mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-01 21:23:51 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/tpm2-tss: add Mbed-TLS crypto backend support

Browse Source 
Add mbedtls crypto backend support for lightweight build

BR2_PACKAGE_TPM2_TSS_FAPI depends on openssl explicitly

Rewrite fapi -> FAPI

Signed-off-by: Andreas Mohr <and@gmx.li>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This commit is contained in:
Andreas Mohr
2026-05-29 18:27:27 +00:00
committed by Thomas Petazzoni
parent 2d7cf86aaa
commit 5394df6400
2 changed files with 16 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
package/tpm2-tss/Config.in
View File

@@ -1,8 +1,8 @@
config BR2_PACKAGE_TPM2_TSS config BR2_PACKAGE_TPM2_TSS
bool "tpm2-tss" bool "tpm2-tss"
depends on !BR2_STATIC_LIBS # dlfcn.h depends on !BR2_STATIC_LIBS # dlfcn.h
select BR2_PACKAGE_OPENSSL select BR2_PACKAGE_OPENSSL if !BR2_PACKAGE_MBEDTLS
select BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL select BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL if !BR2_PACKAGE_MBEDTLS
help help
OSS implementation of the Trusted Computing Group's (TCG) TPM2 OSS implementation of the Trusted Computing Group's (TCG) TPM2
Software Stack (TSS). This stack consists of the following Software Stack (TSS). This stack consists of the following
@@ -35,8 +35,9 @@ config BR2_PACKAGE_TPM2_TSS
if BR2_PACKAGE_TPM2_TSS if BR2_PACKAGE_TPM2_TSS
config BR2_PACKAGE_TPM2_TSS_FAPI config BR2_PACKAGE_TPM2_TSS_FAPI
bool "fapi support" bool "FAPI support"
depends on BR2_TOOLCHAIN_HAS_SYNC_4 # json-c depends on BR2_TOOLCHAIN_HAS_SYNC_4 # json-c
depends on !BR2_PACKAGE_MBEDTLS # configure: FAPI has to be compiled with OpenSSL
select BR2_PACKAGE_JSON_C select BR2_PACKAGE_JSON_C
select BR2_PACKAGE_LIBCURL select BR2_PACKAGE_LIBCURL
select BR2_PACKAGE_UTIL_LINUX select BR2_PACKAGE_UTIL_LINUX
@@ -54,6 +55,9 @@ config BR2_PACKAGE_TPM2_TSS_FAPI
https://trustedcomputinggroup.org/wp-content/uploads/TSS_FAPI_v0.94_r04_pubrev.pdf https://trustedcomputinggroup.org/wp-content/uploads/TSS_FAPI_v0.94_r04_pubrev.pdf
https://trustedcomputinggroup.org/wp-content/uploads/TSS_JSON_Policy_v0.7_r04_pubrev.pdf https://trustedcomputinggroup.org/wp-content/uploads/TSS_JSON_Policy_v0.7_r04_pubrev.pdf
comment "FAPI not supported with Mbed TLS backend"
depends on BR2_PACKAGE_MBEDTLS
endif endif
comment "tpm2-tss needs a toolchain w/ dynamic library" comment "tpm2-tss needs a toolchain w/ dynamic library"

11
package/tpm2-tss/tpm2-tss.mk
View File

@@ -11,7 +11,7 @@ TPM2_TSS_LICENSE_FILES = LICENSE
TPM2_TSS_CPE_ID_VENDOR = tpm2_software_stack_project TPM2_TSS_CPE_ID_VENDOR = tpm2_software_stack_project
TPM2_TSS_CPE_ID_PRODUCT = tpm2_software_stack TPM2_TSS_CPE_ID_PRODUCT = tpm2_software_stack
TPM2_TSS_INSTALL_STAGING = YES TPM2_TSS_INSTALL_STAGING = YES
TPM2_TSS_DEPENDENCIES = openssl host-pkgconf TPM2_TSS_DEPENDENCIES = host-pkgconf
# systemd-sysusers and systemd-tmpfiles are only used at install time # systemd-sysusers and systemd-tmpfiles are only used at install time
# to trigger the creation of users and tmpfiles, which we do not care # to trigger the creation of users and tmpfiles, which we do not care
@@ -25,10 +25,17 @@ TPM2_TSS_CONF_OPTS = \
ac_cv_prog_systemd_tmpfiles=no \ ac_cv_prog_systemd_tmpfiles=no \
ac_cv_prog_useradd=yes \ ac_cv_prog_useradd=yes \
ac_cv_prog_groupadd=yes \ ac_cv_prog_groupadd=yes \
--with-crypto=ossl \
--disable-doxygen-doc \ --disable-doxygen-doc \
--disable-defaultflags --disable-defaultflags
ifeq ($(BR2_PACKAGE_OPENSSL),y)
TPM2_TSS_DEPENDENCIES += openssl
TPM2_TSS_CONF_OPTS += --with-crypto=ossl
else ifeq ($(BR2_PACKAGE_MBEDTLS),y)
TPM2_TSS_DEPENDENCIES += mbedtls
TPM2_TSS_CONF_OPTS += --with-crypto=mbed
endif
# uses C99 code but forgets to pass -std=c99 when --disable-defaultflags is used # uses C99 code but forgets to pass -std=c99 when --disable-defaultflags is used
TPM2_TSS_CONF_ENV += CFLAGS="$(TARGET_CFLAGS) -std=c99" TPM2_TSS_CONF_ENV += CFLAGS="$(TARGET_CFLAGS) -std=c99"