From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 23 Apr 2026 12:51:56 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wFrf2-00FShA-1y for lore@lore.pengutronix.de; Thu, 23 Apr 2026 12:51:56 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wFrf2-00079N-GN; Thu, 23 Apr 2026 12:51:56 +0200 Received: from mail-germanywestcentralazlp170120004.outbound.protection.outlook.com ([2a01:111:f403:c20c::4] helo=FR5P281CU006.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1wFreo-00078E-Jw; Thu, 23 Apr 2026 12:51:43 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=VXQjEfPDEX16zk5YtKWNmmwavMqOr5RuUlnV7o+ppzhHZPgszNgcZ2jFxqL2/bGVHpz3UDT9PEy8LuwIPuD08WqKunxysNyuMIudo1kqU/izT/K1ZA/x4fiNyExq42VxVWwgser9uN6zEDEKQqyHlvF2wHobGk13fbWX8xwO9rP5GaQN63IxhxiYaHriuwxBX37pZPAdZBzq/ow1wBpKPM6tRdigs8cq1uAg+q/IZlzQQe3pdRHbSnd6YfN8+uXJM8NOIoUwn9yMphzDTgFabaTaopbi6xZLWruevrA3GkZBcMPtquT3pPKg7CPK1FTwnjQoQU4Jb10yxqgNdzFkNg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=O9tliK7B+6w9w3Kz68M82khAEFaEV3KATV4gd3X2Mi8=; b=TUC+hgvmRdTox7YhhcopSiINxTsHQUmh7V5h0iGZQj24HO3EkWuazbDXr8/LEykGgUjiR/cNMiIyfaLYHT1Qe6ddYTctylwp2ZYCC4NiqfQZmDw3K4wENRqCl8q5EbktpyJksQ5NIH2uDUbXX0dVaH8cUv/x3pJfVKx9V6hc7+517rQnfuALoWs/5bnzmZgZr8WHKiuAfa26h/36yRZJVDN4VyGgrnEitSuSdxFrRTlc3VWyLtTbyANhiOr63EEIZAMeIdamrCbgHGyrygWJwaotzqeK+qAmNW89JEupczt90gUYYiQPYPd3K55giwOiNMQVPw9r1vBb0l5eHa30sg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=eckelmann.de; dmarc=pass action=none header.from=eckelmann.de; dkim=pass header.d=eckelmann.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=eckelmann.de; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=O9tliK7B+6w9w3Kz68M82khAEFaEV3KATV4gd3X2Mi8=; b=peiOluza3Iiu0XM3utGi1R47Dn3fVBAYF0Wv/FEnbRRy73Ni6RMailtlaVtstdqC3zS+I0361lYRCaSLhnJlY7KORst1MD+gJP2sErF4/HiJjyqKaoUyCXxQ/E38AWVw95pmmly96MKMc6hOzmLUjaY0eXDuPGqEp6k22vzNhIg= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=eckelmann.de; Received: from FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:da::13) by FR5P281MB5579.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:1ad::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9846.21; Thu, 23 Apr 2026 10:51:40 +0000 Received: from FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM ([fe80::b702:622d:f947:9d55]) by FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM ([fe80::b702:622d:f947:9d55%6]) with mapi id 15.20.9846.017; Thu, 23 Apr 2026 10:51:40 +0000 Date: Thu, 23 Apr 2026 12:51:38 +0200 From: Thorsten Scherer To: Sascha Hauer Message-ID: References: <20260423-code-signing-provider-v2-0-be62a422e84a@pengutronix.de> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20260423-code-signing-provider-v2-0-be62a422e84a@pengutronix.de> X-ClientProxiedBy: FR4P281CA0364.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:f8::12) To FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:da::13) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: FR4P281MB3510:EE_|FR5P281MB5579:EE_ X-MS-Office365-Filtering-Correlation-Id: 74afc05b-a7f8-4bfe-b96e-08dea1264c9f X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|366016|10070799003|1800799024|376014|56012099003|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(366016)(10070799003)(1800799024)(376014)(56012099003)(18002099003)(22082099003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?poRtfRO8h0Rl+uoFFACI4C2GJFk06aWXcqlgVW4GNyI/9GKxA20OD9Zw7qfk?= =?us-ascii?Q?kNCSBbG44mgpDKmkYZvxVWO1//hWdGhnQfIJFPBg5rOoefOyCUqlqtQ0hmpF?= =?us-ascii?Q?XlrZZAYZpVWDn5FV6ZP1fEF+GWl4nAV5y+CAiTKbHTfpQoIrCHKbb3jpbXkc?= =?us-ascii?Q?6lB0i2FTTPUbGcuX5m5k1O3QaSBw++Hq/KYHWMmU/1wiY0gLUVAr5vQVLch8?= =?us-ascii?Q?Fe64u0dqXrzY4hqjGbxWg2yQIWbwBKalNExZEk3lRhgdVp/q2cwiWl3Gjicz?= =?us-ascii?Q?I6jADcxz8YMrJq7CkVrSsixuxiCTt17P+uyOYm/H2bTUAUaRrBw2Dc8+bEIK?= =?us-ascii?Q?PRLzIYlJAmUT6pEC0dCwQEpa9M9WkQF9ehqzJLXEwSboMneUeIjWZ/Kb4t4i?= =?us-ascii?Q?pKZTKxhAv14MrhGUHq0cJhzCFi+LcibaLA6FKsTcTRiAN4Jr/L04Q26sVnC+?= =?us-ascii?Q?wjETBs41xFK+MbHOENqZ3iS8cXLkUk8VzlHraPTdZwn/64ytMtSqlFbykzMh?= =?us-ascii?Q?1ZzD5x7zsGTq6r85dqcAAEYLP4WnsYM059liQt7u8icE5ZN5HKe8icQS6qhu?= =?us-ascii?Q?eUNEmME3P9NXOqyaaIZP7a6+LNLrrDP+gO5GZxIoyPkkJikJYiSP9ig4sPtT?= =?us-ascii?Q?3wXM5XpoljPFet8NNEXirubCxzL7Eo/VW69CUMkarklC9sdocFfWTSAajizh?= =?us-ascii?Q?gbnxMrctnio9jh8SCNWZgaeMtz0M8TXlycG/nxhFAL2yf7z3406k6sZC1F8l?= =?us-ascii?Q?rWXyd+Yz9TgubaS44znCPRYMIjK6IPSpftglp1AiRD9G7a0pG0ycQwbyWltR?= =?us-ascii?Q?HPAgfrAoZJ7Rlr9DrB5bu9JHk4Y2k4tUR6UPPO36/3ieRtEq/VFcqbxsB9mv?= =?us-ascii?Q?y2tZMUdmPbSIoE1mH5lhtTOJEwb/9iACmysK68TnEk57hziAMcAC15TGknBj?= =?us-ascii?Q?IO3SgmvSN7wjmXHVxaCtjeEGhuWU7mYiA3mgrtEeT1Qd3LFuvMA22hWwZtk1?= =?us-ascii?Q?Dil8alJBv0zMzXGVrdWIrOSwxtstX3Xmw4EKHgMUxn6UiBqtab9aX9fb0FgA?= =?us-ascii?Q?IOrCQ0G+F81Bk9pI8EckjXCvLuZc1heqFpGZxIcpI2iKcnkuucL2T3CpK99s?= =?us-ascii?Q?95fWTakZL7MTGWglfgTck6QPF8l2SJUsZWBWWjeNoNv31yZMGTouz3Y60EuB?= =?us-ascii?Q?PKsqUn2uinLDB/fDVHMe6ytt7bUH0d2W6+wcBNhSNQ6GFX/rvGEiRllDD7VZ?= =?us-ascii?Q?PDyUJc158c3zZEH2hcKIBg6+rOhR18ONjGnrVN16YIuVreY7vy94UuYe1Rvb?= =?us-ascii?Q?6eTHC4YwrOQAhjM7yNUcGblKrqVW4WteKsRs+/nzmFWsrcetK6nFf07dRsty?= =?us-ascii?Q?Z5Wglo2r+Dgel7zdNuLngG7hkVm8yPC1oeSG0tD50urBqK8hSNUZW19UWU0H?= =?us-ascii?Q?JokLwmeMHg32OGoR2U4yYGf0jAznrmU3c82M+SrcPgtYUq8TO8gUMhONHac5?= =?us-ascii?Q?SjpAOvPpG+nqXG7p9gmvxLoTWS1dxh4u/+73PSYAwwR2ZmSSx72K7t4dLCK+?= =?us-ascii?Q?GMLx4hkXMUTjhA6aP1xqjDGCi4gLfaMflGc0DDZkAhvgvzGGCY8JleBb/TzQ?= =?us-ascii?Q?p+Dc4K7tY6aZiwxZ/xnj2M1EiEmkjuwDMJOEpUyA7H/IjtTRvBMoFl/W+V4r?= =?us-ascii?Q?yD6xat2KWA1Cv4atEffW8weXOq9UG3K7dsI0Y2FDCDvHUw2ijtQUUf/R/Yzg?= =?us-ascii?Q?RYVfXxchkzdNKO2w4NYYL7pFABBaMWyuWnPHp8eegkTXcyuduU/vruIVRqbB?= X-MS-Exchange-AntiSpam-MessageData-1: 5JWJba9z4ewtsw== X-OriginatorOrg: eckelmann.de X-MS-Exchange-CrossTenant-Network-Message-Id: 74afc05b-a7f8-4bfe-b96e-08dea1264c9f X-MS-Exchange-CrossTenant-AuthSource: FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Apr 2026 10:51:40.1656 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 62e24f58-823c-4d73-8ff2-db0a5f20156c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: ltBlwMH5EQQRz8r3Z9mx7cr0Oe6cSE+akgee3GL9peH/OVQjovF+smMGjuNXsELwXuw5So0RMfVT6vmVHqJmTw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: FR5P281MB5579 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-102.4 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, SPF_HELO_PASS,SPF_PASS,USER_IN_WELCOMELIST,USER_IN_WHITELIST autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [PATCH v2 0/3] code-signing: add provider support X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Hello Sascha, On Thu, Apr 23, 2026 at 11:25:45AM +0200, Sascha Hauer wrote: > openssl engines have been deprecated for a long time. Add provider > support to the ptxdist code signing infrastructure. > > Signed-off-by: Sascha Hauer > --- > Changes in v2: > - Add patch for pkcs11-provider to install pkcs11.so in correct directory > - remove debug prepare stage in rules/host-pkcs11-provider.in > - Link to v1: https://lore.kernel.org/r/20260422-code-signing-provider-v1-0-ce986114c54d@pengutronix.de Nit: ^ lore.ptxdist.org > > --- > Sascha Hauer (3): > host-libp11: use correct path for ossl-modules > Add host-pkcs11-provider > code-signing: enable provider support > > ...x-provider-installation-path-with-DESTDIR.patch | 36 ++++++++++++++++++++++ > patches/pkcs11-provider-0.6/series | 1 + > platforms/code-signing.in | 1 + > rules/host-libp11.make | 1 + > rules/host-pkcs11-provider.in | 10 ++++++ > rules/host-pkcs11-provider.make | 28 +++++++++++++++++ > rules/host-softhsm.in | 1 + > rules/host-softhsm.make | 27 ++++++++++++++++ > rules/pre/010-code-signing.make | 2 +- > rules/pre/020-code-signing-softhsm.make | 3 +- > 10 files changed, 108 insertions(+), 2 deletions(-) > --- > base-commit: 9e28c99dd6a5b30c578b75deb71bd82d41fda429 > change-id: 20260422-code-signing-provider-394214622a4c > > Best regards, > -- > Sascha Hauer > > Best regards Thorsten