linux/meta-openembedded.git/meta-oe/recipes-crypto, branch styhead

cryptsetup: fix udev PACKAGECONFIG

2024-11-19T21:13:28+00:00

This commit removed the lvm2-udevrules package. [https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=c37c867e1adddd6fa39cf3f3d4c6688ea6dc825a] Align accordingly to avoid error at do_rootfs Error: Problem 1: package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libblockdev.so.3()(64bit), but none of the providers can be installed - package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libbd_utils.so.3()(64bit), but none of the providers can be installed - package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libblockdev >= 3.2.0, but none of the providers can be installed - package gvfs-1.56.0-r0.corei7_64 from oe-repo requires udisks2, but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12()(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.0)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.4)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.7)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires cryptsetup >= 2.7.5, but none of the providers can be installed - conflicting requests - nothing provides lvm2-udevrules needed by cryptsetup-2.7.5-r0.corei7_64 from oe-repo Problem 2: package gvfs-1.56.0-r0.corei7_64 from oe-repo requires udisks2, but none of the providers can be installed - package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libblockdev.so.3()(64bit), but none of the providers can be installed - package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libbd_utils.so.3()(64bit), but none of the providers can be installed - package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libblockdev >= 3.2.0, but none of the providers can be installed - package gvfsd-trash-1.56.0-r0.corei7_64 from oe-repo requires libgvfscommon.so()(64bit), but none of the providers can be installed - package gvfsd-trash-1.56.0-r0.corei7_64 from oe-repo requires libgvfsdaemon.so()(64bit), but none of the providers can be installed - package gvfsd-trash-1.56.0-r0.corei7_64 from oe-repo requires gvfs >= 1.56.0, but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12()(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.0)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.4)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.7)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires cryptsetup >= 2.7.5, but none of the providers can be installed - conflicting requests - nothing provides lvm2-udevrules needed by cryptsetup-2.7.5-r0.corei7_64 from oe-repo (try to add '--skip-broken' to skip uninstallable packages) Signed-off-by: Markus Volk Signed-off-by: Khem Raj (cherry picked from commit 1ca8df16af411871e10f268064570146cdef54cb) Signed-off-by: Armin Kuster

cryptsetup: upgrade 2.7.4 -> 2.7.5

2024-09-04T22:34:53+00:00

Release Notes: https://www.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.5-ReleaseNotes Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

botan: Make it reproducible

2024-08-16T06:20:05+00:00

Signed-off-by: Khem Raj

cryptsetup: upgrade 2.7.3 -> 2.7.4

2024-08-09T21:25:12+00:00

Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

botan: upgrade 3.4.0 -> 3.5.0

2024-07-15T23:36:10+00:00

License-Update: Copyright year updated to 2024. Changelog: ========== * CVE-2024-34702: Fix a DoS caused by excessive name constraints. * CVE-2024-39312: Fix a name constraint processing error, where if permitted and excluded rules both applied to a certificate, only the permitted rules would be checked. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

cryptsetup: upgrade 2.7.2 -> 2.7.3

2024-06-27T16:18:49+00:00

Changelog: ============ * Do not allow formatting LUKS2 with Opal SED (hardware encryption) * Fixes to wiping LUKS2 headers after Opal locking area erase. * Mention the need for possible PSID revert before Opal format for some drives (man page). * Fix Bitlocker-compatible code to ignore newly seen metadata entries. * Fix interactive query retry if LUKS2 unbound keyslot is present. * Detect unsupported zoned devices for LUKS header devices. * Allow "capi" cipher format for benchmark command and fix parsing of plain IV in "capi" format. * Add support for HCTR2 encryption mode. * Source code now uses SPDX license identifiers instead of full license preambles. * Fix missing includes for cryptographic backend that could cause compilation errors for some systems. * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2. * Fix various (mostly false positive) issues detected by Coverity. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

libsodium: upgrade 1.0.19 -> 1.0.20

2024-06-07T16:11:58+00:00

License-Update: Copyright year updated to 2024. 0001-fix-aarch64-Move-target-pragma-after-arm_neon.h-incl.patch removed since it's included in 1.0.20 Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

botan: upgrade 3.2.0 -> 3.4.0

2024-06-07T16:11:55+00:00

Changelog: ============ - Add Ed448 signatures and X448 key exchange - X.509 certificate verification now can optionally ignore the expiration date of root certificates. - Support for "hybrid" EC point encoding is now deprecated. - Support for creating EC_Group objects with parameters larger than 521 bits is now deprecated - Add new build options to disable deprecated features, and to enable experimental features. - Fix a bug affecting use of SIV and CCM ciphers in the FFI interface. - Add new FFI interface botan_cipher_requires_entire_message - Internal refactorings of the mp layer to support a new elliptic curve library. - Use a new method for constant time division in Kyber to avoid a possible side channel where the compiler inserts use of a variable time division. - Refactor test RNG usage to improve reproducibility. - Add std::span interfaces to BigInt - Refactorings and improvements to low level load/store utility functions. - Fix the amalgamation build on ARM64 - Add Mac ARM based CI build - Fix a thread serialization bug that caused sporadic test failures. - Update GH Actions to v4 - Add examples of password based encryption and HTTPS+ASIO client. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

cryptsetup: upgrade 2.7.1 -> 2.7.2

2024-04-18T06:47:23+00:00

Changelog: ========== * Fix activation of OPAL-only encrypted LUKS device with tokens. * Fix formatting of OPAL devices with 4096-byte sector size. * Fix incorrect OPAL locking range alignment calculation if used over an unaligned device partition. * Add --hw-opal-factory-reset option description to the manual page. * Do not check the passphrase quality for OPAL Admin PIN, as this passphrase already exists. * Update license for FAQ document to CC BY-SA 4.0. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

cryptsetup: upgrade 2.7.0 -> 2.7.1

2024-03-11T04:54:07+00:00

Cryptsetup 2.7.1 Release Notes ============================== Stable bug-fix release with minor extensions. Changes since version 2.7.0 * Fix interrupted LUKS1 decryption resume. With the replacement of the cryptsetup-reencrypt tool by the cryptsetup reencrypt command, resuming the interrupted LUKS1 decryption operation could fail. LUKS2 was not affected. * Allow --link-vk-to-keyring with --test-passphrase option. This option allows uploading the volume key in a user-specified kernel keyring without activating the device. * Fix crash when --active-name was used in decryption initialization. * Updates and changes to man pages, including indentation, sorting options alphabetically, fixing mistakes in crypt_set_keyring_to_link, and fixing some typos. * Fix compilation with libargon2 when --disable-internal-argon2 was used. * Do not require installed argon2.h header and never compile internal libargon2 code if the crypto library directly supports Argon2. * Fixes to regression tests to support older Linux distributions. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj