aboutsummaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-crypto
AgeCommit message (Collapse)Author
2021-09-07cryptsetup: Add runtime dependency on lvm2-udevrules for udevKristian Klausen
Without the udevrules cryptsetup luksOpen will be hanging with "Udev cookie 0xd4de0f6 (semid 5) waiting for zero". Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-25libkcapi: allow an option to build nativelySinan Kaya
Signed-off-by: Sinan Kaya <okaya@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-25libkcapi: add a hash only packageconfigSinan Kaya
Signed-off-by: Sinan Kaya <okaya@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-03Convert to new override syntaxMartin Jansa
This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-06-28cryptsetup: Only recommend kernel modules when building for targetPeter Kjellerstedt
Otherwise cryptsetup-native depends on the target kernel and thus the target compiler, as can be seen by: $ bitbake -g cryptsetup-native $ grep 'cryptsetup.*linux-yocto' task-depends.dot "cryptsetup-native.do_build" -> "linux-yocto.do_deploy" "cryptsetup-native.do_build" -> "linux-yocto.do_package_write_rpm" "cryptsetup-native.do_populate_sysroot" -> "linux-yocto.do_populate_sysroot" $ grep 'linux-yocto.*gcc-cross' task-depends.dot "linux-yocto.do_kernel_configme" -> "gcc-cross-x86_64.do_populate_sysroot" "linux-yocto.do_prepare_recipe_sysroot" -> "gcc-cross-x86_64.do_populate_sysroot" This also moves the runtime dependencies to near the end of the recipe, which is more customary. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18fsverity-utils: upgrade 1.3 -> 1.4zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-10cryptsetup: upgrade 2.3.5 -> 2.3.6zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-24botan: upgrade 2.14.0 -> 2.18.1Andreas Müller
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-26cryptsetup: DEPEND on renamed util-linux-libuuidKhem Raj
OE-core recipe is called util-linux-libuuid now Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Luca Boccassi <luca.boccassi@microsoft.com>
2021-03-19cryptsetup: upgrade 2.3.4 -> 2.3.5zhengruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-12cryptsetup: depend on new util-linux-uuid to break cycleLuca Boccassi
The util-linux recipe in Poky has been split, and libuuid is separate now: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=d42487bf52310d095178e480b7ddec2666471009 This allows to build util-linux with cryptsetup, for native dm-verity support. The main cryptsetup build needs libuuid and not the full util-linux, so switch the build-dependency over, thus allowing users to enable the cryptsetup util-linux's PACKAGECONFIG. The libblkid dependency is handled individually by the crypsetup's PACKAGECONFIG option. Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-08libmcrypt: Run autoreconf steps manuallyKhem Raj
This helps in re-running the configure generation with autotools 2.70+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20fsverity: fix MinGW buildLuca Boccassi
Upstream supports building a binary with MinGW but not a shared library, so remove the configure option for MinGW targets. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20fsverity: update to 1.3Luca Boccassi
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27pkcs11-helper: upgrade 1.26 -> 1.27zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-16libkcapi: Fix build on riscv32Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15botan: Mark incompatible with riscv32Khem Raj
CPU is not supported _yet_ Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02libkcapi: upgrade 1.2.0 -> 1.2.1Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-21Add recipe for fsverity-utilsLuca Boccassi
Library and command-line tool to manage the fs-verity feature, introduced in Linux 5.4 and supported in ext4 and f2fs filesystems. https://www.kernel.org/doc/html/latest/filesystems/fsverity.html Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-10cryptsetup: upgrade 2.3.3 -> 2.3.4Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-28libkcapi: update to 1.2.0Oleksandr Kravchuk
Removed patches were upstreamed. License checksum changed due to modified copyright years (see @8397f0f7c45264a). Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-06-27libmcrypt: set CLEANBROKENChangqing Li
reproduce steps: 1. bitbake libmcrypt 2. add bb.note('hello') in do_fetch of base.bbclass 3. bitbake libmcrypt do_configure failed: Making clean in doc make[1]: Entering directory 'build/tmp-glibc/work/cortexa72-wrs-linux/libmcrypt/2.5.8-r0/libmcrypt-2.5.8/doc' make[1]: *** No rule to make target 'clean'. Stop. make[1]: Leaving directory 'build/tmp-glibc/work/cortexa72-wrs-linux/libmcrypt/2.5.8-r0/libmcrypt-2.5.8/doc' Makefile:316: recipe for target 'clean-recursive' failed error occurred in autotools_preconfigure, since we have build one time in step1, we have CONFIGURESTAMPFILE, and also BB_TASKHASH changed after step2, in step3, after do_fetch, ${S} is renewed, but with main Makefile exist but no Makefile exist under sub folder, so above error occurred. set CLEANBROKEN to fix this error Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-06-10cryptsetup: upgrade 2.3.2 -> 2.3.3Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-05-22cryptsetup: upgrade 2.3.1 -> 2.3.2Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-08botan: upgrade 2.13.0 -> 2.14.0Pierre-Jean Texier
See full changelog https://botan.randombit.net/news.html#version-2-14-0-2020-04-06 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-17botan: Define --libdir to fix multilib build issuesKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-12cryptsetup: upgrade 2.3.0 -> 2.3.1Pierre-Jean Texier
This is a bug-fix release, see full changelog: - https://mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.3/v2.3.1-ReleaseNotes Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06pkcs11-helper: add UPSTREAM_CHECK_GITTAGREGEXPierre-Jean Texier
Fixes: INFO: pkcs11-helper, 1.26, 11, None, c7a0cfa08ddc75d963a835d3588170af0e5f1115 After this commit: INFO: Skip package pkcs11-helper (status = MATCH, current version = 1.26, next version = 1.26) Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-14cryptsetup: upgrade 2.2.2 -> 2.3.0Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-29pkcs11-helper: upgrade 1.25.1 -> 1.26Pierre-Jean Texier
See full changelog https://github.com/OpenSC/pkcs11-helper/releases/tag/pkcs11-helper-1.26 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-07botan: upgrade 2.11.0 -> 2.13.0Wang Mingyu
-License-Update: Copyright year updated to 2020. Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-20libkcapi: Update patch to upstream submitted oneKhem Raj
Use builtin_bswap32 with clang if available Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-18libkcapi: Move static inline functions where usedKhem Raj
Clang warns about unused functions on some arches e.g. mips unused function '_bswap32' [-Werror,-Wunused-function] Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-06cryptsetup: upgrade 2.2.1 -> 2.2.2Zheng Ruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-19cryptsetup: upgrade 2.2.0 -> 2.2.1Yuan Chao
Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-16botan: update to 2.11.0Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-31cryptsetup: add libdevmapper to RDEPENDSHongxu Jia
Since commit [libdevmapper/lvm2: force recipe libdevmapper to populate sysroot only] applied, if recipe DEPENDS on libdevmapper, we have to add it to packages RDEPENDS to fix [file-rdeps] QA issue Set PREFERRED_RPROVIDER_libdevmapper = "lvm2" in layer.conf to explicit RDEPENDS on libdevmapper in cryptsetup Suggested-by : peter.kjellerstedt@axis.com Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-29cryptsetup: add libdevmapper to RDEPENDSHongxu Jia
Since commit [libdevmapper/lvm2: force recipe libdevmapper to populate sysroot only] applied, if recipe DEPENDS on libdevmapper, we have to add it to packages RDEPENDS to fix [file-rdeps] QA issue Skip [build-deps] and [file-rdeps] QA checking, add lvm2 to DEPENDS will triger circular dependencies, use recipe libdevmapper to replace, ignore the QA checking is fine. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-19cryptsetup: upgrade 2.1.0 -> 2.2.0.Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-05libkcapi: upgrade 1.1.4 -> 1.1.5Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-02libsodium: upgrade 1.0.17 -> 1.0.18Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-11cryptsetup: set the default luks format to LUKS1Yi Zhao
The cryptsetup 2.1 uses LUKS2 format as the default LUKS format. This change introduced the following issues: * LUKS2 requires kernel userspace crypto API to be available (CONFIG_CRYPTO_USER_API and CONFIG_CRYPTO_USER_API_SKCIPHER). But linux-yocto doesn't enable these options by default. If missing these kernel modules, the cryptsetup will fall back to using dmcrypt-device for keyslot processing. $ cryptsetup --debug --type luks luksFormat /dev/sda3 [snip] Checking if cipher aes-xts-plain64 is usable. Userspace crypto wrapper cannot use aes-xts-plain64 (-95). Using dmcrypt to access keyslot area. [snip] * The grub can not decrypt a LUKS2 encrypted boot partition because it doesn't support LUKS2 now. See grub bug: https://savannah.gnu.org/bugs/?55093 Add a PACKAGCONFIG for luks format and set the default LUKS format to LUKS1. The users can specify '--type luks2' in cryptsetup command line if they want to use LUKS2. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10cryptsetup: Don't enable udev for native buildRobert Joslyn
When building cryptsetup-native, don't enable udev support since there is not a udev-native recipe. When udev is enabled, change the dependency from a DEPENDS to an RDEPENDS. The --enable-udev option adds a runtime check for udev before using udev features of libdevmapper. Because of this, udev isn't needed at build time, just runtime. Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Reviewed-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15cryptsetup: Add PACKAGECONFIG optionsRobert Joslyn
Add various PACKAGECONFIG options, keeping the default options enabled. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-15libsodium: update to 1.0.17Oleksandr Kravchuk
License checkusm has been changed due to the copiright year change in the LICENSE file. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-15cryptsetup: Upgrade to 2.1.0Mingli Yu
Instead of hardcoding the version in SRC_URI, get the version for the folder of the source dynamically in SRC_URI. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-30botan: Upgrade to 2.9.0Khem Raj
License-Update: Update copyright years to 2019 https://github.com/randombit/botan/commit/d5edb39e968893bafe87a6a5ef12af45914c0d70#diff-98cd14c95bb22f9d397da0603a77d950 Swith to tarball fetcher Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-26libkcapi: Bump to v1.1.4Krzysztof Kozlowski
License file was updated with new dates ("2016" -> "2016 - 2019"). Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-26libkcapi: Fix missing bash (for apps) and unneeded checksums (for testapp) ↵Krzysztof Kozlowski
when building Fix build failures: 1. with "apps" PACKAGECONFIG: ERROR: libkcapi-1.1.3+gitAUTOINC+1c736c43eb-r0 do_package: QA Issue: libkcapi: Files/directories were installed but not shipped in any package: /usr/bin/.sha1hmac.hmac /usr/lib/.libkcapi.so.1.1.3.hmac 2. with "testapp" PACKAGECONFIG: ERROR: libkcapi-1.1.3+gitAUTOINC+1c736c43eb-r0 do_package_qa: QA Issue: /usr/libexec/libkcapi/test.sh contained in package libkcapi requires /bin/bash, but no providers found in RDEPENDS_libkcapi? [file-rdeps] Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-29botan: Add recipeKhem Raj
botan is a common crypto library used by various infrastructures e.g. qtcreator chromium etc. Its beneficial to build it once for the system and let apps use it if possible Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-24 15:38:10 +0000