From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E9322158020 for ; Tue, 11 Oct 2022 19:30:37 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 3FBE1E0866; Tue, 11 Oct 2022 19:30:37 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 25B1CE0866 for ; Tue, 11 Oct 2022 19:30:37 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id B5AEE340C40 for ; Tue, 11 Oct 2022 19:30:35 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 088D4615 for ; Tue, 11 Oct 2022 19:30:33 +0000 (UTC) From: "Andrew Ammerlaan" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Andrew Ammerlaan" Message-ID: <1665351768.0ebc305f15be628f1f0c163c6c52796b6a0105b0.andrewammerlaan@gentoo> Subject: [gentoo-commits] repo/proj/guru:master commit in: app-crypt/tpm2-openssl/ X-VCS-Repository: repo/proj/guru X-VCS-Files: app-crypt/tpm2-openssl/Manifest app-crypt/tpm2-openssl/tpm2-openssl-1.1.1.ebuild X-VCS-Directories: app-crypt/tpm2-openssl/ X-VCS-Committer: andrewammerlaan X-VCS-Committer-Name: Andrew Ammerlaan X-VCS-Revision: 0ebc305f15be628f1f0c163c6c52796b6a0105b0 X-VCS-Branch: master Date: Tue, 11 Oct 2022 19:30:33 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: 3effe1c9-4824-4908-99ff-00cf3a8763ba X-Archives-Hash: 77d7280d14a0f1db6c4a47129ea692a4 commit: 0ebc305f15be628f1f0c163c6c52796b6a0105b0 Author: Christopher Byrne gmail com> AuthorDate: Sun Oct 9 21:39:37 2022 +0000 Commit: Andrew Ammerlaan gentoo org> CommitDate: Sun Oct 9 21:42:48 2022 +0000 URL: https://gitweb.gentoo.org/repo/proj/guru.git/commit/?id=0ebc305f app-crypt/tpm2-openssl: add 1.1.1 Signed-off-by: Christopher Byrne gmail.com> app-crypt/tpm2-openssl/Manifest | 1 + app-crypt/tpm2-openssl/tpm2-openssl-1.1.1.ebuild | 97 ++++++++++++++++++++++++ 2 files changed, 98 insertions(+) diff --git a/app-crypt/tpm2-openssl/Manifest b/app-crypt/tpm2-openssl/Manifest index f6034158c..5bb40e0b3 100644 --- a/app-crypt/tpm2-openssl/Manifest +++ b/app-crypt/tpm2-openssl/Manifest @@ -1 +1,2 @@ DIST tpm2-openssl-1.1.0.tar.gz 415118 BLAKE2B c82410b1694b5db3e7b6614b1c4e2eef7354c87574334e1e81631bba707398e3d33d975dba2f2cbbf1b09d90f8ae94e7f01531c98b1efd666ca43298a02ead0a SHA512 a57e25d8efcbaa3a898a2803d816169e4227466f9391e5dc7c80a44686865cae0c24ee1973c6376d86d5be8081850f7b35cd0d4cb0b3a8cf654d400d78ae383b +DIST tpm2-openssl-1.1.1.tar.gz 415093 BLAKE2B 4f05b04ad059b9e5232bde2426102628927c71360cda5c3a1df02f951a8ecd6e1e036a6373ac5d7fc8209415874c52544eca3195e2361a165bc2c91f99ad85b1 SHA512 be4f114b21d15e6baeb7e756a787619d01f20171e86ebc42ea098c98d59ffd2ba648885b345b9d1a9dc3339199eaa6db8335f039587be338c1126e23349b8812 diff --git a/app-crypt/tpm2-openssl/tpm2-openssl-1.1.1.ebuild b/app-crypt/tpm2-openssl/tpm2-openssl-1.1.1.ebuild new file mode 100644 index 000000000..fff830dd8 --- /dev/null +++ b/app-crypt/tpm2-openssl/tpm2-openssl-1.1.1.ebuild @@ -0,0 +1,97 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +DESCRIPTION="OpenSSL Provider for TPM2 integration" + +HOMEPAGE="https://github.com/tpm2-software/tpm2-openssl" +SRC_URI="https://github.com/tpm2-software/tpm2-openssl/releases/download/${PV}/${P}.tar.gz" +LICENSE="BSD" + +SLOT="0/${PV}" +KEYWORDS="~amd64" +IUSE="test" + +RDEPEND=">=app-crypt/tpm2-tss-3.2.0:= + =dev-libs/openssl-3.0*:0=" + +DEPEND="${RDEPEND} + test? ( app-crypt/swtpm + app-crypt/tpm2-abrmd + app-crypt/tpm2-tools )" + +BDEPEND="sys-devel/autoconf-archive + virtual/pkgconfig" + +RESTRICT="!test? ( test )" + +dbus_run() { + ( + # start isolated dbus session bus + dbus_data=$(dbus-launch --sh-syntax) || exit + eval "${dbus_data}" + + $@ + ret=${?} + + kill "${DBUS_SESSION_BUS_PID}" + exit "${ret}" + ) || die +} + +tpm2_run_with_emulator() { + export XDG_CONFIG_HOME="${T}/.config/swtpm" + "${BROOT}"/usr/share/swtpm/swtpm-create-user-config-files || die + + mkdir -p "${XDG_CONFIG_HOME}/mytpm1" || die + swtpm_setup_args=( + --tpm2 + --tpmstate "${XDG_CONFIG_HOME}/mytpm1" + --createek + --allow-signing + --decryption + --create-ek-cert + --create-platform-cert + --lock-nvram + --overwrite + --display + ) + swtpm_setup "${swtpm_setup_args[@]}" || die + + swtpm_socket_args=( + --tpm2 + --tpmstate dir="${XDG_CONFIG_HOME}/mytpm1" + --flags startup-clear + --ctrl type=unixio,path="${XDG_CONFIG_HOME}/mytpm1/swtpm.socket.ctrl" + --server type=unixio,path="${XDG_CONFIG_HOME}/mytpm1/swtpm.socket" + --pid file="${XDG_CONFIG_HOME}/mytpm1/swtpm.pid" + --daemon + ) + swtpm socket "${swtpm_socket_args[@]}" || die + + tpm2_abrmd_args=( + --logger=stdout + --tcti=swtpm:path="${XDG_CONFIG_HOME}/mytpm1/swtpm.socket" + --session + --flush-all + ) + tpm2-abrmd "${tpm2_abrmd_args[@]}" & + + export TPM2OPENSSL_TCTI="tabrmd:bus_type=session" + export TPM2TOOLS_TCTI="tabrmd:bus_type=session" + + $@ || die + + # When swtpm dies, tmp2-abrmd will exit + kill $(< "${XDG_CONFIG_HOME}/mytpm1/swtpm.pid") || die +} + +src_install() { + default + find "${ED}" -iname \*.la -delete || die +} + +src_test() { + dbus_run tpm2_run_with_emulator make check +}