This version comes with a pkcs11 provider called 'pkcs11prov'.
Configure modules directory for native build for the provider.
Install provider to target.
Signed-off-by: Denis OSTERLAND-HEIM <denis.osterland@diehl.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
openssl-native is compiled with a engine path /not/builtin
and the config file provides the actual path.
The configure script looks up this not working path.
To make it work, provide the runtime path via configure argument.
Signed-off-by: Denis OSTERLAND-HEIM <denis.osterland@diehl.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Please see
https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265
for what changes are needed, and sed commands that can be used to make them en masse.
I've verified that bitbake -c patch world works with these, but did not run a world
build; the majority of recipes shouldn't need further fixups, but if there are
some that still fall out, they can be fixed in followups.
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0001-detect-correct-openssl-3.x.patch
removed since it's included in 0.4.13
Changelog:
=========
- Increased maximum PIN length
- Fixed several memory leaks
- Don't include libp11.rc VERSIONINFO into pkcs11
- Reimplement CI with GitHub Actions
- Improved tests
- Added static ENGINE (libpkcas11.a) build
- Added a workaround broken foreign key handling in OpenSSL
3.0.12-3.0.13, 3.1.4-3.1.5, 3.2.0-3.2.1
- Added a workaround for conflicting atexit() callbacks
- Always login with PIN If FORCE_LOGIN is specified in openssl config
- Added OAEP support to RSA_private_decrypt
- Added PKCS11_enumerate_*_ext functions
- Fixed non-null-terminated label padding
- Fixed several object management issues
- Deferred libp11 initialization until needed
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
Fixed using an explicitly provided PIN regardless of the secure login flag
Fixed RSA_PKCS1_PADDING handling
Fixed a crash on LLP64, including 64-bit Windows
Fixed searching objects when both ID and label are specified
Fixed the OAEP "source" parameter
Fixed object searching by label
Fixed thread safety in slot enumeration
Fixed storing certificates on tokens
Fixed several memory leaks
Fixed OpenSSL 3.0 compatibility
Fixed LibreSSL compatibility
Major concurrency improvements and refactoring
Added re-numeration of slots as an engine control command
Added the PKCS11_update_slots() API function
Added support for the SHA3 hash function
Added a self-test for engine RSA operations
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is the result of automated script (0.9.1) conversion:
oe-core/scripts/contrib/convert-overrides.py .
converting the metadata to use ":" as the override character instead of "_".
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The latest upstream release is still 0.4.10 (2019-04-03), as
available at https://github.com/OpenSC/libp11/releases.
This reverts commit 4990f80ddb as it was
incorrect, since there is no 11 release, and SRCREV used was actually
from the 0.4.9 release.
Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is needed as a dependency when using SoftHSM from the PKCS#11
OpenSSL engine for code singing.
Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade libp11 from 0.4.0 to 0.4.7.
* the parallel make issue has been fix in upstream, so remove
restriction of parallel make
* update FILES
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
ERROR: libp11-0.3.0-r0 do_fetch: Function failed: Fetcher failure for URL: 'git://github.com/OpenSC/libp11.git;protocol=http'. Unable to fetch URL from any source.
removed "protocol=http:
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
libp11 is a library implementing a small layer on top of PKCS
make using PKCS
Signed-off-by: Qian Lei <qianl.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
