rpm/tpm2-openssl
SHA256
1
0
Fork 0
forked from pool/tpm2-openssl
Code Pull Requests Activity
tpm2-openssl/tpm2-openssl.spec

61 lines
1.7 KiB
RPMSpec
Raw Normal View History

Accepting request 1090801 from home:firstyear:branches:security Submit new package tpm2-openssl, an openssl3 tpm2 provider. This is needed for upcoming Kanidm features. OBS-URL: https://build.opensuse.org/request/show/1090801 OBS-URL: https://build.opensuse.org/package/show/security/tpm2-openssl?expand=0&rev=1
2023-06-05 06:35:04 +00:00
#
# spec file for package tpm2-openssl
#
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Accepting request 1118389 from home:firstyear:branches:security ## Added * Added support for ECDH with a KDF, which is used by ECC-based CMS (S/MIME). * Added retrieval of OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY for EC keys and retrieval of TLS-GROUP provider capabilities to enable mTLS authentication (thanks to @rshearman). * Added mTLS example to documentation (thanks to @hoinmic). * Added missing RAND parameters: 'state' and 'strength' (thanks to @mccarey). * Added ability to run tests in a container (thanks to @afreof). * Added Visual Studio properties to simplify the Windows build (thanks to @philippun1). ## Changed * Symmetric operations are disabled by default. In most situations these are not needed and cause a huge performance penalty. To enable, configure with --enable-op-digest or --enable-op-cipher. ## Removed * Removed unofficial support for tpm2-tss < 3.2.0, which do not support the openssl 3.x. ## Fixed * Fixed key export: the private keys are not exportable, which shall fix some TPM-based sign operations (thanks to @fhars). * Fixed handle related operations on 32b machines (thanks to @dezgeg). * Fixed OSSL_FUNC_KEYMGMT_HAS operations with NULL keys. * Fixed a heap exception on some machines (thanks to @philippun1). * Fixed build warnings when building on the Fedora Linux. * In documentation and tests applied a correct order of providers (thanks to @hoinmic). * Modified documentation: the user-space resource manager (abrmd) is almost mandatory for complex scenarios such as SSL or X.509 operations. OBS-URL: https://build.opensuse.org/request/show/1118389 OBS-URL: https://build.opensuse.org/package/show/security/tpm2-openssl?expand=0&rev=3
2023-10-27 04:46:45 +00:00
Accepting request 1090801 from home:firstyear:branches:security Submit new package tpm2-openssl, an openssl3 tpm2 provider. This is needed for upcoming Kanidm features. OBS-URL: https://build.opensuse.org/request/show/1090801 OBS-URL: https://build.opensuse.org/package/show/security/tpm2-openssl?expand=0&rev=1
2023-06-05 06:35:04 +00:00
%define _MODULES_DIR %(pkg-config --variable=modulesdir libcrypto)
Name: tpm2-openssl
Accepting request 1118389 from home:firstyear:branches:security ## Added * Added support for ECDH with a KDF, which is used by ECC-based CMS (S/MIME). * Added retrieval of OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY for EC keys and retrieval of TLS-GROUP provider capabilities to enable mTLS authentication (thanks to @rshearman). * Added mTLS example to documentation (thanks to @hoinmic). * Added missing RAND parameters: 'state' and 'strength' (thanks to @mccarey). * Added ability to run tests in a container (thanks to @afreof). * Added Visual Studio properties to simplify the Windows build (thanks to @philippun1). ## Changed * Symmetric operations are disabled by default. In most situations these are not needed and cause a huge performance penalty. To enable, configure with --enable-op-digest or --enable-op-cipher. ## Removed * Removed unofficial support for tpm2-tss < 3.2.0, which do not support the openssl 3.x. ## Fixed * Fixed key export: the private keys are not exportable, which shall fix some TPM-based sign operations (thanks to @fhars). * Fixed handle related operations on 32b machines (thanks to @dezgeg). * Fixed OSSL_FUNC_KEYMGMT_HAS operations with NULL keys. * Fixed a heap exception on some machines (thanks to @philippun1). * Fixed build warnings when building on the Fedora Linux. * In documentation and tests applied a correct order of providers (thanks to @hoinmic). * Modified documentation: the user-space resource manager (abrmd) is almost mandatory for complex scenarios such as SSL or X.509 operations. OBS-URL: https://build.opensuse.org/request/show/1118389 OBS-URL: https://build.opensuse.org/package/show/security/tpm2-openssl?expand=0&rev=3
2023-10-27 04:46:45 +00:00
Version: 1.2.0
Accepting request 1090801 from home:firstyear:branches:security Submit new package tpm2-openssl, an openssl3 tpm2 provider. This is needed for upcoming Kanidm features. OBS-URL: https://build.opensuse.org/request/show/1090801 OBS-URL: https://build.opensuse.org/package/show/security/tpm2-openssl?expand=0&rev=1
2023-06-05 06:35:04 +00:00
Release: 0
Summary: OpenSSL 3 Engine for TPM2 devices
License: BSD-3-Clause
Group: Productivity/Security
URL: https://github.com/tpm2-software
Source0: %{url}/%{name}/releases/download/%{version}/%{name}-%{version}.tar.gz
Source1: %{url}/%{name}/releases/download/%{version}/%{name}-%{version}.tar.gz.asc
BuildRequires: autoconf-archive
BuildRequires: libgcrypt-devel
BuildRequires: libtool
BuildRequires: pkgconfig
BuildRequires: pkgconfig(libcrypto) >= 3
BuildRequires: pkgconfig(tss2-esys) >= 2.0
Conflicts: openssl_tpm2_engine
%description
Makes the TPM 2.0 accessible via the standard OpenSSL API and command-line tools, so
one can add TPM support to (almost) any OpenSSL 3.x based application.
%prep
%setup -q
%build
autoreconf -fvi
%configure
make V=1 %{?_smp_mflags}
%install
%make_install
%files
%doc README.md
%license LICENSE
%{_MODULES_DIR}/tpm2.la
%{_MODULES_DIR}/tpm2.so
%changelog
Copy Permalink