This is a forked version of OpenSSL TPM engine from the original
upstream, TrouSerS project.
This package contains two sets of code, a command-line utility used to
generate a TSS key blob and write it to disk and an OpenSSL engine which
interfaces with the TSS API.
===> The following configuration options are available for openssl_tpm_engine-0.5.0_2:
EXAMPLES=on: Build and/or install examples
===> Use 'make config' to modify these settings
A sample configuration which has to be added into /etc/ssl/openssl.cnf
to enable "tpm" engine in OpenSSL can be found at
/usr/local/share/examples/openssl_tpm_engine/openssl.cnf.sample.
Note that tcsd daemon in security/trousers must be running. If not,
you might get the following error messages:
| Auto configuration failed
| 65738:error:80066070:tpm engine:TPM_ENGINE_INIT:unit failure:e_tpm.c:484:
| 65738:error:260B806D:engine routines:ENGINE_TABLE_REGISTER:init failed:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/engine/eng_table.c:161:
| 65738:error:260BC065:engine routines:INT_ENGINE_CONFIGURE:engine configuration error:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/engine/eng_cnf.c:204:section=tpm_section, name=default_algorithms, value=ALL
| 65738:error:0E07606D:configuration file routines:MODULE_RUN:module initialization error:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/conf/conf_mod.c:235:module=engines, value=engine_section, retcode=-1
security/openssl_tpm_engine: Mark DEPRECATED
- Requires older OpenSSL implementation
- Last upstream release was in 2017
- Utilise IGNORE_SSL instead of SSL_DEFAULT chech
- Mark BROKEN_SSL for openssl 30 and openssl31
- Set EXPIRATION_DATE to 2023-07-02
Approved by: portmgr (blanket)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security/openssl_tpm_engine: force target engine directory
With the upcoming pc files for the base openssl the configure
script detects automatically the target from the pkg-config variable
with openssl base, it ends up not respecting prefix anymore.
Thanksfully the configure script allows to define a target directory.
PR: 266051
security/openssl_tpm_engine: Document SSL requirement, IGNORE LIbreSSL
It appears that the RAND_METHOD structure is not present in LibreSSL so
that SSL_DEFAULT=libressl* is incompatible with this port.
SSL flags have been added to support non-base OpenSSL libraries though.
Approved by: SSL blanket
- Convert security/trousers to USES=libtool and bump dependent ports
- Use standard USE_AUTOTOOLS
- Add INSTALL_TARGET=install-strip
- Drop PTHREAD_LIBS
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
