forked from pool/tpm2-openssl
4e0c343def
## Added * Added support for ECDH with a KDF, which is used by ECC-based CMS (S/MIME). * Added retrieval of OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY for EC keys and retrieval of TLS-GROUP provider capabilities to enable mTLS authentication (thanks to @rshearman). * Added mTLS example to documentation (thanks to @hoinmic). * Added missing RAND parameters: 'state' and 'strength' (thanks to @mccarey). * Added ability to run tests in a container (thanks to @afreof). * Added Visual Studio properties to simplify the Windows build (thanks to @philippun1). ## Changed * Symmetric operations are disabled by default. In most situations these are not needed and cause a huge performance penalty. To enable, configure with --enable-op-digest or --enable-op-cipher. ## Removed * Removed unofficial support for tpm2-tss < 3.2.0, which do not support the openssl 3.x. ## Fixed * Fixed key export: the private keys are not exportable, which shall fix some TPM-based sign operations (thanks to @fhars). * Fixed handle related operations on 32b machines (thanks to @dezgeg). * Fixed OSSL_FUNC_KEYMGMT_HAS operations with NULL keys. * Fixed a heap exception on some machines (thanks to @philippun1). * Fixed build warnings when building on the Fedora Linux. * In documentation and tests applied a correct order of providers (thanks to @hoinmic). * Modified documentation: the user-space resource manager (abrmd) is almost mandatory for complex scenarios such as SSL or X.509 operations. OBS-URL: https://build.opensuse.org/request/show/1118389 OBS-URL: https://build.opensuse.org/package/show/security/tpm2-openssl?expand=0&rev=3
61 lines
1.7 KiB
RPMSpec
61 lines
1.7 KiB
RPMSpec
#
|
|
# spec file for package tpm2-openssl
|
|
#
|
|
# Copyright (c) 2023 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%define _MODULES_DIR %(pkg-config --variable=modulesdir libcrypto)
|
|
|
|
Name: tpm2-openssl
|
|
Version: 1.2.0
|
|
Release: 0
|
|
Summary: OpenSSL 3 Engine for TPM2 devices
|
|
License: BSD-3-Clause
|
|
Group: Productivity/Security
|
|
URL: https://github.com/tpm2-software
|
|
Source0: %{url}/%{name}/releases/download/%{version}/%{name}-%{version}.tar.gz
|
|
Source1: %{url}/%{name}/releases/download/%{version}/%{name}-%{version}.tar.gz.asc
|
|
BuildRequires: autoconf-archive
|
|
BuildRequires: libgcrypt-devel
|
|
BuildRequires: libtool
|
|
BuildRequires: pkgconfig
|
|
BuildRequires: pkgconfig(libcrypto) >= 3
|
|
BuildRequires: pkgconfig(tss2-esys) >= 2.0
|
|
Conflicts: openssl_tpm2_engine
|
|
|
|
%description
|
|
Makes the TPM 2.0 accessible via the standard OpenSSL API and command-line tools, so
|
|
one can add TPM support to (almost) any OpenSSL 3.x based application.
|
|
|
|
%prep
|
|
%setup -q
|
|
|
|
%build
|
|
|
|
autoreconf -fvi
|
|
%configure
|
|
make V=1 %{?_smp_mflags}
|
|
|
|
%install
|
|
%make_install
|
|
|
|
%files
|
|
%doc README.md
|
|
%license LICENSE
|
|
%{_MODULES_DIR}/tpm2.la
|
|
%{_MODULES_DIR}/tpm2.so
|
|
|
|
%changelog
|