| Brad Bishop | 1a4b7ee | 2018-12-16 17:11:34 -0800 | [diff] [blame] | 1 | DESCRIPTION = "OpenSSL secure engine based on TPM hardware" |
| 2 | HOMEPAGE = "https://github.com/mgerstner/openssl_tpm_engine" |
| 3 | SECTION = "security/tpm" |
| 4 | |
| 5 | LICENSE = "openssl" |
| 6 | LIC_FILES_CHKSUM = "file://LICENSE;md5=11f0ee3af475c85b907426e285c9bb52" |
| 7 | |
| 8 | DEPENDS += "openssl trousers" |
| 9 | |
| 10 | SRC_URI = "\ |
| 11 | git://github.com/mgerstner/openssl_tpm_engine.git \ |
| 12 | file://0001-create-tpm-key-support-well-known-key-option.patch \ |
| 13 | file://0002-libtpm-support-env-TPM_SRK_PW.patch \ |
| 14 | file://0003-tpm-openssl-tpm-engine-parse-an-encrypted-tpm-SRK-pa.patch \ |
| 15 | file://0004-tpm-openssl-tpm-engine-change-variable-c-type-from-c.patch \ |
| 16 | file://openssl11_build_fix.patch \ |
| 17 | " |
| 18 | SRCREV = "b28de5065e6eb9aa5d5afe2276904f7624c2cbaf" |
| 19 | |
| 20 | S = "${WORKDIR}/git" |
| 21 | |
| 22 | inherit autotools-brokensep pkgconfig |
| 23 | |
| 24 | # The definitions below are used to decrypt the srk password. |
| 25 | # It is allowed to define the values in 3 forms: string, hex number and |
| 26 | # the hybrid, e.g, |
| 27 | # srk_dec_pw = "incendia" |
| 28 | # srk_dec_pw = "\x69\x6e\x63\x65\x6e\x64\x69\x61" |
| 29 | # srk_dec_pw = "\x1""nc""\x3""nd""\x1""a" |
| 30 | # |
| 31 | # Due to the limit of escape character, the hybrid must be written in |
| 32 | # above style. The actual values defined below in C code style are: |
| 33 | # srk_dec_pw[] = { 0x01, 'n', 'c', 0x03, 'n', 'd', 0x01, 'a' }; |
| 34 | # srk_dec_salt[] = { 'r', 0x00, 0x00, 't' }; |
| 35 | srk_dec_pw ?= "\\"\\\x1\\"\\"nc\\"\\"\\\x3\\"\\"nd\\"\\"\\\x1\\"\\"a\\"" |
| 36 | srk_dec_salt ?= "\\"r\\"\\"\\\x00\\\x00\\"\\"t\\"" |
| 37 | |
| 38 | CFLAGS_append += "-DSRK_DEC_PW=${srk_dec_pw} -DSRK_DEC_SALT=${srk_dec_salt}" |
| 39 | |
| 40 | # Uncomment below line if using the plain srk password for development |
| 41 | #CFLAGS_append += "-DTPM_SRK_PLAIN_PW" |
| 42 | |
| 43 | do_configure_prepend() { |
| 44 | cd ${B} |
| 45 | cp LICENSE COPYING |
| 46 | touch NEWS AUTHORS ChangeLog README |
| 47 | } |
| 48 | |
| 49 | FILES_${PN}-staticdev += "${libdir}/ssl/engines-1.1/tpm.la" |
| 50 | FILES_${PN}-dbg += "\ |
| 51 | ${libdir}/ssl/engines-1.1/.debug \ |
| 52 | ${libdir}/engines-1.1/.debug \ |
| 53 | ${prefix}/local/ssl/lib/engines-1.1/.debug \ |
| 54 | " |
| 55 | FILES_${PN} += "\ |
| 56 | ${libdir}/ssl/engines-1.1/tpm.so* \ |
| 57 | ${libdir}/engines-1.1/tpm.so* \ |
| 58 | ${libdir}/libtpm.so* \ |
| 59 | ${prefix}/local/ssl/lib/engines-1.1/tpm.so* \ |
| 60 | " |
| 61 | |
| 62 | RDEPENDS_${PN} += "libcrypto libtspi" |
| 63 | |
| 64 | INSANE_SKIP_${PN} = "libdir" |
| 65 | INSANE_SKIP_${PN}-dbg = "libdir" |