aboutsummaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-crypto
AgeCommit message (Collapse)Author
2021-03-26cryptsetup: DEPEND on renamed util-linux-libuuidKhem Raj
OE-core recipe is called util-linux-libuuid now Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Luca Boccassi <luca.boccassi@microsoft.com>
2021-03-19cryptsetup: upgrade 2.3.4 -> 2.3.5zhengruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-12cryptsetup: depend on new util-linux-uuid to break cycleLuca Boccassi
The util-linux recipe in Poky has been split, and libuuid is separate now: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=d42487bf52310d095178e480b7ddec2666471009 This allows to build util-linux with cryptsetup, for native dm-verity support. The main cryptsetup build needs libuuid and not the full util-linux, so switch the build-dependency over, thus allowing users to enable the cryptsetup util-linux's PACKAGECONFIG. The libblkid dependency is handled individually by the crypsetup's PACKAGECONFIG option. Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-08libmcrypt: Run autoreconf steps manuallyKhem Raj
This helps in re-running the configure generation with autotools 2.70+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20fsverity: fix MinGW buildLuca Boccassi
Upstream supports building a binary with MinGW but not a shared library, so remove the configure option for MinGW targets. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20fsverity: update to 1.3Luca Boccassi
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27pkcs11-helper: upgrade 1.26 -> 1.27zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-16libkcapi: Fix build on riscv32Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15botan: Mark incompatible with riscv32Khem Raj
CPU is not supported _yet_ Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02libkcapi: upgrade 1.2.0 -> 1.2.1Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-21Add recipe for fsverity-utilsLuca Boccassi
Library and command-line tool to manage the fs-verity feature, introduced in Linux 5.4 and supported in ext4 and f2fs filesystems. https://www.kernel.org/doc/html/latest/filesystems/fsverity.html Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-10cryptsetup: upgrade 2.3.3 -> 2.3.4Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-28libkcapi: update to 1.2.0Oleksandr Kravchuk
Removed patches were upstreamed. License checksum changed due to modified copyright years (see @8397f0f7c45264a). Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-06-27libmcrypt: set CLEANBROKENChangqing Li
reproduce steps: 1. bitbake libmcrypt 2. add bb.note('hello') in do_fetch of base.bbclass 3. bitbake libmcrypt do_configure failed: Making clean in doc make[1]: Entering directory 'build/tmp-glibc/work/cortexa72-wrs-linux/libmcrypt/2.5.8-r0/libmcrypt-2.5.8/doc' make[1]: *** No rule to make target 'clean'. Stop. make[1]: Leaving directory 'build/tmp-glibc/work/cortexa72-wrs-linux/libmcrypt/2.5.8-r0/libmcrypt-2.5.8/doc' Makefile:316: recipe for target 'clean-recursive' failed error occurred in autotools_preconfigure, since we have build one time in step1, we have CONFIGURESTAMPFILE, and also BB_TASKHASH changed after step2, in step3, after do_fetch, ${S} is renewed, but with main Makefile exist but no Makefile exist under sub folder, so above error occurred. set CLEANBROKEN to fix this error Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-06-10cryptsetup: upgrade 2.3.2 -> 2.3.3Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-05-22cryptsetup: upgrade 2.3.1 -> 2.3.2Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-08botan: upgrade 2.13.0 -> 2.14.0Pierre-Jean Texier
See full changelog https://botan.randombit.net/news.html#version-2-14-0-2020-04-06 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-17botan: Define --libdir to fix multilib build issuesKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-12cryptsetup: upgrade 2.3.0 -> 2.3.1Pierre-Jean Texier
This is a bug-fix release, see full changelog: - https://mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.3/v2.3.1-ReleaseNotes Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06pkcs11-helper: add UPSTREAM_CHECK_GITTAGREGEXPierre-Jean Texier
Fixes: INFO: pkcs11-helper, 1.26, 11, None, c7a0cfa08ddc75d963a835d3588170af0e5f1115 After this commit: INFO: Skip package pkcs11-helper (status = MATCH, current version = 1.26, next version = 1.26) Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-14cryptsetup: upgrade 2.2.2 -> 2.3.0Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-29pkcs11-helper: upgrade 1.25.1 -> 1.26Pierre-Jean Texier
See full changelog https://github.com/OpenSC/pkcs11-helper/releases/tag/pkcs11-helper-1.26 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-07botan: upgrade 2.11.0 -> 2.13.0Wang Mingyu
-License-Update: Copyright year updated to 2020. Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-20libkcapi: Update patch to upstream submitted oneKhem Raj
Use builtin_bswap32 with clang if available Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-18libkcapi: Move static inline functions where usedKhem Raj
Clang warns about unused functions on some arches e.g. mips unused function '_bswap32' [-Werror,-Wunused-function] Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-06cryptsetup: upgrade 2.2.1 -> 2.2.2Zheng Ruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-19cryptsetup: upgrade 2.2.0 -> 2.2.1Yuan Chao
Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-16botan: update to 2.11.0Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-31cryptsetup: add libdevmapper to RDEPENDSHongxu Jia
Since commit [libdevmapper/lvm2: force recipe libdevmapper to populate sysroot only] applied, if recipe DEPENDS on libdevmapper, we have to add it to packages RDEPENDS to fix [file-rdeps] QA issue Set PREFERRED_RPROVIDER_libdevmapper = "lvm2" in layer.conf to explicit RDEPENDS on libdevmapper in cryptsetup Suggested-by : peter.kjellerstedt@axis.com Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-29cryptsetup: add libdevmapper to RDEPENDSHongxu Jia
Since commit [libdevmapper/lvm2: force recipe libdevmapper to populate sysroot only] applied, if recipe DEPENDS on libdevmapper, we have to add it to packages RDEPENDS to fix [file-rdeps] QA issue Skip [build-deps] and [file-rdeps] QA checking, add lvm2 to DEPENDS will triger circular dependencies, use recipe libdevmapper to replace, ignore the QA checking is fine. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-19cryptsetup: upgrade 2.1.0 -> 2.2.0.Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-05libkcapi: upgrade 1.1.4 -> 1.1.5Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-02libsodium: upgrade 1.0.17 -> 1.0.18Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-11cryptsetup: set the default luks format to LUKS1Yi Zhao
The cryptsetup 2.1 uses LUKS2 format as the default LUKS format. This change introduced the following issues: * LUKS2 requires kernel userspace crypto API to be available (CONFIG_CRYPTO_USER_API and CONFIG_CRYPTO_USER_API_SKCIPHER). But linux-yocto doesn't enable these options by default. If missing these kernel modules, the cryptsetup will fall back to using dmcrypt-device for keyslot processing. $ cryptsetup --debug --type luks luksFormat /dev/sda3 [snip] Checking if cipher aes-xts-plain64 is usable. Userspace crypto wrapper cannot use aes-xts-plain64 (-95). Using dmcrypt to access keyslot area. [snip] * The grub can not decrypt a LUKS2 encrypted boot partition because it doesn't support LUKS2 now. See grub bug: https://savannah.gnu.org/bugs/?55093 Add a PACKAGCONFIG for luks format and set the default LUKS format to LUKS1. The users can specify '--type luks2' in cryptsetup command line if they want to use LUKS2. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10cryptsetup: Don't enable udev for native buildRobert Joslyn
When building cryptsetup-native, don't enable udev support since there is not a udev-native recipe. When udev is enabled, change the dependency from a DEPENDS to an RDEPENDS. The --enable-udev option adds a runtime check for udev before using udev features of libdevmapper. Because of this, udev isn't needed at build time, just runtime. Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Reviewed-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15cryptsetup: Add PACKAGECONFIG optionsRobert Joslyn
Add various PACKAGECONFIG options, keeping the default options enabled. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-15libsodium: update to 1.0.17Oleksandr Kravchuk
License checkusm has been changed due to the copiright year change in the LICENSE file. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-15cryptsetup: Upgrade to 2.1.0Mingli Yu
Instead of hardcoding the version in SRC_URI, get the version for the folder of the source dynamically in SRC_URI. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-30botan: Upgrade to 2.9.0Khem Raj
License-Update: Update copyright years to 2019 https://github.com/randombit/botan/commit/d5edb39e968893bafe87a6a5ef12af45914c0d70#diff-98cd14c95bb22f9d397da0603a77d950 Swith to tarball fetcher Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-26libkcapi: Bump to v1.1.4Krzysztof Kozlowski
License file was updated with new dates ("2016" -> "2016 - 2019"). Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-26libkcapi: Fix missing bash (for apps) and unneeded checksums (for testapp) ↵Krzysztof Kozlowski
when building Fix build failures: 1. with "apps" PACKAGECONFIG: ERROR: libkcapi-1.1.3+gitAUTOINC+1c736c43eb-r0 do_package: QA Issue: libkcapi: Files/directories were installed but not shipped in any package: /usr/bin/.sha1hmac.hmac /usr/lib/.libkcapi.so.1.1.3.hmac 2. with "testapp" PACKAGECONFIG: ERROR: libkcapi-1.1.3+gitAUTOINC+1c736c43eb-r0 do_package_qa: QA Issue: /usr/libexec/libkcapi/test.sh contained in package libkcapi requires /bin/bash, but no providers found in RDEPENDS_libkcapi? [file-rdeps] Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-29botan: Add recipeKhem Raj
botan is a common crypto library used by various infrastructures e.g. qtcreator chromium etc. Its beneficial to build it once for the system and let apps use it if possible Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-09libkcapi: Disable Wsign-compare warning with clang/muslKhem Raj
clang 7.0 is grumpy and complains about cmsg structures and macros from sys/socket.h kcapi-kernel-if.c:25:11: error: comparison of integers of different signs: 'unsigned long' and 'long' [-Werror,-Wsign-compare] header = CMSG_NXTHDR(&msg, header); Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-08pkcs11-helper: Upgrade to 1.25.1Khem Raj
* Fixes build with OpenSSL 1.1.x License-Update: * update year to 2018 * remove 'All rights reserved' Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-30libkcapi: Upgrade to 1.1.3Khem Raj
Drop upstream patches Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Krzysztof Kozlowski <krzk@kernel.org>
2018-08-29cryptsetup: Upgrade to 2.0.4Mingli Yu
Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-20cryptsetup: Upgrade to 2.0.3Mingli Yu
* Update the homepage to https://gitlab.com/cryptsetup/cryptsetup * Add json-c to DEPENDS as cryptsetup requires the json-c library for JSON data processing since cryptsetup 2.0.0 per "The LUKS2 format and features" part of https://mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.0/v2.0.0-ReleaseNotes * Add file /usr/lib/tmpfiles.d/cryptsetup.conf to FILES_${PN} when systemd enabled in DISTRO_FEATURES Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-14libkcapi: Add new recipe for v1.1.1Krzysztof Kozlowski
Add new recipe with libkcapi v1.1.1, Linux Kernel Crypto API User Space Interface Library. Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-20engine-pkcs11: has been merged to libp11, so deleted.leimaohui
Reference to https://github.com/OpenSC/engine_pkcs11,there is no need to maitain this recipe. Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-14libsodium: update to 1.0.16Oleksandr Kravchuk
Added link to bug tracker and updated md5sum of LICENSE, which has been updated with the copyright year. Signed-off-by: Oleksandr Kravchuk <dev@sashko.rv.ua> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-30 08:24:36 +0000