summaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-crypto
Commit message (Collapse)AuthorAgeFilesLines
* botan: Define --libdir to fix multilib build issuesKhem Raj2020-03-171-2/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: upgrade 2.3.0 -> 2.3.1Pierre-Jean Texier2020-03-121-2/+2
| | | | | | | | | This is a bug-fix release, see full changelog: - https://mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.3/v2.3.1-ReleaseNotes Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pkcs11-helper: add UPSTREAM_CHECK_GITTAGREGEXPierre-Jean Texier2020-03-061-0/+2
| | | | | | | | | | | | | Fixes: INFO: pkcs11-helper, 1.26, 11, None, c7a0cfa08ddc75d963a835d3588170af0e5f1115 After this commit: INFO: Skip package pkcs11-helper (status = MATCH, current version = 1.26, next version = 1.26) Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: upgrade 2.2.2 -> 2.3.0Wang Mingyu2020-02-141-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pkcs11-helper: upgrade 1.25.1 -> 1.26Pierre-Jean Texier2020-01-291-2/+2
| | | | | | | See full changelog https://github.com/OpenSC/pkcs11-helper/releases/tag/pkcs11-helper-1.26 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 2.11.0 -> 2.13.0Wang Mingyu2020-01-071-3/+3
| | | | | | | -License-Update: Copyright year updated to 2020. Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libkcapi: Update patch to upstream submitted oneKhem Raj2019-11-203-11/+53
| | | | | | Use builtin_bswap32 with clang if available Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libkcapi: Move static inline functions where usedKhem Raj2019-11-182-0/+72
| | | | | | | Clang warns about unused functions on some arches e.g. mips unused function '_bswap32' [-Werror,-Wunused-function] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: upgrade 2.2.1 -> 2.2.2Zheng Ruoqin2019-11-061-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: upgrade 2.2.0 -> 2.2.1Yuan Chao2019-09-191-2/+2
| | | | | Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: update to 2.11.0Oleksandr Kravchuk2019-09-161-7/+4
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: add libdevmapper to RDEPENDSHongxu Jia2019-08-311-2/+0
| | | | | | | | | | | | | Since commit [libdevmapper/lvm2: force recipe libdevmapper to populate sysroot only] applied, if recipe DEPENDS on libdevmapper, we have to add it to packages RDEPENDS to fix [file-rdeps] QA issue Set PREFERRED_RPROVIDER_libdevmapper = "lvm2" in layer.conf to explicit RDEPENDS on libdevmapper in cryptsetup Suggested-by : peter.kjellerstedt@axis.com Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: add libdevmapper to RDEPENDSHongxu Jia2019-08-291-0/+6
| | | | | | | | | | | | | Since commit [libdevmapper/lvm2: force recipe libdevmapper to populate sysroot only] applied, if recipe DEPENDS on libdevmapper, we have to add it to packages RDEPENDS to fix [file-rdeps] QA issue Skip [build-deps] and [file-rdeps] QA checking, add lvm2 to DEPENDS will triger circular dependencies, use recipe libdevmapper to replace, ignore the QA checking is fine. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: upgrade 2.1.0 -> 2.2.0.Zang Ruochen2019-08-191-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libkcapi: upgrade 1.1.4 -> 1.1.5Zang Ruochen2019-08-051-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsodium: upgrade 1.0.17 -> 1.0.18Zang Ruochen2019-08-021-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: set the default luks format to LUKS1Yi Zhao2019-07-111-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | The cryptsetup 2.1 uses LUKS2 format as the default LUKS format. This change introduced the following issues: * LUKS2 requires kernel userspace crypto API to be available (CONFIG_CRYPTO_USER_API and CONFIG_CRYPTO_USER_API_SKCIPHER). But linux-yocto doesn't enable these options by default. If missing these kernel modules, the cryptsetup will fall back to using dmcrypt-device for keyslot processing. $ cryptsetup --debug --type luks luksFormat /dev/sda3 [snip] Checking if cipher aes-xts-plain64 is usable. Userspace crypto wrapper cannot use aes-xts-plain64 (-95). Using dmcrypt to access keyslot area. [snip] * The grub can not decrypt a LUKS2 encrypted boot partition because it doesn't support LUKS2 now. See grub bug: https://savannah.gnu.org/bugs/?55093 Add a PACKAGCONFIG for luks format and set the default LUKS format to LUKS1. The users can specify '--type luks2' in cryptsetup command line if they want to use LUKS2. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: Don't enable udev for native buildRobert Joslyn2019-07-101-2/+4
| | | | | | | | | | | | | | When building cryptsetup-native, don't enable udev support since there is not a udev-native recipe. When udev is enabled, change the dependency from a DEPENDS to an RDEPENDS. The --enable-udev option adds a runtime check for udev before using udev features of libdevmapper. Because of this, udev isn't needed at build time, just runtime. Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Reviewed-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: Add PACKAGECONFIG optionsRobert Joslyn2019-06-151-2/+49
| | | | | | Add various PACKAGECONFIG options, keeping the default options enabled. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsodium: update to 1.0.17Oleksandr Kravchuk2019-03-151-3/+3
| | | | | | | | License checkusm has been changed due to the copiright year change in the LICENSE file. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: Upgrade to 2.1.0Mingli Yu2019-02-151-3/+3
| | | | | | | | | Instead of hardcoding the version in SRC_URI, get the version for the folder of the source dynamically in SRC_URI. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: Upgrade to 2.9.0Khem Raj2019-01-301-7/+5
| | | | | | | | | | License-Update: Update copyright years to 2019 https://github.com/randombit/botan/commit/d5edb39e968893bafe87a6a5ef12af45914c0d70#diff-98cd14c95bb22f9d397da0603a77d950 Swith to tarball fetcher Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libkcapi: Bump to v1.1.4Krzysztof Kozlowski2019-01-261-4/+3
| | | | | | | License file was updated with new dates ("2016" -> "2016 - 2019"). Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libkcapi: Fix missing bash (for apps) and unneeded checksums (for testapp) ↵Krzysztof Kozlowski2019-01-261-1/+5
| | | | | | | | | | | | | | | | | | | | | when building Fix build failures: 1. with "apps" PACKAGECONFIG: ERROR: libkcapi-1.1.3+gitAUTOINC+1c736c43eb-r0 do_package: QA Issue: libkcapi: Files/directories were installed but not shipped in any package: /usr/bin/.sha1hmac.hmac /usr/lib/.libkcapi.so.1.1.3.hmac 2. with "testapp" PACKAGECONFIG: ERROR: libkcapi-1.1.3+gitAUTOINC+1c736c43eb-r0 do_package_qa: QA Issue: /usr/libexec/libkcapi/test.sh contained in package libkcapi requires /bin/bash, but no providers found in RDEPENDS_libkcapi? [file-rdeps] Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: Add recipeKhem Raj2018-09-291-0/+55
| | | | | | | | botan is a common crypto library used by various infrastructures e.g. qtcreator chromium etc. Its beneficial to build it once for the system and let apps use it if possible Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libkcapi: Disable Wsign-compare warning with clang/muslKhem Raj2018-09-091-0/+2
| | | | | | | | | clang 7.0 is grumpy and complains about cmsg structures and macros from sys/socket.h kcapi-kernel-if.c:25:11: error: comparison of integers of different signs: 'unsigned long' and 'long' [-Werror,-Wsign-compare] header = CMSG_NXTHDR(&msg, header); Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pkcs11-helper: Upgrade to 1.25.1Khem Raj2018-09-081-5/+4
| | | | | | | | | | | * Fixes build with OpenSSL 1.1.x License-Update: * update year to 2018 * remove 'All rights reserved' Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libkcapi: Upgrade to 1.1.3Khem Raj2018-08-304-160/+3
| | | | | | | Drop upstream patches Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Krzysztof Kozlowski <krzk@kernel.org>
* cryptsetup: Upgrade to 2.0.4Mingli Yu2018-08-291-2/+2
| | | | | Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: Upgrade to 2.0.3Mingli Yu2018-07-201-5/+7
| | | | | | | | | | | | | * Update the homepage to https://gitlab.com/cryptsetup/cryptsetup * Add json-c to DEPENDS as cryptsetup requires the json-c library for JSON data processing since cryptsetup 2.0.0 per "The LUKS2 format and features" part of https://mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.0/v2.0.0-ReleaseNotes * Add file /usr/lib/tmpfiles.d/cryptsetup.conf to FILES_${PN} when systemd enabled in DISTRO_FEATURES Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libkcapi: Add new recipe for v1.1.1Krzysztof Kozlowski2018-07-144-0/+183
| | | | | | | | Add new recipe with libkcapi v1.1.1, Linux Kernel Crypto API User Space Interface Library. Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* engine-pkcs11: has been merged to libp11, so deleted.leimaohui2018-06-201-31/+0
| | | | | | | Reference to https://github.com/OpenSC/engine_pkcs11,there is no need to maitain this recipe. Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsodium: update to 1.0.16Oleksandr Kravchuk2018-06-142-12/+13
| | | | | | | | Added link to bug tracker and updated md5sum of LICENSE, which has been updated with the copyright year. Signed-off-by: Oleksandr Kravchuk <dev@sashko.rv.ua> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmcrypt: add UPSTREAM_CHECK_URIYi Zhao2018-05-291-0/+3
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: move to cryptoArmin Kuster2018-03-011-0/+36
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libcrypto: move to recipes-cryptoArmin Kuster2018-03-011-0/+12
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pkcs11-helper: move to recipes-cryptoArmin Kuster2018-03-011-0/+29
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* engine-pkcs11: move to recipes-cryptoArmin Kuster2018-03-011-0/+31
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libmcryt: movre to recipes-cryptoArmin Kuster2018-03-011-0/+12
Signed-off-by: Armin Kuster <akuster808@gmail.com>