[ptxdist] [PATCH v2 0/5] add packages for tpm

[ptxdist] [PATCH v2 0/5] add packages for tpm

[Thorsten K. Scherer]

From v1, send on Mon, 26 Nov 2018 11:20:52 +0100 :

This series aims to integrate the tpm packages maintained on
https://github.com/tpm2-software/ into ptxdist. It also adds the
autotools macro archive, as a dependency for tpm2-tss.

Thorsten K. Scherer (5):
  ptxdist: add host autotools macro archive for tpm2
  ptxdist: add tpm2-abrmd 2.0.3
  ptxdist: add tpm2-tss version 2.1.0
  ptxdist: add tpm2-tools 3.1.3
  ptxdist: add tpm2-tss-engine c9061a7

 ...rom-the-list-of-libs-to-link-against.patch |  21 +++
 patches/tpm2-tss-2.1.0/series                 |   4 +
 .../autogen.sh                                |   5 +
 projectroot/etc/group                         |   1 +
 projectroot/etc/passwd                        |   1 +
 projectroot/etc/shadow                        |   1 +
 rules/host-autotools-autoconf-archive.in      |  14 ++
 rules/host-autotools-autoconf-archive.make    |  36 +++++
 rules/tpm.in                                  |   5 +
 rules/tpm2-abrmd.in                           |  16 ++
 rules/tpm2-abrmd.make                         |  72 +++++++++
 rules/tpm2-tools.in                           |  92 ++++++++++++
 rules/tpm2-tools.make                         | 137 ++++++++++++++++++
 rules/tpm2-tss-engine.in                      |  15 ++
 rules/tpm2-tss-engine.make                    |  61 ++++++++
 rules/tpm2-tss.in                             |  22 +++
 rules/tpm2-tss.make                           |  65 +++++++++
 17 files changed, 568 insertions(+)
 create mode 100644 patches/tpm2-tss-2.1.0/0001-drop-lgcrypt-from-the-list-of-libs-to-link-against.patch
 create mode 100644 patches/tpm2-tss-2.1.0/series
 create mode 100755 patches/tpm2-tss-engine-2018-11-28-gc9061a7/autogen.sh
 create mode 100644 rules/host-autotools-autoconf-archive.in
 create mode 100644 rules/host-autotools-autoconf-archive.make
 create mode 100644 rules/tpm.in
 create mode 100644 rules/tpm2-abrmd.in
 create mode 100644 rules/tpm2-abrmd.make
 create mode 100644 rules/tpm2-tools.in
 create mode 100644 rules/tpm2-tools.make
 create mode 100644 rules/tpm2-tss-engine.in
 create mode 100644 rules/tpm2-tss-engine.make
 create mode 100644 rules/tpm2-tss.in
 create mode 100644 rules/tpm2-tss.make

-- 
2.19.1


-- 
Eckelmann AG
Vorstand: Dipl.-Ing. Peter Frankenbach (Sprecher) Dipl.-Wi.-Ing. Philipp Eckelmann
Dr.-Ing. Marco Münchhof Dr.-Ing. Frank Uhlemann
Vorsitzender des Aufsichtsrats: Hubertus G. Krossa
Stv. Vorsitzender des Aufsichtsrats: Dr.-Ing. Gerd Eckelmann
Sitz der Gesellschaft: Berliner Str. 161, 65205 Wiesbaden, Amtsgericht Wiesbaden HRB 12636
http://www.eckelmann.de

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

[ptxdist] [PATCH v2 1/5] ptxdist: add host autotools macro archive for tpm2

[Thorsten K. Scherer]

Signed-off-by: Thorsten K. Scherer <t.scherer@eckelmann.de>
---
 rules/host-autotools-autoconf-archive.in   | 14 +++++++++
 rules/host-autotools-autoconf-archive.make | 36 ++++++++++++++++++++++
 2 files changed, 50 insertions(+)
 create mode 100644 rules/host-autotools-autoconf-archive.in
 create mode 100644 rules/host-autotools-autoconf-archive.make

diff --git a/rules/host-autotools-autoconf-archive.in b/rules/host-autotools-autoconf-archive.in
new file mode 100644
index 000000000..e43b8617f
--- /dev/null
+++ b/rules/host-autotools-autoconf-archive.in
@@ -0,0 +1,14 @@
+## SECTION=hosttools_noprompt
+
+config HOST_AUTOTOOLS_AUTOCONF_ARCHIVE
+	tristate
+	# Ersetzt das Tristate? gibt es ein depends on?
+	default y if ALLYES
+	help
+	  Autoconf Macro Archive
+
+	  Autoconf Macro Archive aims to provide a central repository
+	  of useful and tested Autoconf macros for software developers
+	  around the world.  This package contains the complete content
+	  of the Autoconf Macro Archive as found at
+	  http://www.gnu.org/software/autoconf-archive/.
diff --git a/rules/host-autotools-autoconf-archive.make b/rules/host-autotools-autoconf-archive.make
new file mode 100644
index 000000000..eb791474f
--- /dev/null
+++ b/rules/host-autotools-autoconf-archive.make
@@ -0,0 +1,36 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2017 by Marc Kleine-Budde <mkl@pengutronix.de>
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+
+#
+# We provide this package
+#
+HOST_PACKAGES-$(PTXCONF_HOST_AUTOTOOLS_AUTOCONF_ARCHIVE) += host-autotools-autoconf-archive
+
+#
+# Paths and names
+#
+HOST_AUTOTOOLS_AUTOCONF_ARCHIVE_VERSION        := 2018.03.13
+HOST_AUTOTOOLS_AUTOCONF_ARCHIVE_MD5    := 46b13a5936372297b6d49980327a3c35
+HOST_AUTOTOOLS_AUTOCONF_ARCHIVE                := autoconf-archive-$(HOST_AUTOTOOLS_AUTOCONF_ARCHIVE_VERSION)
+HOST_AUTOTOOLS_AUTOCONF_ARCHIVE_SUFFIX := tar.xz
+HOST_AUTOTOOLS_AUTOCONF_ARCHIVE_URL    := $(call ptx/mirror, GNU, autoconf-archive/$(HOST_AUTOTOOLS_AUTOCONF_ARCHIVE).$(HOST_AUTOTOOLS_AUTOCONF_ARCHIVE_SUFFIX))
+HOST_AUTOTOOLS_AUTOCONF_ARCHIVE_SOURCE := $(SRCDIR)/$(HOST_AUTOTOOLS_AUTOCONF_ARCHIVE).$(HOST_AUTOTOOLS_AUTOCONF_ARCHIVE_SUFFIX)
+HOST_AUTOTOOLS_AUTOCONF_ARCHIVE_DIR    := $(HOST_BUILDDIR)/$(HOST_AUTOTOOLS_AUTOCONF_ARCHIVE)
+
+# ----------------------------------------------------------------------------
+# Prepare
+# ----------------------------------------------------------------------------
+
+#
+# autoconf
+#
+HOST_AUTOTOOLS_AUTOCONF_ARCHIVE_CONF_TOOL      := autoconf
+
+# vim: syntax=make
-- 
2.19.1


-- 
Eckelmann AG
Vorstand: Dipl.-Ing. Peter Frankenbach (Sprecher) Dipl.-Wi.-Ing. Philipp Eckelmann
Dr.-Ing. Marco Münchhof Dr.-Ing. Frank Uhlemann
Vorsitzender des Aufsichtsrats: Hubertus G. Krossa
Stv. Vorsitzender des Aufsichtsrats: Dr.-Ing. Gerd Eckelmann
Sitz der Gesellschaft: Berliner Str. 161, 65205 Wiesbaden, Amtsgericht Wiesbaden HRB 12636
http://www.eckelmann.de

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

[ptxdist] [PATCH v2 2/5] ptxdist: add tpm2-abrmd 2.0.3

[Thorsten K. Scherer]

Signed-off-by: Thorsten K. Scherer <t.scherer@eckelmann.de>
---
 projectroot/etc/group  |  1 +
 projectroot/etc/passwd |  1 +
 projectroot/etc/shadow |  1 +
 rules/tpm2-abrmd.in    | 16 ++++++++++
 rules/tpm2-abrmd.make  | 72 ++++++++++++++++++++++++++++++++++++++++++
 5 files changed, 91 insertions(+)
 create mode 100644 rules/tpm2-abrmd.in
 create mode 100644 rules/tpm2-abrmd.make

diff --git a/projectroot/etc/group b/projectroot/etc/group
index ea6127b7a..15e3f91e5 100644
--- a/projectroot/etc/group
+++ b/projectroot/etc/group
@@ -28,3 +28,4 @@ systemd-journal-remote:x:203:
 systemd-journal-upload:x:208:
 render:x:209:
 nogroup:x:65534:
+tss:x:998:
diff --git a/projectroot/etc/passwd b/projectroot/etc/passwd
index 65653c044..d773aa1ee 100644
--- a/projectroot/etc/passwd
+++ b/projectroot/etc/passwd
@@ -14,3 +14,4 @@ systemd-journal-remote:x:207:203:systemd-journal-remote:/dev/null:/bin/false
 systemd-journal-upload:x:208:208:systemd-journal-upload:/dev/null:/bin/false
 rpcuser:x:65533:65534:RPC user:/dev/null:/bin/false
 nobody:x:65534:65534:Unprivileged Nobody:/dev/null:/bin/false
+tss:x:998:998: :/dev/null:/bin/false
diff --git a/projectroot/etc/shadow b/projectroot/etc/shadow
index 02e92ce20..407d5be41 100644
--- a/projectroot/etc/shadow
+++ b/projectroot/etc/shadow
@@ -2,3 +2,4 @@ root::12215:0:99999:7:::
 daemon:*:14250:0:99999:7:::
 sshd:*:0:0:99999:7:::
 ftp::0:0:99999:7:::
+tss:!:17835:0:99999:7:::
diff --git a/rules/tpm2-abrmd.in b/rules/tpm2-abrmd.in
new file mode 100644
index 000000000..1443e2c96
--- /dev/null
+++ b/rules/tpm2-abrmd.in
@@ -0,0 +1,16 @@
+## SECTION=tpm
+
+config TPM2_ABRMD
+	tristate
+	select HOST_AUTOTOOLS_AUTOCONF_ARCHIVE
+	select DBUS
+	select GLIB
+	select TPM2_TSS
+	prompt "tpm2-abrmd"
+	help
+	  TPM2 Access Broker & Resource Management Daemon implementing
+	  the TCG spec.
+
+	  This is a system daemon implementing the TPM2 access broker
+	  (TAB) & Resource Manager (RM) spec from the TCG. The daemon
+	  (tpm2-abrmd) is implemented using Glib and the GObject system.
diff --git a/rules/tpm2-abrmd.make b/rules/tpm2-abrmd.make
new file mode 100644
index 000000000..9cf747d96
--- /dev/null
+++ b/rules/tpm2-abrmd.make
@@ -0,0 +1,72 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2017 by Marc Kleine-Budde <mkl@pengutronix.de>
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+
+#
+# We provide this package
+#
+PACKAGES-$(PTXCONF_TPM2_ABRMD) += tpm2-abrmd
+
+#
+# Paths and names
+#
+TPM2_ABRMD_VERSION     := 2.0.3
+TPM2_ABRMD_MD5         := a71faf008de2e444265b0d1d889cab2e
+TPM2_ABRMD             := tpm2-abrmd-$(TPM2_ABRMD_VERSION)
+TPM2_ABRMD_SUFFIX      := tar.gz
+TPM2_ABRMD_URL         := https://github.com/tpm2-software/tpm2-tss/releases/download/$(TPM2_ABRMD_VERSION)/$(TPM2_ABRMD).$(TPM2_ABRMD_SUFFIX)
+TPM2_ABRMD_SOURCE      := $(SRCDIR)/$(TPM2_ABRMD).$(TPM2_ABRMD_SUFFIX)
+TPM2_ABRMD_DIR         := $(BUILDDIR)/$(TPM2_ABRMD)
+TPM2_ABRMD_LICENSE     := BSD-2-Clause AND BSD-3-Clause
+
+# ----------------------------------------------------------------------------
+# Prepare
+# ----------------------------------------------------------------------------
+
+#
+# autoconf
+#
+TPM2_ABRMD_CONF_TOOL   := autoconf
+TPM2_ABRMD_CONF_OPT    := \
+	$(CROSS_AUTOCONF_USR) \
+	--with-dbuspolicydir=/usr/share/dbus-1/system.d \
+	--with-systemdsystemunitdir=/usr/lib/systemd/system
+
+# ----------------------------------------------------------------------------
+# Target-Install
+# ----------------------------------------------------------------------------
+
+$(STATEDIR)/tpm2-abrmd.targetinstall:
+	@$(call targetinfo)
+
+	@$(call install_init, tpm2-abrmd)
+	@$(call install_fixup, tpm2-abrmd,PRIORITY,optional)
+	@$(call install_fixup, tpm2-abrmd,SECTION,base)
+	@$(call install_fixup, tpm2-abrmd,AUTHOR,"Marc Kleine-Budde <mkl@pengutronix.de>")
+	@$(call install_fixup, tpm2-abrmd,DESCRIPTION,missing)
+
+	@$(call install_lib, tpm2-abrmd, tss, tss, 0644, libtss2-tcti-tabrmd)
+	@$(call install_copy, tpm2-abrmd, tss, tss, 0755, -, /usr/sbin/tpm2-abrmd)
+
+	@$(call install_copy, tpm2-abrmd, tss, tss, 0644, -, \
+		/usr/lib/systemd/system/tpm2-abrmd.service)
+	@$(call install_copy, tpm2-abrmd, tss, tss, 0644, \
+		$(TPM2_ABRMD_DIR)/dist/tpm2-abrmd.service, \
+		/etc/systemd/system/tpm2-abrmd.service)
+
+	@$(call install_copy, tpm2-abrmd, tss, tss, 0644, -, \
+		/usr/share/dbus-1/system.d/tpm2-abrmd.conf)
+	@$(call install_copy, tpm2-abrmd, tss, tss, 0644, -, \
+		/usr/share/dbus-1/system-services/com.intel.tss2.Tabrmd.service)
+
+	@$(call install_finish, tpm2-abrmd)
+
+	@$(call touch)
+
+# vim: syntax=make
-- 
2.19.1


-- 
Eckelmann AG
Vorstand: Dipl.-Ing. Peter Frankenbach (Sprecher) Dipl.-Wi.-Ing. Philipp Eckelmann
Dr.-Ing. Marco Münchhof Dr.-Ing. Frank Uhlemann
Vorsitzender des Aufsichtsrats: Hubertus G. Krossa
Stv. Vorsitzender des Aufsichtsrats: Dr.-Ing. Gerd Eckelmann
Sitz der Gesellschaft: Berliner Str. 161, 65205 Wiesbaden, Amtsgericht Wiesbaden HRB 12636
http://www.eckelmann.de

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

[ptxdist] [PATCH v2 3/5] ptxdist: add tpm2-tss version 2.1.0

[Thorsten K. Scherer]

Signed-off-by: Thorsten K. Scherer <t.scherer@eckelmann.de>
---
 ...rom-the-list-of-libs-to-link-against.patch | 21 ++++++
 patches/tpm2-tss-2.1.0/series                 |  4 ++
 rules/tpm.in                                  |  5 ++
 rules/tpm2-tss.in                             | 22 +++++++
 rules/tpm2-tss.make                           | 65 +++++++++++++++++++
 5 files changed, 117 insertions(+)
 create mode 100644 patches/tpm2-tss-2.1.0/0001-drop-lgcrypt-from-the-list-of-libs-to-link-against.patch
 create mode 100644 patches/tpm2-tss-2.1.0/series
 create mode 100644 rules/tpm.in
 create mode 100644 rules/tpm2-tss.in
 create mode 100644 rules/tpm2-tss.make

diff --git a/patches/tpm2-tss-2.1.0/0001-drop-lgcrypt-from-the-list-of-libs-to-link-against.patch b/patches/tpm2-tss-2.1.0/0001-drop-lgcrypt-from-the-list-of-libs-to-link-against.patch
new file mode 100644
index 000000000..023057039
--- /dev/null
+++ b/patches/tpm2-tss-2.1.0/0001-drop-lgcrypt-from-the-list-of-libs-to-link-against.patch
@@ -0,0 +1,21 @@
+From: =?UTF-8?q?Uwe=20Kleine-K=C3=B6nig?= <u.kleine-koenig@pengutronix.de>
+Date: Fri, 12 Oct 2018 11:13:42 +0200
+Subject: [PATCH] drop -lgcrypt from the list of libs to link against
+
+If --with-crypto=ossl is used -lgcrypt is wrong. There shouldn't be any need
+to explicitly tell the linker because the library already depends the chosen
+crypto lib
+---
+ lib/tss2-esys.pc.in | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/lib/tss2-esys.pc.in b/lib/tss2-esys.pc.in
+index 792f01914fd1..ecb01bc16b35 100644
+--- a/lib/tss2-esys.pc.in
++++ b/lib/tss2-esys.pc.in
+@@ -4,4 +4,4 @@ URL: https://github.com/tpm2-software/tpm2-tss
+ Version: @VERSION@
+ Requires: tss2-mu tss2-sys
+ Cflags: -I@includedir@
+-Libs: -ltss2-esys -lgcrypt -L@libdir@
++Libs: -ltss2-esys -L@libdir@
diff --git a/patches/tpm2-tss-2.1.0/series b/patches/tpm2-tss-2.1.0/series
new file mode 100644
index 000000000..28530d71b
--- /dev/null
+++ b/patches/tpm2-tss-2.1.0/series
@@ -0,0 +1,4 @@
+# generated by git-ptx-patches
+#tag:base --start-number 1
+0001-drop-lgcrypt-from-the-list-of-libs-to-link-against.patch
+# 7d50ba46ba641460d7f0c8558d186ab3  - git-ptx-patches magic
diff --git a/rules/tpm.in b/rules/tpm.in
new file mode 100644
index 000000000..ef93315a3
--- /dev/null
+++ b/rules/tpm.in
@@ -0,0 +1,5 @@
+## SECTION=security
+
+menu "tpm                           "
+source "generated/tpm.in"
+endmenu
diff --git a/rules/tpm2-tss.in b/rules/tpm2-tss.in
new file mode 100644
index 000000000..bfeddb03e
--- /dev/null
+++ b/rules/tpm2-tss.in
@@ -0,0 +1,22 @@
+## SECTION=tpm
+
+config TPM2_TSS
+       tristate
+       select HOST_AUTOTOOLS_AUTOCONF_ARCHIVE
+       select OPENSSL
+       prompt "tpm2-tss"
+       help
+         TPM2 Software stack library - TSS and TCTI libraries
+
+         TPM2.0 TSS (Software Stack) consists of API layers provided
+         to support TPM 2.0 chips. It is made out of three layers:
+
+         * System API (SAPI), which implements the system layer API;
+         * TPM Command Transmission Interface (TCTI), which is used
+           by SAPI to allow communication with the TAB/RM layer;
+         * Trusted Access Broker/Resource Manager (TAB/RM), which
+           handles TPM resources and process coordination.
+
+         This package contains the TSS and TCTI libraries that client
+         applications will link against when they require accessing
+         the TPM.
diff --git a/rules/tpm2-tss.make b/rules/tpm2-tss.make
new file mode 100644
index 000000000..c76348a8c
--- /dev/null
+++ b/rules/tpm2-tss.make
@@ -0,0 +1,65 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2017 by Marc Kleine-Budde <mkl@pengutronix.de>
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+
+#
+# We provide this package
+#
+PACKAGES-$(PTXCONF_TPM2_TSS) += tpm2-tss
+
+#
+# Paths and names
+#
+TPM2_TSS_VERSION       := 2.1.0
+TPM2_TSS_MD5           := 64e2e9ff34b60502da729504aed5100c
+TPM2_TSS               := tpm2-tss-$(TPM2_TSS_VERSION)
+TPM2_TSS_SUFFIX        := tar.gz
+TPM2_TSS_URL           := https://github.com/tpm2-software/tpm2-tss/releases/download/$(TPM2_TSS_VERSION)/$(TPM2_TSS).$(TPM2_TSS_SUFFIX)
+TPM2_TSS_SOURCE        := $(SRCDIR)/$(TPM2_TSS).$(TPM2_TSS_SUFFIX)
+TPM2_TSS_DIR           := $(BUILDDIR)/$(TPM2_TSS)
+TPM2_TSS_LICENSE       := BSD-2-Clause
+
+# ----------------------------------------------------------------------------
+# Prepare
+# ----------------------------------------------------------------------------
+
+#
+# autoconf
+#
+TPM2_TSS_CONF_TOOL     := autoconf
+TPM2_TSS_CONF_OPT := \
+	$(CROSS_AUTOCONF_USR) \
+	--with-crypto=ossl
+
+# ----------------------------------------------------------------------------
+# Target-Install
+# ----------------------------------------------------------------------------
+
+$(STATEDIR)/tpm2-tss.targetinstall:
+	@$(call targetinfo)
+
+	@$(call install_init, tpm2-tss)
+	@$(call install_fixup, tpm2-tss,PRIORITY,optional)
+	@$(call install_fixup, tpm2-tss,SECTION,base)
+	@$(call install_fixup, tpm2-tss,AUTHOR,"Marc Kleine-Budde <mkl@pengutronix.de>")
+	@$(call install_fixup, tpm2-tss,DESCRIPTION,missing)
+
+	@$(call install_lib, tpm2-tss, tss, tss, 0644, libtss2-mu)
+	@$(call install_lib, tpm2-tss, tss, tss, 0644, libtss2-tcti-device)
+	@$(call install_lib, tpm2-tss, tss, tss, 0644, libtss2-tcti-mssim)
+	@$(call install_lib, tpm2-tss, tss, tss, 0644, libtss2-sys)
+	@$(call install_lib, tpm2-tss, tss, tss, 0644, libtss2-esys)
+
+	@$(call install_copy, tpm2-tss, tss, tss, 1000, $(TPM2_TSS_DIR)/dist/tpm-udev.rules, /usr/lib/udev/rules.d/70-tpm-udev.rules)
+
+	@$(call install_finish, tpm2-tss)
+
+	@$(call touch)
+
+# vim: syntax=make
-- 
2.19.1


-- 
Eckelmann AG
Vorstand: Dipl.-Ing. Peter Frankenbach (Sprecher) Dipl.-Wi.-Ing. Philipp Eckelmann
Dr.-Ing. Marco Münchhof Dr.-Ing. Frank Uhlemann
Vorsitzender des Aufsichtsrats: Hubertus G. Krossa
Stv. Vorsitzender des Aufsichtsrats: Dr.-Ing. Gerd Eckelmann
Sitz der Gesellschaft: Berliner Str. 161, 65205 Wiesbaden, Amtsgericht Wiesbaden HRB 12636
http://www.eckelmann.de

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

[ptxdist] [PATCH v2 4/5] ptxdist: add tpm2-tools 3.1.3

[Thorsten K. Scherer]

Signed-off-by: Thorsten K. Scherer <t.scherer@eckelmann.de>
---
 rules/tpm2-tools.in   |  92 ++++++++++++++++++++++++++++
 rules/tpm2-tools.make | 137 ++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 229 insertions(+)
 create mode 100644 rules/tpm2-tools.in
 create mode 100644 rules/tpm2-tools.make

diff --git a/rules/tpm2-tools.in b/rules/tpm2-tools.in
new file mode 100644
index 000000000..41cd9fce1
--- /dev/null
+++ b/rules/tpm2-tools.in
@@ -0,0 +1,92 @@
+## SECTION=tpm
+menuconfig TPM2_TOOLS
+	tristate
+	prompt "tpm2-tools                    "
+	select TPM2_TSS
+	select OPENSSL
+	select LIBCURL
+	help
+	  This package contains a set of tools to use with TPM 2.0
+	  chips, for common tasks and features provided by the
+	  hardware; such as for doing basic key management,
+	  attestation, encryption and signing.
+
+	  See https://github.com/tpm2-software/tpm2-tools for details
+
+if TPM2_TOOLS
+
+config TPM2_TOOLS_START_UP
+	bool "Start-up"
+	help
+	  tpm2_startup
+
+config TPM2_TOOLS_OBJECT
+	bool "Object"
+	help
+	  tpm2_create, tpm2_createprimary, tpm2_load, tpm2_loadexternal,
+	  tpm2_readpublic, tpm2_activatecredential, tpm2_makecredential,
+	  tpm2_unseal
+
+config TPM2_TOOLS_ASYMMETRIC_PRIMITIVES
+	bool "Asymmetric primitives"
+	help
+	  tpm2_rsaencrypt, tpm2_rsadecrypt
+
+config TPM2_TOOLS_SYMMETRIC_PRIMITIVES
+	bool "Symmetric primitives"
+	help
+	  tpm2_encryptdecrypt, tpm2_hash, tpm2_hmac
+
+config TPM2_TOOLS_RANDOM_NUMBER_GENERATOR
+	bool "Random number generator"
+	help
+	  tpm2_getrandom
+
+config TPM2_TOOLS_ATTESTATION
+	bool "Attestation"
+	help
+	  tpm2_certify, tpm2_quote
+
+config TPM2_TOOLS_SIGNING_AND_SIGNATURE_VERIFICATION
+	bool "Signing and signature verification"
+	help
+	  tpm2_sign, tpm2_verifysignature
+
+config TPM2_TOOLS_INTEGRITY
+	bool "Integrity"
+	help
+	  tpm2_pcrextend, tpm2_pcrevent, tpm2_pcrlist
+
+config TPM2_TOOLS_ENHANCED_AUTHORISATION
+	bool "Enhanced authorisation (EA)"
+	help
+	  tpm2_createpolicy
+
+config TPM2_TOOLS_DICTIONARY_ATTACK
+	bool "Dictionary attack"
+	help
+	  tpm2_dictionarylockout
+
+config TPM2_TOOLS_CONTEXT_MANAGEMENT
+	bool "Context management"
+	help
+	  tpm2_evictcontrol
+
+config TPM2_TOOLS_CAPABILITY_COMMANDS
+	bool "Capability commands"
+	help
+	  tpm2_getcap
+
+config TPM2_TOOLS_NON_VOLATILE_STORAGE
+	bool "Non-volatile storage"
+	help
+	  tpm2_nvdefine, tpm2_nvlist, tpm2_nvread, tpm2_nvreadlock,
+	  tpm2_nvrelease, tpm2_nvwrite
+
+config TPM2_TOOLS_MISC
+	bool "Miscellaneous"
+	help
+	  tpm2_send, tpm2_getmanufec, tpm2_getpubak, tpm2_getpubek,
+	  tpm2_listpersistent, tpm2_rc_decode, tpm2_takeownership
+
+endif
diff --git a/rules/tpm2-tools.make b/rules/tpm2-tools.make
new file mode 100644
index 000000000..fc6acaec3
--- /dev/null
+++ b/rules/tpm2-tools.make
@@ -0,0 +1,137 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2017 by Marc Kleine-Budde <m...@pengutronix.de>
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+
+#
+# We provide this package
+#
+PACKAGES-$(PTXCONF_TPM2_TOOLS) += tpm2-tools
+
+#
+# Paths and names
+#
+TPM2_TOOLS_VERSION     := 3.1.3
+TPM2_TOOLS_MD5         := 4a43a4716aec660120f377187a653a5f
+TPM2_TOOLS             := tpm2-tools-$(TPM2_TOOLS_VERSION)
+TPM2_TOOLS_SUFFIX      := tar.gz
+TPM2_TOOLS_URL         := https://github.com/01org/tpm2-tools.git;tag=$(TPM2_TOOLS_VERSION)
+TPM2_TOOLS_SOURCE      := $(SRCDIR)/$(TPM2_TOOLS).$(TPM2_TOOLS_SUFFIX)
+TPM2_TOOLS_DIR         := $(BUILDDIR)/$(TPM2_TOOLS)
+TPM2_TOOLS_LICENSE     := BSD-3-Clause
+
+# ----------------------------------------------------------------------------
+# Prepare
+# ----------------------------------------------------------------------------
+
+#
+# autoconf
+#
+TPM2_TOOLS_CONF_TOOL   := autoconf
+TPM2_TOOLS_CONF_OPT    := $(CROSS_AUTOCONF_USR)
+
+# ----------------------------------------------------------------------------
+# Target-Install
+# ----------------------------------------------------------------------------
+
+$(STATEDIR)/tpm2-tools.targetinstall:
+	@$(call targetinfo)
+
+	@$(call install_init, tpm2-tools)
+	@$(call install_fixup, tpm2-tools,PRIORITY,optional)
+	@$(call install_fixup, tpm2-tools,SECTION,base)
+	@$(call install_fixup, tpm2-tools,AUTHOR,"Marc Kleine-Budde <m...@pengutronix.de>")
+	@$(call install_fixup, tpm2-tools,DESCRIPTION,missing)
+
+
+ifdef PTXCONF_TPM2_TOOLS_START_UP
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_startup)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_OBJECT
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_create)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_createprimary)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_load)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_loadexternal)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_readpublic)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_activatecredential)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_makecredential)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_unseal)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_ASYMMETRIC_PRIMITIVES
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_rsaencrypt)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_rsadecrypt)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_SYMMETRIC_PRIMITIVES
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_encryptdecrypt)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_hash)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_hmac)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_RANDOM_NUMBER_GENERATOR
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_getrandom)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_ATTESTATION
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_certify)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_quote)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_SIGNING_AND_SIGNATURE_VERIFICATION
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_sign)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_verifysignature)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_INTEGRITY
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_pcrextend)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_pcrevent)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_pcrlist)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_ENHANCED_AUTHORISATION
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_createpolicy)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_DICTIONARY_ATTACK
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_dictionarylockout)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_CONTEXT_MANAGEMENT
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_evictcontrol)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_CAPABILITY_COMMANDS
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_getcap)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_NON_VOLATILE_STORAGE
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_nvdefine)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_nvlist)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_nvread)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_nvreadlock)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_nvrelease)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_nvwrite)
+endif
+
+ifdef PTXCONF_TPM2_TOOLS_MISC
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_send)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_getmanufec)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_getpubak)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_getpubek)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_listpersistent)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_rc_decode)
+	$(call install_copy, tpm2-tools, tss, tss, 0755, -, /usr/bin/tpm2_takeownership)
+endif
+
+	@$(call install_finish, tpm2-tools)
+
+	@$(call touch)
+
+# vim: syntax=make
-- 
2.19.1


-- 
Eckelmann AG
Vorstand: Dipl.-Ing. Peter Frankenbach (Sprecher) Dipl.-Wi.-Ing. Philipp Eckelmann
Dr.-Ing. Marco Münchhof Dr.-Ing. Frank Uhlemann
Vorsitzender des Aufsichtsrats: Hubertus G. Krossa
Stv. Vorsitzender des Aufsichtsrats: Dr.-Ing. Gerd Eckelmann
Sitz der Gesellschaft: Berliner Str. 161, 65205 Wiesbaden, Amtsgericht Wiesbaden HRB 12636
http://www.eckelmann.de

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

[ptxdist] [PATCH v2 5/5] ptxdist: add tpm2-tss-engine c9061a7

[Thorsten K. Scherer]

Signed-off-by: Thorsten K. Scherer <t.scherer@eckelmann.de>
---
 .../autogen.sh                                |  5 ++
 rules/tpm2-tss-engine.in                      | 15 +++++
 rules/tpm2-tss-engine.make                    | 61 +++++++++++++++++++
 3 files changed, 81 insertions(+)
 create mode 100755 patches/tpm2-tss-engine-2018-11-28-gc9061a7/autogen.sh
 create mode 100644 rules/tpm2-tss-engine.in
 create mode 100644 rules/tpm2-tss-engine.make

diff --git a/patches/tpm2-tss-engine-2018-11-28-gc9061a7/autogen.sh b/patches/tpm2-tss-engine-2018-11-28-gc9061a7/autogen.sh
new file mode 100755
index 000000000..15e9332e2
--- /dev/null
+++ b/patches/tpm2-tss-engine-2018-11-28-gc9061a7/autogen.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+set -e
+
+./bootstrap
diff --git a/rules/tpm2-tss-engine.in b/rules/tpm2-tss-engine.in
new file mode 100644
index 000000000..fc386a074
--- /dev/null
+++ b/rules/tpm2-tss-engine.in
@@ -0,0 +1,15 @@
+## SECTION=tpm
+
+config TPM2_TSS_ENGINE
+	tristate
+	select TPM2_TSS
+	prompt "tpm2-tss-engine"
+	help
+	  The tpm2-tss-engine project implements a cryptographic
+	  engine for OpenSSL for Trusted Platform Module (TPM 2.0)
+	  using the tpm2-tss software stack that follows the
+	  Trusted Computing Groups (TCG) TPM Software Stack
+	  (TSS 2.0).  It uses the Enhanced System API (ESAPI)
+	  interface of the TSS 2.0 for downwards communication.
+	  It supports RSA decryption and signatures as well as
+	  ECDSA signatures.
diff --git a/rules/tpm2-tss-engine.make b/rules/tpm2-tss-engine.make
new file mode 100644
index 000000000..072f15dff
--- /dev/null
+++ b/rules/tpm2-tss-engine.make
@@ -0,0 +1,61 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2017 by Marc Kleine-Budde <mkl@pengutronix.de>
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+
+#
+# We provide this package
+#
+PACKAGES-$(PTXCONF_TPM2_TSS_ENGINE) += tpm2-tss-engine
+
+#
+# Paths and names
+#
+TPM2_TSS_ENGINE_COMMIT        := c9061a7
+TPM2_TSS_ENGINE_VERSION       := 2018-11-28-g$(TPM2_TSS_ENGINE_COMMIT)
+TPM2_TSS_ENGINE_MD5           := 05fdca60fd429461346418580f230efe
+TPM2_TSS_ENGINE               := tpm2-tss-engine-$(TPM2_TSS_ENGINE_VERSION)
+TPM2_TSS_ENGINE_SUFFIX        := tar.gz
+TPM2_TSS_ENGINE_URL           := https://github.com/tpm2-software/tpm2-tss-engine/archive/$(TPM2_TSS_ENGINE_COMMIT).$(TPM2_TSS_ENGINE_SUFFIX)
+TPM2_TSS_ENGINE_SOURCE        := $(SRCDIR)/$(TPM2_TSS_ENGINE).$(TPM2_TSS_ENGINE_SUFFIX)
+TPM2_TSS_ENGINE_DIR           := $(BUILDDIR)/$(TPM2_TSS_ENGINE)
+TPM2_TSS_ENGINE_LICENSE       := BSD-3-Clause
+
+# ----------------------------------------------------------------------------
+# Prepare
+# ----------------------------------------------------------------------------
+
+#
+# autoconf
+#
+TPM2_TSS_ENGINE_CONF_TOOL := autoconf
+TPM2_TSS_ENGINE_CONF_OPT := $(CROSS_AUTOCONF_USR)
+
+# ----------------------------------------------------------------------------
+# Target-Install
+# ----------------------------------------------------------------------------
+
+$(STATEDIR)/tpm2-tss-engine.targetinstall:
+	@$(call targetinfo)
+
+	@$(call install_init, tpm2-tss-engine)
+	@$(call install_fixup, tpm2-tss-engine,PRIORITY,optional)
+	@$(call install_fixup, tpm2-tss-engine,SECTION,base)
+	@$(call install_fixup, tpm2-tss-engine,AUTHOR,"Marcel Gudert <m.gudert@eckelmann.de>")
+	@$(call install_fixup, tpm2-tss-engine,DESCRIPTION,missing)
+
+	@$(call install_copy, tpm2-tss-engine, tss, tss, 0644, $(TPM2_TSS_ENGINE_DIR)/.libs/libtpm2tss.so, /usr/lib/libtpm2tss.so)
+	@$(call install_link, tpm2-tss-engine, /usr/lib/libtpm2tss.so, /usr/lib/engines/libtpm2tss.so)
+	@$(call install_link, tpm2-tss-engine, /usr/lib/libtpm2tss.so, /usr/lib/engines/tpm2tss.so)
+	@$(call install_copy, tpm2-tss-engine, tss, tss, 0755, -, /usr/bin/tpm2tss-genkey)
+
+	@$(call install_finish, tpm2-tss-engine)
+
+	@$(call touch)
+
+# vim: syntax=make
-- 
2.19.1


-- 
Eckelmann AG
Vorstand: Dipl.-Ing. Peter Frankenbach (Sprecher) Dipl.-Wi.-Ing. Philipp Eckelmann
Dr.-Ing. Marco Münchhof Dr.-Ing. Frank Uhlemann
Vorsitzender des Aufsichtsrats: Hubertus G. Krossa
Stv. Vorsitzender des Aufsichtsrats: Dr.-Ing. Gerd Eckelmann
Sitz der Gesellschaft: Berliner Str. 161, 65205 Wiesbaden, Amtsgericht Wiesbaden HRB 12636
http://www.eckelmann.de

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

Re: [ptxdist] [PATCH v2 0/5] add packages for tpm

[Scherer, Thorsten]

Hello,

I forgot to add a description of the changes. Sorry about that.


changes since v1:

all patches:
	- patch order changed
	- fix tabs, spaces and indentation
	- rebase patches onto current master
	
[PATCH v2 1/5] was [PATCH 5/5]:
	- add default to .in file

[PATCH v2 2/5] was [PATCH 1/5]:
	- make files non executable
	- remove obsolete service unit
	- remove obsolete dbus service unit
	- put tpm2-abrmd to version 2.0.3
	- fix path of --with-systemdsystemunitdir

[PATCH v2 3/5] was [PATCH 2/5]:
	- fix email address in copyright
	- remove blank line
	
[PATCH v2 4/5] was [PATCH 3/5]:
	- remove trailing backslash in help text
	- put tpm2-tools to version 3.1.1
	
[PATCH v2 5/5] was [PATCH 4/5]:
	- put tpm2-tss-engine to newer commit (c9061a7)
	- add copyright header
	- remove unnessecary extract.post stage


On Mon, 2018-12-17 at 11:49 +0100, Thorsten K. Scherer wrote:
> From v1, send on Mon, 26 Nov 2018 11:20:52 +0100 :
> 
> This series aims to integrate the tpm packages maintained on
> https://github.com/tpm2-software/ into ptxdist. It also adds the
> autotools macro archive, as a dependency for tpm2-tss.
> 
> Thorsten K. Scherer (5):
>   ptxdist: add host autotools macro archive for tpm2
>   ptxdist: add tpm2-abrmd 2.0.3
>   ptxdist: add tpm2-tss version 2.1.0
>   ptxdist: add tpm2-tools 3.1.3
>   ptxdist: add tpm2-tss-engine c9061a7
> 
>  ...rom-the-list-of-libs-to-link-against.patch |  21 +++
>  patches/tpm2-tss-2.1.0/series                 |   4 +
>  .../autogen.sh                                |   5 +
>  projectroot/etc/group                         |   1 +
>  projectroot/etc/passwd                        |   1 +
>  projectroot/etc/shadow                        |   1 +
>  rules/host-autotools-autoconf-archive.in      |  14 ++
>  rules/host-autotools-autoconf-archive.make    |  36 +++++
>  rules/tpm.in                                  |   5 +
>  rules/tpm2-abrmd.in                           |  16 ++
>  rules/tpm2-abrmd.make                         |  72 +++++++++
>  rules/tpm2-tools.in                           |  92 ++++++++++++
>  rules/tpm2-tools.make                         | 137
> ++++++++++++++++++
>  rules/tpm2-tss-engine.in                      |  15 ++
>  rules/tpm2-tss-engine.make                    |  61 ++++++++
>  rules/tpm2-tss.in                             |  22 +++
>  rules/tpm2-tss.make                           |  65 +++++++++
>  17 files changed, 568 insertions(+)
>  create mode 100644 patches/tpm2-tss-2.1.0/0001-drop-lgcrypt-from-
> the-list-of-libs-to-link-against.patch
>  create mode 100644 patches/tpm2-tss-2.1.0/series
>  create mode 100755 patches/tpm2-tss-engine-2018-11-28-
> gc9061a7/autogen.sh
>  create mode 100644 rules/host-autotools-autoconf-archive.in
>  create mode 100644 rules/host-autotools-autoconf-archive.make
>  create mode 100644 rules/tpm.in
>  create mode 100644 rules/tpm2-abrmd.in
>  create mode 100644 rules/tpm2-abrmd.make
>  create mode 100644 rules/tpm2-tools.in
>  create mode 100644 rules/tpm2-tools.make
>  create mode 100644 rules/tpm2-tss-engine.in
>  create mode 100644 rules/tpm2-tss-engine.make
>  create mode 100644 rules/tpm2-tss.in
>  create mode 100644 rules/tpm2-tss.make


Best regards
Thorsten

-- 
Eckelmann AG
Vorstand: Dipl.-Ing. Peter Frankenbach (Sprecher) Dipl.-Wi.-Ing. Philipp Eckelmann
Dr.-Ing. Marco Münchhof Dr.-Ing. Frank Uhlemann
Vorsitzender des Aufsichtsrats: Hubertus G. Krossa
Stv. Vorsitzender des Aufsichtsrats: Dr.-Ing. Gerd Eckelmann
Sitz der Gesellschaft: Berliner Str. 161, 65205 Wiesbaden, Amtsgericht Wiesbaden HRB 12636
http://www.eckelmann.de
_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

Re: [ptxdist] [PATCH v2 1/5] ptxdist: add host autotools macro archive for tpm2

[Roland Hieber]

Hi Thorsten,

On Fri, Mar 15, 2019 at 04:09:02PM +0100, Thorsten Scherer wrote:
> thank you for your explanations.  I will follow them in the next
> version of the patchset.
> 
> Maybe you could help me with some additional questions.
> 
> - As this patchset is a little old, would it be better to keep the
>   versions of the libraries as they are and bump them after the
>   patchset got applied (if it will be) or should they be bumped with the
>   next set of patches.
> 
> - Would it make sense to break the patchset up into single patches?

In general I think it's better to make smaller, atomic commits, than
larger commits that do too much at once, and which are then harder to
review. So I would tend tomake one commit for the version bump and then
the other things.

 - Roland

-- 
Roland Hieber                     | r.hieber@pengutronix.de     |
Pengutronix e.K.                  | https://www.pengutronix.de/ |
Peiner Str. 6-8, 31137 Hildesheim | Phone: +49-5121-206917-5086 |
Amtsgericht Hildesheim, HRA 2686  | Fax:   +49-5121-206917-5555 |

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de