rpm/tpm2.0-tools
SHA256
1
0
Fork 0
forked from pool/tpm2.0-tools
Code Pull Requests Activity
6478528698
tpm2.0-tools/tpm2.0-tools.spec

102 lines
3.4 KiB
RPMSpec
Raw Normal View History

OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
#
- update description OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=9
2016-08-22 14:02:21 +02:00
# spec file for package tpm2.0-tools
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
#
- add fix_warnings.patch: fixes a couple of build errors resulting from LTO linking and -Werror. - update to major version 5.0: - Non Backwards Compatible Changes * Default hash algorithm is now sha256. Prior versions claimed sha1, but were inconsistent in choice. Best practice is to specify the hash algorithm to avoid surprises. * tpm2_tools and tss2_tools are now a busybox style commandlet. Ie tpm2_getrandom becomes tpm2 getrandom. make install will install symlinks to the old tool names and the tpm2 commandlet will interrogate argv[0] for the command to run. This will provide backwards compatibility if they are installed. If you wish to use the old names not installed system wide, set DESTDIR during install to a separate path and set the proper directory on PATH. * tpm2_eventlog's output changed to be YAML compliant. The output before was intended to be YAML compliant but was never properly checked and tested. * umask set to 0117 for all tools. * tpm2_getekcertificate now outputs the INTC EK certificates in PEM format by default. In order to output the URL safe variant of base64 encoded output of the INTC EK certificate use the added option --raw. - Dependency update * Update tpm2-tss dependency version to 3.0.1 * Update tpm2-abrmd dependency version to 2.3.3 - New tools and features * tpm2_zgen2phase: Add new tool to support command TPM2_CC_ZGen_2Phase. * tpm2_ecdhzgen: Add new tool to support command TPM2_CC_ECDH_ZGen. * tpm2_ecdhkeygen: Add new tool to support command TPM2_CC_ECDH_KeyGen. * tpm2_commit: Add new tool to support command TPM2_CC_Commit. * tpm2_ecephemeral: Add new tool to support command TPM2_CC_EC_Ephemeral. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=63
2021-01-28 11:50:59 +01:00
# Copyright (c) 2021 SUSE LLC
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
- update to minor version 3.1.4: * Fix various man pages * tpm2_getmanufec: fix OSSL build warnings * Fix broken -T option * Various build compatibility fixes * Fix some unit tests * Update build for recent autoconf-archive versions * Install m4 files OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=52
2019-08-26 09:43:27 +02:00
# Please submit bugfixes or comments via https://bugs.opensuse.org/
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
#
- update description OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=9
2016-08-22 14:02:21 +02:00
Accepting request 900118 from home:aplanas:branches:security - Disable lto to fix tpm2_checkquote error (boo#1187316) - Update service file to point to the correct revision OBS-URL: https://build.opensuse.org/request/show/900118 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=74
2021-06-15 11:48:43 +02:00
%define _lto_cflags %{nil}
- initial import of tpm2.0-tools OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=3
2016-03-24 14:51:15 +01:00
Name: tpm2.0-tools
- add 0001-tpm2_import-fix-fixed-AES-key-CVE-2021-3565.patch: no longer use a fixed AES key in the context of the tpm2_import command. Fixes CVE-2021-3565 (bsc#1186490). - drop fix_pie_linking.patch: now contained in upstream tarball - drop fix_warnings.patch: now contained in upstream tarball - update to upstream version 5.1: - Minimum tpm2-tss version dependency bumped to 3.1.0 - Minimum tpm2-abrmd version dependency bumped to 2.4.0 - tss2: - Support in tools for PolicyRef inclusion in policy search per latest TSS. - Support to use TPM objects protected by a policy with PolicySigned. - Enable backward compatibility to old Fapi callback API. - Fix PCR selection for tss2 quote. - Support policy signed policies by implementing Fapi_SetSignCB. - Command/ response parameter support for auditing and pHash policies: - lib/tpm2_util.c: Add method to determine hashing alg for cp/rphash - Add support to calculate rphash for tpm2_create, tpm2_activatecredential, tpm2_certify, tpm2_certifycreation, tpm2_changeauth, tpm2_changeeps, tpm2_changepps, tpm2_nvdefine, tpm2_nvextend, tpm2_unseal - Add support to calculate cphash for tpm2_changeeps, tpm2_changepps. - Session-support: - tpm2_sessionconfig: Add tool to display and configure session attributes. - tpm2_getrandom: Fix— session input was hardcoded for audit-only - tpm2_startauthsession: Add option to specify the bind object and its authorization value. - tpm2_startauthsession: support for bounded-only session. - tpm2_startauthsession: support for salted-only session. - tpm2_startauthsession: add option to specify an hmac session type. - Add support for specifying non-authorization sessions for audit and parameter encryption for tpm2_getrandom, tpm2_create, tpm2_nvextend, OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=70
2021-05-28 12:32:05 +02:00
Version: 5.1
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
Release: 0
- initial import of tpm2.0-tools OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=3
2016-03-24 14:51:15 +01:00
Summary: Trusted Platform Module (TPM) 2.0 administration tools
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=7
2016-04-05 15:46:01 +02:00
License: BSD-3-Clause
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
Group: Productivity/Security
- update to version 4.3: - changes in version 4.3: - tss2_*: Fix double-free errors in commands asking for password authorization - tss2_*: Fix shorthand command -f that was falsely requiring an argument - tss2_*: Update tss2_encrypt to the new FAPI interface - The argument 'policyPath' is removed which was never read anyway - tss2_*: Remove the additional '\n' that was appended when redirecting to stdout - tss2_*: Update mandatory vs optional treatment of arguments according to latest Fapi spec - tss2_*: tss2_getinfo now retrieves the correct FAPI version from Fapi_GetInfo - tss2_*: Fix the error handling in case of multiple inputs and/or outputs from stdin/stdout - tss2_*: Fix syntax errors and update content of man pages according to latest Fapi spec - tss2_*: Add parameter types to all man page - tss2_*: tss2_setappdata now reads from file or stdin allowing to store also binary data - tss2_*: Memory leaks are fixed in cases when a returned empty non-char output value was passed to file output - tss2_pcrextend: fix extending PCR 0 - tss2_quote: fix unused TSS2_RC in LOG_ERR - changes in 4.2.1: - Fix missing handle maps for ESY3 handle breaks. See #1994. - Bump ESYS minimum dependency version from 2.3.0 to 2.4.0. - Fix for loop declarations build error. - changes in 4.2: - Fix various issues reported by static analysis tools. - Add integration test for ECC based getekcertificate. - Fix for issue #1959 where ARM builds were failing. - Add a check in autotools to add "expect" as a package dependency for fapi tools. - tpm2_createek: Drop the unused -p or --ek-auth option - tpm2_policyor: List of policy files should be specified as an argument - instead of -l option. The -l option is still retained for backwards - compatibility. See issue#1894. - tpm2_eventlog: add a tool for parsing and displaying the event log. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=58
2020-10-22 14:14:07 +02:00
URL: https://github.com/tpm2-software/tpm2-tools/releases
- update to version 3.0.3: - various changes in tool options - man pages are now in section 1 (formerly in section 8) - tools are now installed in /usr/bin (formerly /usr/sbin) OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=32
2018-02-22 12:21:56 +01:00
Source0: https://github.com/tpm2-software/tpm2-tools/releases/download/%{version}/tpm2-tools-%{version}.tar.gz
- add fix_bad_bufsize.patch: fixes findings from compile time fread() checks that indicate bad buffer size specification. - add fix_bogus_warning.patch: fixes `maybe-unitialized` warnings that are bogus, since the variables in questions will be initialized in any case later on. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=55
2019-12-11 14:30:50 +01:00
Patch0: fix_bogus_warning.patch
- add 0001-tpm2_import-fix-fixed-AES-key-CVE-2021-3565.patch: no longer use a fixed AES key in the context of the tpm2_import command. Fixes CVE-2021-3565 (bsc#1186490). - drop fix_pie_linking.patch: now contained in upstream tarball - drop fix_warnings.patch: now contained in upstream tarball - update to upstream version 5.1: - Minimum tpm2-tss version dependency bumped to 3.1.0 - Minimum tpm2-abrmd version dependency bumped to 2.4.0 - tss2: - Support in tools for PolicyRef inclusion in policy search per latest TSS. - Support to use TPM objects protected by a policy with PolicySigned. - Enable backward compatibility to old Fapi callback API. - Fix PCR selection for tss2 quote. - Support policy signed policies by implementing Fapi_SetSignCB. - Command/ response parameter support for auditing and pHash policies: - lib/tpm2_util.c: Add method to determine hashing alg for cp/rphash - Add support to calculate rphash for tpm2_create, tpm2_activatecredential, tpm2_certify, tpm2_certifycreation, tpm2_changeauth, tpm2_changeeps, tpm2_changepps, tpm2_nvdefine, tpm2_nvextend, tpm2_unseal - Add support to calculate cphash for tpm2_changeeps, tpm2_changepps. - Session-support: - tpm2_sessionconfig: Add tool to display and configure session attributes. - tpm2_getrandom: Fix— session input was hardcoded for audit-only - tpm2_startauthsession: Add option to specify the bind object and its authorization value. - tpm2_startauthsession: support for bounded-only session. - tpm2_startauthsession: support for salted-only session. - tpm2_startauthsession: add option to specify an hmac session type. - Add support for specifying non-authorization sessions for audit and parameter encryption for tpm2_getrandom, tpm2_create, tpm2_nvextend, OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=70
2021-05-28 12:32:05 +02:00
Patch1: 0001-tpm2_import-fix-fixed-AES-key-CVE-2021-3565.patch
Accepting request 379344 from home:msmeissn:branches:security OBS-URL: https://build.opensuse.org/request/show/379344 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=4
2016-03-24 17:56:34 +01:00
BuildRequires: autoconf-archive
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
BuildRequires: automake
- update description OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=9
2016-08-22 14:02:21 +02:00
BuildRequires: gcc-c++
Accepting request 461444 from home:msmeissn:branches:security - Updated to 1.1.0 / 016-11-04 - Added * travis ci support. * Allow for unit tests to be enabled selectively. * tpm2_rc_decode tool: Decode TPM_RC error codes. * Android Make file * tpm2_listpersistent: list all persistent objects * test scripts for tpm2-tools * tpm2_nvreadlock * tpm2_getmanufec: retrieve EC from tpm manufacturer server. * Copy 'common' and 'sample' code from the TPM2.0-TSS repo. - Modified * tpm2_takeownership: update option -c to use lockout password to clear. * tpm2_listpcrs: add options -L and -s, rewrite to increase performance. * tpm2_quote: added -L option to support selection of multiple banks. * tpm2_quote: add -q option to get qualifying data. * configure: Use pkg-config to get info about libcurl and libcrypto. * configure: Use pkg-config to locate SAPI and TCTI headers / libraries. * tpm2_x: Add -X option to enable password input in Hex format. * tpm2_nvdefine: Change -X option to -I. * tpm2-nvwrite: fix for unable to write 1024B+ data. * tpm2_getmanufec: Fix base64 encoding. * tpm2_x: fixed a lot of TPM2B failures caused by wrong initialization. * tpm2_getmanufec: let configure handle libs. * tpm2_getmanufec: Convert from dos to unix format. * build: Check for TSS2 library @ configure time. * build: Detect required TSS2 and TCTI headers. * build: Use libtool to build the common library * build: Install all binaries into sbin. * build: Build common sources into library. OBS-URL: https://build.opensuse.org/request/show/461444 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=11
2017-03-01 17:18:06 +01:00
BuildRequires: libcurl-devel
BuildRequires: libopenssl-devel
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
BuildRequires: libtool
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=59
2020-10-22 15:30:56 +02:00
BuildRequires: libuuid-devel
- disable pandoc for all but openSUSE, since pandoc never was on SLE OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=35
2018-03-07 16:44:46 +01:00
%if 0%{?is_opensuse}
Accepting request 898108 from home:dimstar:Factory - Do not BuildRequire pandoc on ix86 architectures: the haskell stack is not supported on intel 32bit archs. OBS-URL: https://build.opensuse.org/request/show/898108 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=72
2021-06-14 10:57:05 +02:00
%ifnarch %{ix86}
- update to version 3.0.4: - Fix save and load for TPM2B_PRIVATE object. - Use a default buffer size for tpm2_nv{read,write} if the TPM reports a 0 size. - Fix --verbose and --version options crossover. - Generate man pages from markdown and include them in the distribution tarball. - Print usage summary if tools are executed with no options or man page can't be displayed. - man pages will be shipped for SLE version now, too (pandoc dependency was removed) OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=37
2018-05-02 13:07:16 +02:00
# releases prior to 3.0.4 required pandoc for building the man pages. On SLE
# we don't have pandoc and it requires a complete haskell stack so adding it
# is out of the question just for man pages.
#
# since 3.0.4 the man pages are shipped with the distribution tarball and we
# don't need to generate them any more. On openSUSE we can still keep this
# dependency for having fresh builds of the man pages (if that helps
# anything?).
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=42
2018-06-29 16:14:45 +02:00
#
# Update: In the 3.1.0 a required patch is still missing and the man pages
# won't be installed. they're shipped, though. so if pandoc isn't installed we
# need to install them explicitly.
- update to version 3.0.3: - various changes in tool options - man pages are now in section 1 (formerly in section 8) - tools are now installed in /usr/bin (formerly /usr/sbin) OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=32
2018-02-22 12:21:56 +01:00
BuildRequires: pandoc
- disable pandoc/man pages generation on SLE-15, because pandoc is not available there (and adding it would require two dozen additional haskell packages) OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=34
2018-03-07 15:45:11 +01:00
%endif
Accepting request 898108 from home:dimstar:Factory - Do not BuildRequire pandoc on ix86 architectures: the haskell stack is not supported on intel 32bit archs. OBS-URL: https://build.opensuse.org/request/show/898108 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=72
2021-06-14 10:57:05 +02:00
%endif
- buildrequire pkgconfig OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=13
2017-03-06 17:23:28 +01:00
BuildRequires: pkgconfig
Accepting request 461444 from home:msmeissn:branches:security - Updated to 1.1.0 / 016-11-04 - Added * travis ci support. * Allow for unit tests to be enabled selectively. * tpm2_rc_decode tool: Decode TPM_RC error codes. * Android Make file * tpm2_listpersistent: list all persistent objects * test scripts for tpm2-tools * tpm2_nvreadlock * tpm2_getmanufec: retrieve EC from tpm manufacturer server. * Copy 'common' and 'sample' code from the TPM2.0-TSS repo. - Modified * tpm2_takeownership: update option -c to use lockout password to clear. * tpm2_listpcrs: add options -L and -s, rewrite to increase performance. * tpm2_quote: added -L option to support selection of multiple banks. * tpm2_quote: add -q option to get qualifying data. * configure: Use pkg-config to get info about libcurl and libcrypto. * configure: Use pkg-config to locate SAPI and TCTI headers / libraries. * tpm2_x: Add -X option to enable password input in Hex format. * tpm2_nvdefine: Change -X option to -I. * tpm2-nvwrite: fix for unable to write 1024B+ data. * tpm2_getmanufec: Fix base64 encoding. * tpm2_x: fixed a lot of TPM2B failures caused by wrong initialization. * tpm2_getmanufec: let configure handle libs. * tpm2_getmanufec: Convert from dos to unix format. * build: Check for TSS2 library @ configure time. * build: Detect required TSS2 and TCTI headers. * build: Use libtool to build the common library * build: Install all binaries into sbin. * build: Build common sources into library. OBS-URL: https://build.opensuse.org/request/show/461444 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=11
2017-03-01 17:18:06 +01:00
BuildRequires: tpm2-0-tss-devel
Accepting request 517963 from home:mgerstner:branches:security - update to version 2.1.0: - dropped 0002-kdfa-use-openssl-for-hmac-not-tpm.patch, was backported upstream in commit 788a17abbe0000c560935ef9f31c9a6892d9ea33 - this version now can interact with the new resource manager tpm2.0-abrmd - Upstream changes: * Fix readx and writex on multiple EINTR returns. * Add support for the tabrmd TCTI. This is the new default. * Change default socket port from 2323 (the old resourcemgr) to 2321 (default simulator port). * Cherry-pick fix for CVE-2017-7524. * Fix tpm2_listpcr command line option handling. * Fix tpm2_getmanufec memory issues. OBS-URL: https://build.opensuse.org/request/show/517963 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=28
2017-08-21 18:23:48 +02:00
BuildRequires: tpm2.0-abrmd-devel
- update description OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=9
2016-08-22 14:02:21 +02:00
BuildRequires: unzip
Accepting request 514158 from home:mgerstner:branches:security this submission is coupled with sr#514156 and sr#514157 - added the new abrmd package to recommends, because the tools will otherwise not function OBS-URL: https://build.opensuse.org/request/show/514158 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=26
2017-08-03 10:12:24 +02:00
Recommends: tpm2.0-abrmd
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
Trusted Computing is a set of specifications published by the Trusted
Computing Group (TCG). The Trusted Platform Module (TPM) is the
- update description OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=9
2016-08-22 14:02:21 +02:00
hardware component for Trusted Computing. The tpm2.0-tools package
provides tools for enablement and configuration of the TPM 2.0 and
associated interfaces.
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
%prep
Accepting request 540183 from home:vitezslav_cizek:branches:security - update to version 2.1.1 * Potential memory leak fix when tcti/sapi initialization fails. * tpm2_listpcrs: use TPM2_GetCapability to determine PCRs to read * listpcrs: remove one redundant call to tpm get cap * listpcrs: fix for unsupported/disabled alg in -L * build: use supported comment to suppress GCC7 fallthrough warning * kdfa: allow to build with OpenSSL 1.1.x (bsc#1067392) - drop patches (upstream) * 0001-tpm2_listpcrs-use-TPM2_GetCapability-to-determine-PC.patch * tpm2.0-tools-fix-gcc7.patch OBS-URL: https://build.opensuse.org/request/show/540183 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=30
2017-11-09 15:39:53 +01:00
%setup -q -n tpm2-tools-%{version}
- add fix_bad_bufsize.patch: fixes findings from compile time fread() checks that indicate bad buffer size specification. - add fix_bogus_warning.patch: fixes `maybe-unitialized` warnings that are bogus, since the variables in questions will be initialized in any case later on. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=55
2019-12-11 14:30:50 +01:00
%patch0 -p1
- add fix_warnings.patch: fixes a couple of build errors resulting from LTO linking and -Werror. - update to major version 5.0: - Non Backwards Compatible Changes * Default hash algorithm is now sha256. Prior versions claimed sha1, but were inconsistent in choice. Best practice is to specify the hash algorithm to avoid surprises. * tpm2_tools and tss2_tools are now a busybox style commandlet. Ie tpm2_getrandom becomes tpm2 getrandom. make install will install symlinks to the old tool names and the tpm2 commandlet will interrogate argv[0] for the command to run. This will provide backwards compatibility if they are installed. If you wish to use the old names not installed system wide, set DESTDIR during install to a separate path and set the proper directory on PATH. * tpm2_eventlog's output changed to be YAML compliant. The output before was intended to be YAML compliant but was never properly checked and tested. * umask set to 0117 for all tools. * tpm2_getekcertificate now outputs the INTC EK certificates in PEM format by default. In order to output the URL safe variant of base64 encoded output of the INTC EK certificate use the added option --raw. - Dependency update * Update tpm2-tss dependency version to 3.0.1 * Update tpm2-abrmd dependency version to 2.3.3 - New tools and features * tpm2_zgen2phase: Add new tool to support command TPM2_CC_ZGen_2Phase. * tpm2_ecdhzgen: Add new tool to support command TPM2_CC_ECDH_ZGen. * tpm2_ecdhkeygen: Add new tool to support command TPM2_CC_ECDH_KeyGen. * tpm2_commit: Add new tool to support command TPM2_CC_Commit. * tpm2_ecephemeral: Add new tool to support command TPM2_CC_EC_Ephemeral. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=63
2021-01-28 11:50:59 +01:00
%patch1 -p1
Accepting request 379344 from home:msmeissn:branches:security OBS-URL: https://build.opensuse.org/request/show/379344 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=4
2016-03-24 17:56:34 +01:00
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
%build
- add fix_pie_linking.patch: fixes an error in the build system that causes the tss2 binary to be linked without passed LDFLAGS (like -pie), which causes the binary not to be position independent. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=64
2021-01-28 12:16:25 +01:00
# TODO: remove autoreconf once fix_pie_linking patch is no longer needed
- fix `--version` output of tools. Since now autoreconf is called and configure.ac attempts to fetch the version from git (which we don't have during building), the version was empty. Fix this by replacing the git invocation in configure.ac. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=68
2021-05-04 10:56:15 +02:00
# until then we need to repair the version specification which configure.ac
# wants to read from GIT which isn't there.
sed -i 's/m4_esyscmd_s([^)]\+)/%{version}/g' configure.ac
- add fix_pie_linking.patch: fixes an error in the build system that causes the tss2 binary to be linked without passed LDFLAGS (like -pie), which causes the binary not to be position independent. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=64
2021-01-28 12:16:25 +01:00
autoreconf -fvi
Accepting request 379344 from home:msmeissn:branches:security OBS-URL: https://build.opensuse.org/request/show/379344 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=4
2016-03-24 17:56:34 +01:00
%configure --disable-static
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
make %{?_smp_mflags}
%check
make %{?_smp_mflags} check
%install
make DESTDIR=%{buildroot} install %{?_smp_mflags}
find %{buildroot} -type f -name "*.la" -delete -print
%files
%defattr(-,root,root)
explicitly mark %license OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=67
2021-02-02 13:23:20 +01:00
%doc README.md doc/CHANGELOG.md
%license doc/LICENSE
- add fix_warnings.patch: fixes a couple of build errors resulting from LTO linking and -Werror. - update to major version 5.0: - Non Backwards Compatible Changes * Default hash algorithm is now sha256. Prior versions claimed sha1, but were inconsistent in choice. Best practice is to specify the hash algorithm to avoid surprises. * tpm2_tools and tss2_tools are now a busybox style commandlet. Ie tpm2_getrandom becomes tpm2 getrandom. make install will install symlinks to the old tool names and the tpm2 commandlet will interrogate argv[0] for the command to run. This will provide backwards compatibility if they are installed. If you wish to use the old names not installed system wide, set DESTDIR during install to a separate path and set the proper directory on PATH. * tpm2_eventlog's output changed to be YAML compliant. The output before was intended to be YAML compliant but was never properly checked and tested. * umask set to 0117 for all tools. * tpm2_getekcertificate now outputs the INTC EK certificates in PEM format by default. In order to output the URL safe variant of base64 encoded output of the INTC EK certificate use the added option --raw. - Dependency update * Update tpm2-tss dependency version to 3.0.1 * Update tpm2-abrmd dependency version to 2.3.3 - New tools and features * tpm2_zgen2phase: Add new tool to support command TPM2_CC_ZGen_2Phase. * tpm2_ecdhzgen: Add new tool to support command TPM2_CC_ECDH_ZGen. * tpm2_ecdhkeygen: Add new tool to support command TPM2_CC_ECDH_KeyGen. * tpm2_commit: Add new tool to support command TPM2_CC_Commit. * tpm2_ecephemeral: Add new tool to support command TPM2_CC_EC_Ephemeral. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=63
2021-01-28 11:50:59 +01:00
/usr/bin/tpm2*
/usr/bin/tss2*
%{_mandir}/man1/tpm2*
%{_mandir}/man1/tss2*
- add fix_bad_bufsize.patch: fixes findings from compile time fread() checks that indicate bad buffer size specification. - add fix_bogus_warning.patch: fixes `maybe-unitialized` warnings that are bogus, since the variables in questions will be initialized in any case later on. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=55
2019-12-11 14:30:50 +01:00
%dir %{_datadir}/bash-completion
%dir %{_datadir}/bash-completion/completions
%{_datadir}/bash-completion/completions/*
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=2
2016-03-24 13:32:00 +01:00
%changelog
Copy Permalink