-02-191-2/+2
| | | | Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
* encrypted-storage: use luks as the feature name for current implementationJia Zhang2017-08-201-1/+1
| | | | | | | | encrypted-storage layer will include more security features about encrypted storage so the term "encrypted-storage" won't be used to specify a dedicated technology term such as "LUKS". Signed-off-by: Jia Zhang <lans.zhang2008@gmail.com>
* cryptfs-tpm2: sync up with upstreamLans Zhang2017-08-161-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: sync up with upstreamLans Zhang2017-08-091-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: fix RDEPENDSLans Zhang2017-08-041-5/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: change the SECTIONLans Zhang2017-07-201-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: add author and homepage infoLans Zhang2017-07-131-0/+3
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* seloader, libsign, cryptfs-tpm2: code style fixupLans Zhang2017-07-131-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Clean up RDEPENDSLans Zhang2017-07-051-3/+54
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: sync up with upstreamLans Zhang2017-07-051-2/+6
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: code style fixupLans Zhang2017-07-051-13/+15
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: sync up with upstreamLans Zhang2017-06-261-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-secure-core: initial commitLans Zhang2017-06-221-0/+55
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>