summaryrefslogtreecommitdiffstats
path: root/meta-tpm/recipes-tpm2
Commit message (Collapse)AuthorAgeFilesLines
* tpm2-tss: upgrade 3.2.2 -> 3.2.3Vijay Anusuri2024-09-151-1/+1
| | | | | | | | | | | Changelog: https://github.com/tpm2-software/tpm2-tss/releases/tag/3.2.3 Includes Security fix: CVE-2024-29040 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: Upgrade 5.2 -> 5.7Vijay Anusuri2024-09-151-7/+2
| | | | | | | | | | | | | | | | Include Security fixes: Fixed CVE-2024-29038 Fixed CVE-2024-29039 Changelog: https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7 https://github.com/tpm2-software/tpm2-tools/releases/tag/5.6 https://github.com/tpm2-software/tpm2-tools/releases/tag/5.5 https://github.com/tpm2-software/tpm2-tools/releases/tag/5.4 https://github.com/tpm2-software/tpm2-tools/releases/tag/5.3 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: ignore CVE-2023-22745Peter Marko2023-07-301-0/+3
| | | | | | | | As already mentioned in upgrade commit, this CVE is fixed. But cve_check still reports it as NVD DB was not updated. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: upgrade to 3.2.2 to fix CVE-2023-22745Peter Marko2023-06-081-6/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: 3.2.2 A buffer overflow in tss2-rc as CVE-2023-22745. The drv layer in tss2-rc should have been the policy layer. Spec deviation in Fapi_GetDescription caused description to be NULL when it should be empty string. This is API breaking but considered a bug since it deviated from the FAPI spec. FAPI: undefined reference to curl_url_strerror when using curl less than 7.80.0. 3.2.1 Makefile.am: make all EXTRA_DIST includes unconditional to fix pristine tars Fix usage of NULL pointer if Esys_TR_SetAuth is calles with ESYS_TR_NONE. Store VERSION into the release tarball. fapi: fix usage of policy_nv with a TPM nv index. Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea handle and not as parameter one, this affected the contents of cpHash. linking tcti for libtpms against tss2-tctildr. It should be linked against tss2-mu. build: Remove erroneous trailing comma in linker option. Bug #2391. esys: fix allow usage of HMAC sessions for Esys_TR_FromTPMPublic. test: build with opaque FILE structure like in musl libc. Usage of a second profile in a path was not possible because the default profile was always used. FAPI: Fix provisioning if auth value for storage hierarchy was set. FAPI: Fix recreation of EK. FAPI: Fix usage of lockout auth value in Fapi_Provison. FAPI: Fix loading of key in policy execution. FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being reflected across profiles. Esys_PCR_SetAuthValue: remembers the auth like other SetAutg ESAPI functions. tests: esys-pcr-auth-value.int moved to destructive tests. FAPI: Fix double free if keystore is corrupted. Spec deviation in Fapi_GetDescription caused description to be NULL when it should be empty string. This is API breaking but considered a bug since it deviated from the FAPI spec. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: Add missing rdependsArmin Kuster2022-05-231-0/+3
| | | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 311b7daea1eac094b7221c8b487b5e94b0605fc6) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: tpm2-pkcs11 module missingArmin Kuster2022-05-231-2/+7
| | | | | | | | Correctly fix symlink issue by putting module in -dev pkg. Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 3045de13abe1ee6c39e06d1ce0d2b31478d2ff35) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: update to 1.8.0Petr Gotthard2022-04-135-1498/+7
| | | | | | | | | The build patches are now included in the upstream, the local binary checkes can be disabled with --disable-ptool-checks, the boostrap doesn't need to be called if the release .tar.gz is used. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss-engine: fix version string and build with openssl 3.0Petr Gotthard2022-04-131-6/+13
| | | | | | | | | | | Calling autoreconf outside git repo causes the version number to be null. This patch makes the version number fixed. Since Yocto now uses OpenSSL 3.0, the file packaging need to be updated. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd: update to 2.4.1Petr Gotthard2022-04-131-4/+2
| | | | | | | | The version number is correctly assigned only when the release .tar.gz is used. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: update to 3.2.0Petr Gotthard2022-04-134-377/+22
| | | | | | | | | This deletes the patches that were unused for a long time, updates the tpm2-tss package and introduces a fix to the version number problem that got introduced with the 3.2.0 version. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-openssl: update to 1.1.0Petr Gotthard2022-04-132-11/+19
| | | | | | | | | | | | | Also, the recipe is fixed to correctly package the openssl provider. This new tpm2-openssl: - Fixed segmentation fault when a signature algorithm is beging initialized without a private key. - Fixed RSA/EC key equality checks. Works with OpenSSL 3.0.1. - Added support for the `TPM2OPENSSL_PARENT_AUTH` environment variable. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: fix missing version numberPetr Gotthard2022-04-131-0/+5
| | | | | | | | Calling autoreconf outside git repo causes the version number to be null. This patch makes the version number fixed. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: fix user permsArmin Kuster2022-03-111-5/+4
| | | | | | [Yocto #14724] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: fix RDEPENDS variablePatrick Williams2022-02-201-1/+1
| | | | | | | | The RDEPENDS variable was misspelled and as a result was never fixed up with the `_${PN}` to `:${PN}` transition. Fix both aspects. Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: update to 3.1.0Armin Kuster2022-02-203-52/+38
| | | | | | Drop 001-configure.ac-fix-compatibility-with-autoconf-2.70.patch which is included in update. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11_1.7.0: Drop dstat from DPENDSArmin Kuster2022-01-301-1/+1
| | | | | | dstat was removed from meta-oe. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: backport openssl 3.x build fixesArmin Kuster2021-12-273-1/+1401
| | | | | | bump to tip of current sources. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: update to 1.7.0Armin Kuster2021-12-251-295/+0
| | | | | | drop patch now included. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: fix fapi package configStefan Mueller-Klieser2021-11-071-2/+7
| | | | | | | | | | | | | When enabling fapi, the build breaks with: | configure: error: Package requirements (libcurl) were not met: | No package 'libcurl' found This adds the missing dependency and bundles the additional config files in the base package. Signed-off-by: Stefan Müller-Klieser <s.mueller-klieser@phytec.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* recipes: Update SRC_URI branch and protocolsArmin Kuster2021-11-045-5/+5
| | | | | | | | This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: update to 1.7.0Armin Kuster2021-10-261-2/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-openssl: add new pkgArmin Kuster2021-10-261-0/+11
| | | | | | openssl 3.x support for tpm2 tss function found in tpm2-ssl Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: update to 5.2Armin Kuster2021-10-261-1/+1
| | | | | | | | openssl 3.0 support see https://github.com/tpm2-software/tpm2-tools/releases/tag/5.2 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmswtpm2: set precise BSD licenseArmin Kuster2021-09-151-1/+1
| | | | | | "BSD" is ambiguous, use the precise licenses BSD-2-Clause Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmtpm2tss: set precise BSD licenseArmin Kuster2021-09-151-1/+1
| | | | | | "BSD" is ambiguous, use the precise licenses BSD-2-Clause Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-tpm: Convert to new override syntaxArmin Kuster2021-08-015-40/+40
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: fix usrmerge udev install pathRicardo Salveti2021-06-051-2/+2
| | | | | | | | | | | Update ${base_prefix}/lib to ${nonarch_base_libdir} to fix a package QA issue when usrmerge is enabled in DISTRO_FEATURES. QA Issue: tpm2-tss package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge] Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmtpm2tss: update to tipArmin Kuster2021-05-161-1/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmswtpm2: update to 1661Armin Kuster2021-05-162-33/+4
| | | | | | Drop patch now included in updated Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: Update to 1.6.0Armin Kuster2021-05-162-8/+314
| | | | | | | | Includes gcc11 fix. Added p11-kit Minor cleanup Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss-engine: update 1.1.0Armin Kuster2021-03-251-3/+3
| | | | | | LIC_FILES_CHKSUM hash changed between branches. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-topt: update 0.3.0Armin Kuster2021-03-091-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: update to 1.5.0Armin Kuster2021-03-091-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: update to 3.0.3Armin Kuster2021-03-092-2/+52
| | | | | | include automate 2.70 fix Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: update to 5.0Armin Kuster2021-03-091-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd: update to 2.4.0Armin Kuster2021-03-091-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmtpm2tss: update to 1.6.0Armin Kuster2021-03-092-18/+14
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmswtpm2: disable camellia algorithmYi Zhao2021-01-231-1/+1
| | | | | | | | | | | | | The openssl in oe-core has disabled several deprecated algorithms including camellia. Disable this algorithm to fix the build error. Fixes: TpmToOsslSym.h:185:42: error: unknown type name 'CAMELLIA_KEY' 185 | #define tpmKeyScheduleCAMELLIA CAMELLIA_KEY | ^~~~~~~~~~~~ Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: build and package python toolsAdrian Ratiu2020-12-241-2/+23
| | | | | Signed-off-by: Adrian Ratiu <adrian.ratiu@collabora.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: update to 1.4.0Armin Kuster2020-10-152-2/+82
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: update to 4.3.0Armin Kuster2020-10-152-2/+2
| | | | | | LIC_FILES_CHKSUM changes do to added Copyright Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd: update to 2.3.3Armin Kuster2020-10-151-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-totp: update to 0.2.1Armin Kuster2020-10-151-3/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: update to 2.4.3Armin Kuster2020-10-151-3/+1
| | | | | | includes: CVE-2020-24455 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmtpm2tss: add recipeJens Rehsack2020-09-132-0/+152
| | | | | | | | Add recipe for companion of IBM Software TPM 2.0 - IBM's TPM 2.0 TSS. It's a user space TSS for TPM 2.0. Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmswtpm2: update to 1637Jens Rehsack2020-09-125-52/+116
| | | | | | | | | | Update ibmswtpm2 from 1628 to 1637. Build 1637 Includes: * Increase NV memory size to match PC Client RSA 3072 requirements * Add and fix ACT support * Update Visual Studio files to 2019. Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup-tpm-incubator: drop recipeArmin Kuster2020-09-052-63/+0
| | | | | | The upstream package appears to tbe dead so drop it. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmswtpm2: upgrade 1563 -> 1628Yi Zhao2020-07-252-27/+26
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup-tpm-incubator: RPROVIDES cryptsetup and cryptsetup-devJeremy Puhlman2020-07-141-0/+5
| | | | | | | | | | | | | | | | | | | | | | | Without this we get weird conflict when you include dev packages: rror: Transaction check error: file /usr/include/libcryptsetup.h conflicts between attempted installs of cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and lib32-cryptsetup-dev-2.3.2-r0.1.i586 file /usr/lib64/libcryptsetup.so conflicts between attempted installs of cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and cryptsetup-dev-2.3.2-r0.1.corei7_64 file /usr/lib64/pkgconfig/libcryptsetup.pc conflicts between attempted installs of cryptsetup-tpm-incubator-dev-0.9.9-r0.corei7_64 and cryptsetup-dev-2.3.2-r0.1.corei7_64 file /usr/lib/libcryptsetup.so conflicts between attempted installs of lib32-cryptsetup-tpm-incubator-dev-0.9.9-r0.i586 and lib32-cryptsetup-dev-2.3.2-r0.1.i586 file /usr/lib/pkgconfig/libcryptsetup.pc conflicts between attempted installs of lib32-cryptsetup-tpm-incubator-dev-0.9.9-r0.i586 and lib32-cryptsetup-dev-2.3.2-r0.1.i586 Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: drop patch no longer neededArmin Kuster2020-06-192-25/+2
| | | | | | | drop tpm2-get-caps-fixed.patch, tss update negated the need for this change. Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-08 02:28:34 +0000