Update softhsm and libp11 to latest#459
Conversation
|
Cool! It was about time to get some of these up to date. Especially cool to be able to get rid of the patches and to see EdDSA support! I'm running tests now. |
Changes in 2.5.0: - Support for cross-compilation - Use RDRAND in OpenSSL if that engine is available - Support for EDDSA with vendor defined mechanisms - Replace PKCS11 headers with a version from p11-kit Recipe updated to build support for EdDSA since that is already available in latest OpenSSL (1.1.1a). HOMEPAGE and LICENSE also changed to match upstream. Signed-off-by: Ricardo Salveti <[email protected]>
libp11 0.4.9 gives an error when EC keys are used for signing (pkcs11_try_pkey_ec_sign() not implemented), so bump to git 57ca68f (post 0.4.9) for EC signing support. Also drop workaround patch for OpenSSL 1.0.2.m since OE OpenSSL version is now at 1.1.1a. Signed-off-by: Ricardo Salveti <[email protected]>
|
Yes, that's good! My only concern is whether it would make backports to rocko too difficult (we try to have minimal differences in our recipes, in particular with relation to dependencies versions). In particular, dropping the OpenSSL 1.0.2 patch and the Maybe @OYTIS has a clearer picture about that? |
That is why I added that comment in there, to avoid issues when backporting to other branches, but it would still be something to change when doing the actual backport. Ideally softhsm should be able to handle this automatically, but that still requires softhsm/SoftHSMv2#438 to be merged (didn't test if that works well when cross building). |
Changes in 2.5.0: - Support for cross-compilation - Use RDRAND in OpenSSL if that engine is available - Support for EDDSA with vendor defined mechanisms - Replace PKCS11 headers with a version from p11-kit Meta-updater pull request: advancedtelematic/meta-updater#459 Signed-off-by: Ricardo Salveti <[email protected]>
Latest git is required for EC signing support. Meta-updater pull request: advancedtelematic/meta-updater#459 Signed-off-by: Ricardo Salveti <[email protected]>
Changes in 2.5.0: - Support for cross-compilation - Use RDRAND in OpenSSL if that engine is available - Support for EDDSA with vendor defined mechanisms - Replace PKCS11 headers with a version from p11-kit Meta-updater pull request: advancedtelematic/meta-updater#459 Signed-off-by: Ricardo Salveti <[email protected]>
Latest git is required for EC signing support. Meta-updater pull request: advancedtelematic/meta-updater#459 Signed-off-by: Ricardo Salveti <[email protected]>
|
Passed oe-selftest. I don't think the backport issues are big enough to prevent merging, but we should discuss and decide how to handle things like this. |
OYTIS
left a comment
OYTIS
left a comment
There was a problem hiding this comment.
To me it seems that keeping the patch across the branches would complicate things. Let's just keep that in mind when backporting.
4 participants
This also enables support for using EdDSA, which is available in latest OpenSSL (1.1.1a).