aboutsummaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-crypto
AgeCommit message (Collapse)Author
2019-08-31cryptsetup: add libdevmapper to RDEPENDSHongxu Jia
Since commit [libdevmapper/lvm2: force recipe libdevmapper to populate sysroot only] applied, if recipe DEPENDS on libdevmapper, we have to add it to packages RDEPENDS to fix [file-rdeps] QA issue Set PREFERRED_RPROVIDER_libdevmapper = "lvm2" in layer.conf to explicit RDEPENDS on libdevmapper in cryptsetup Suggested-by : peter.kjellerstedt@axis.com Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-29cryptsetup: add libdevmapper to RDEPENDSHongxu Jia
Since commit [libdevmapper/lvm2: force recipe libdevmapper to populate sysroot only] applied, if recipe DEPENDS on libdevmapper, we have to add it to packages RDEPENDS to fix [file-rdeps] QA issue Skip [build-deps] and [file-rdeps] QA checking, add lvm2 to DEPENDS will triger circular dependencies, use recipe libdevmapper to replace, ignore the QA checking is fine. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-19cryptsetup: upgrade 2.1.0 -> 2.2.0.Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-05libkcapi: upgrade 1.1.4 -> 1.1.5Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-02libsodium: upgrade 1.0.17 -> 1.0.18Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-11cryptsetup: set the default luks format to LUKS1Yi Zhao
The cryptsetup 2.1 uses LUKS2 format as the default LUKS format. This change introduced the following issues: * LUKS2 requires kernel userspace crypto API to be available (CONFIG_CRYPTO_USER_API and CONFIG_CRYPTO_USER_API_SKCIPHER). But linux-yocto doesn't enable these options by default. If missing these kernel modules, the cryptsetup will fall back to using dmcrypt-device for keyslot processing. $ cryptsetup --debug --type luks luksFormat /dev/sda3 [snip] Checking if cipher aes-xts-plain64 is usable. Userspace crypto wrapper cannot use aes-xts-plain64 (-95). Using dmcrypt to access keyslot area. [snip] * The grub can not decrypt a LUKS2 encrypted boot partition because it doesn't support LUKS2 now. See grub bug: https://savannah.gnu.org/bugs/?55093 Add a PACKAGCONFIG for luks format and set the default LUKS format to LUKS1. The users can specify '--type luks2' in cryptsetup command line if they want to use LUKS2. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10cryptsetup: Don't enable udev for native buildRobert Joslyn
When building cryptsetup-native, don't enable udev support since there is not a udev-native recipe. When udev is enabled, change the dependency from a DEPENDS to an RDEPENDS. The --enable-udev option adds a runtime check for udev before using udev features of libdevmapper. Because of this, udev isn't needed at build time, just runtime. Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Reviewed-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15cryptsetup: Add PACKAGECONFIG optionsRobert Joslyn
Add various PACKAGECONFIG options, keeping the default options enabled. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-15libsodium: update to 1.0.17Oleksandr Kravchuk
License checkusm has been changed due to the copiright year change in the LICENSE file. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-15cryptsetup: Upgrade to 2.1.0Mingli Yu
Instead of hardcoding the version in SRC_URI, get the version for the folder of the source dynamically in SRC_URI. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-30botan: Upgrade to 2.9.0Khem Raj
License-Update: Update copyright years to 2019 https://github.com/randombit/botan/commit/d5edb39e968893bafe87a6a5ef12af45914c0d70#diff-98cd14c95bb22f9d397da0603a77d950 Swith to tarball fetcher Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-26libkcapi: Bump to v1.1.4Krzysztof Kozlowski
License file was updated with new dates ("2016" -> "2016 - 2019"). Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-26libkcapi: Fix missing bash (for apps) and unneeded checksums (for testapp) ↵Krzysztof Kozlowski
when building Fix build failures: 1. with "apps" PACKAGECONFIG: ERROR: libkcapi-1.1.3+gitAUTOINC+1c736c43eb-r0 do_package: QA Issue: libkcapi: Files/directories were installed but not shipped in any package: /usr/bin/.sha1hmac.hmac /usr/lib/.libkcapi.so.1.1.3.hmac 2. with "testapp" PACKAGECONFIG: ERROR: libkcapi-1.1.3+gitAUTOINC+1c736c43eb-r0 do_package_qa: QA Issue: /usr/libexec/libkcapi/test.sh contained in package libkcapi requires /bin/bash, but no providers found in RDEPENDS_libkcapi? [file-rdeps] Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-29botan: Add recipeKhem Raj
botan is a common crypto library used by various infrastructures e.g. qtcreator chromium etc. Its beneficial to build it once for the system and let apps use it if possible Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-09libkcapi: Disable Wsign-compare warning with clang/muslKhem Raj
clang 7.0 is grumpy and complains about cmsg structures and macros from sys/socket.h kcapi-kernel-if.c:25:11: error: comparison of integers of different signs: 'unsigned long' and 'long' [-Werror,-Wsign-compare] header = CMSG_NXTHDR(&msg, header); Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-08pkcs11-helper: Upgrade to 1.25.1Khem Raj
* Fixes build with OpenSSL 1.1.x License-Update: * update year to 2018 * remove 'All rights reserved' Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-30libkcapi: Upgrade to 1.1.3Khem Raj
Drop upstream patches Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Krzysztof Kozlowski <krzk@kernel.org>
2018-08-29cryptsetup: Upgrade to 2.0.4Mingli Yu
Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-20cryptsetup: Upgrade to 2.0.3Mingli Yu
* Update the homepage to https://gitlab.com/cryptsetup/cryptsetup * Add json-c to DEPENDS as cryptsetup requires the json-c library for JSON data processing since cryptsetup 2.0.0 per "The LUKS2 format and features" part of https://mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.0/v2.0.0-ReleaseNotes * Add file /usr/lib/tmpfiles.d/cryptsetup.conf to FILES_${PN} when systemd enabled in DISTRO_FEATURES Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-14libkcapi: Add new recipe for v1.1.1Krzysztof Kozlowski
Add new recipe with libkcapi v1.1.1, Linux Kernel Crypto API User Space Interface Library. Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-20engine-pkcs11: has been merged to libp11, so deleted.leimaohui
Reference to https://github.com/OpenSC/engine_pkcs11,there is no need to maitain this recipe. Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-14libsodium: update to 1.0.16Oleksandr Kravchuk
Added link to bug tracker and updated md5sum of LICENSE, which has been updated with the copyright year. Signed-off-by: Oleksandr Kravchuk <dev@sashko.rv.ua> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-29libmcrypt: add UPSTREAM_CHECK_URIYi Zhao
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-03-01cryptsetup: move to cryptoArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01libcrypto: move to recipes-cryptoArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01pkcs11-helper: move to recipes-cryptoArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01engine-pkcs11: move to recipes-cryptoArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01libmcryt: movre to recipes-cryptoArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>