summaryrefslogtreecommitdiffstats
path: root/meta-tpm/recipes-tpm2
Commit message (Collapse)AuthorAgeFilesLines
* tpm2-tools: update to 4.1.3dunfell-nextRalph Siemsen2022-03-171-5/+5
| | | | | | | | | | | | | | | | | | Minor version bump from 4.1.1 to 4.1.3, containing two fixes: 4.1.3 - 2020-06-02 * tpm2_create: Fix issue with userauth attribute being cleared if policy is specified. 4.1.2 - 2020-05-18 * Fix missing handle maps for ESY3 handle breaks. See #1994. https://github.com/tpm2-software/tpm2-tools/pull/1994 Details of changes https://github.com/tpm2-software/tpm2-tools/commits/4.1.X Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: backport fix for CVE-2021-3565Ralph Siemsen2022-03-172-0/+51
| | | | | | | | | | | | | | | | tpm2_import used a fixed AES key for the inner wrapper, which means that a MITM attack would be able to unwrap the imported key. Even the use of an encrypted session will not prevent this. The TPM only encrypts the first parameter which is the fixed symmetric key. To fix this, ensure the key size is 16 bytes or bigger and use OpenSSL to generate a secure random AES key. Upstream commit (with offset adjusted) https://github.com/tpm2-software/tpm2-tools/commit/c069e4f179d5e6653a84fb236816c375dca82515 Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmswtpm2: fix QA warningArmin Kuster2020-10-161-1/+2
| | | | | | ibmswtpm2 doesn't have GNU_HASH (didn't pass LDFLAGS?) [ldflags Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup-tpm-incubator: RPROVIDES cryptsetup and cryptsetup-devJeremy Puhlman2020-07-141-0/+5
| | | | | | | | | | | | | | | | | | | | | | | Without this we get weird conflict when you include dev packages: rror: Transaction check error: file /usr/include/libcryptsetup.h conflicts between attempted installs of cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and lib32-cryptsetup-dev-2.3.2-r0.1.i586 file /usr/lib64/libcryptsetup.so conflicts between attempted installs of cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and cryptsetup-dev-2.3.2-r0.1.corei7_64 file /usr/lib64/pkgconfig/libcryptsetup.pc conflicts between attempted installs of cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and cryptsetup-dev-2.3.2-r0.1.corei7_64 file /usr/lib/libcryptsetup.so conflicts between attempted installs of lib32-cryptsetup-tpm-incubator-dev-0.9.9-r0.i586 and lib32-cryptsetup-dev-2.3.2-r0.1.i586 file /usr/lib/pkgconfig/libcryptsetup.pc conflicts between attempted installs of lib32-cryptsetup-tpm-incubator-dev-0.9.9-r0.i586 and lib32-cryptsetup-dev-2.3.2-r0.1.i586 Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmswtpm2: update to 1563Armin Kuster2020-02-103-24/+53
| | | | | | | | | fix build issue [v2] Fix subject line Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: update to 2.3.2Armin Kuster2020-02-101-9/+9
| | | | | | clean up reciped. drop git fetching Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: fix build issue for i386 machineArmin Kuster2020-02-104-12/+77
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: update to 4.1.1Armin Kuster2020-02-102-14/+17
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd: Port command line options to new version.Philip Tricca2019-12-071-1/+1
| | | | | | | | These have changed upstream. Signed-off-by: Philip Tricca <flihp@twobit.org> Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd-init.sh: fix for /dev/tpmrmXTrevor Woerner2019-12-071-1/+1
| | | | | | | | | | | | Newer kernels, in addition to the traditional /dev/tpmX device nodes, are now also creating /dev/tpmrmX device nodes. This causes this script to get confused and abort, meaning tpm2-abrmd does not get started during boot. Fix for https://github.com/flihp/meta-measured/issues/56 Signed-off-by: Trevor Woerner <twoerner@gmail.com> Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-totp: update to 0.2.0Armin Kuster2019-12-052-39/+3
| | | | | | | LIC_FILES_CHKSUM update to be true BSD-3-clause text Drop patch included Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss-engine: update to tip to us tss-tools 4.0.xArmin Kuster2019-12-051-2/+2
| | | | | | LIC_FILES_CHKSUM update to be true BSD-3-clause text Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: update to 4.0.1Armin Kuster2019-12-052-15/+14
| | | | | | | | LIC_FILES_CHKSUM added new copyrights Migrate to https d/l from git clone Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd": update to 2.3.0Armin Kuster2019-12-051-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: update to tipArmin Kuster2019-12-051-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.1.bb: add new udev dir to FILES ↵Norbert Kaminski2019-11-271-1/+3
| | | | | | | | | | | | and append EXTRA_OECONF The tpm2 tool freezes in a XEN distro. It stores the udev rules in /lib/udev directory, thus these changes append the FILES and EXTRA_OECONF to make tpm2 work properly. Signed-off-by: Norbert Kaminski <norbert.kaminski@3mdeb.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup tpm incubator: fix installed vs shippedChristophe PRIOUZEAU2019-11-271-0/+1
| | | | | | | | Fix [installed-vs-shipped] by adding /usr/lib/tmpfiles.d on FILES. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: update to tipArmin Kuster2019-09-121-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: update to tipArmin Kuster2019-09-121-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-totp: update to 0.1.2Armin Kuster2019-09-121-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss-engine: update to 1.0.1Armin Kuster2019-09-121-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: update to 2.3.0Armin Kuster2019-09-122-87/+2
| | | | | | drop patch already in update Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd: update to 2.2.0Armin Kuster2019-09-121-2/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup-tpm-incubator: fix QA error RDEPENDSArmin Kuster2019-09-071-1/+1
| | | | | | ERROR: cryptsetup-tpm-incubator-0.9.9-r0 do_package_qa: QA Issue: /usr/lib/libcryptsetup.so.12.3.0 contained in package cryptsetup-tpm-incubator requires libdevmapper.so.1.02(DM_1_02_97)(64bit), but no providers found in RDEPENDS_cryptsetup-tpm-incubator? [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: build and install examplesDmitry Eremin-Solenikov2019-08-041-0/+13
| | | | | | | | Examples are usefull to actually check TPM2 from UEFI shell. Add them to tpm2-tcti-uefi package. Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: stop inserting host directories into build pathDmitry Eremin-Solenikov2019-08-042-0/+28
| | | | | | | Do not insert /usr/lib and /usr/lib64 into LDFLAGS. Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: fix configure argumentsDmitry Eremin-Solenikov2019-08-041-1/+8
| | | | | | | Pass correct location of EFI's crt0 and ld script. Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: add autoconf-archive-native dependencyDmitry Eremin-Solenikov2019-08-041-1/+1
| | | | | | | Add dependency on autoconf-archive-native to receive AX_* macro definitions. Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: fix compilation when using updated AX_CODE_COVERAGE macroDmitry Eremin-Solenikov2019-08-042-1/+86
| | | | | | | | | New autoconf-archive comes with updated AX_CODE_COVERAGE macro, which is not compatible with current tpm2-tss source base. Apply upstream patch to fix this incompatibility. Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss-engine: update to 1.0.0Armin Kuster2019-06-261-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-totp: update to offical release v0.1.1Armin Kuster2019-06-262-17/+18
| | | | | | Clean up recipe to match actual app Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: update to 2.2.3Armin Kuster2019-06-261-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: update to 3.2.0Armin Kuster2019-06-261-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: update to tipArmin Kuster2019-06-261-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11/tpm2-pkcs11: update to tipArmin Kuster2019-06-261-2/+2
| | | | | | license-check-sum: Add SPDX format Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2.0 prefix: rename to tpm2 take2Armin Kuster2019-03-254-6/+6
| | | | | | v1 was commited. This is the additional changes. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2.0 prefix: rename to tpm2Armin Kuster2019-03-234-0/+0
| | | | | | this aligns with the rest of the tpm2 recipes Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2simulator: replaced by ibmswtpm2Armin Kuster2019-03-231-22/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmswtpm2: Add new recipeArmin Kuster2019-03-231-0/+24
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: add new packageArmin Kuster2019-03-172-0/+33
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: add new packageArmin Kuster2019-03-172-0/+45
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup-tpm-incubator: add new packageArmin Kuster2019-03-172-0/+57
| | | | | | | [v2] add missing patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2.0-tools: fix protocolArmin Kuster2019-03-161-1/+1
| | | | | | | A commit amend misstep didn't capture the https to git change in SRC_URI. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-totp: add new packageArmin Kuster2019-03-162-0/+53
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2: move tpm2 apps to recipes-tpm2Armin Kuster2019-03-169-0/+623
Signed-off-by: Armin Kuster <akuster808@gmail.com>