OSS implementation of the TCG TPM2 Software Stack (TSS2)
* libtss2-fapi - Feature API (FAPI) as described in the TSS 2.0 Feature API
Specification and TSS 2.0 JSON Data Types and Policy Language Specification.
* libtss2-esys - Enhanced System API (ESAPI) as described in the TSS 2.0
This API is a 1-to-1 mapping of the TPM2 commands documented in Part 3 of the
TPM2 specification. Additionally there are asynchronous versions of each
command. In addition to SAPI, the ESAPI performs tracking of meta data for
TPM object and automatic calculation of session authorization and encryption.
* libtss2-sys - System API (SAPI) as described in the system level API and TPM
command transmission interface specification. This API is a 1-to-1 mapping of
the TPM2 commands documented in Part 3 of the TPM2 specification.
* libtss2-mu - Marshaling/Unmarshaling (MU) as described in the TCG TSS 2.0
Marshaling/Unmarshaling API Specification. This API provides a set of
marshaling and unmarshaling functions for all data types define by the TPM2
library specification.
* TPM Command Transmission Interface (TCTI) that is described in the same
specification. This API provides a standard interface to transmit/receive
TPM command/response buffers.
WWW: https://github.com/tpm2-software/tpm2-tss
*/*: Bump PORTREVISION after libuuid/libblkid switch
from e2fsprogs to util-linux, to complete the bump of all users
of either library that started with Alexander's commit titled
'*/*: Switch to misc/libuuid and misc/libblkid'
PR: 251489
security/tpm2-tss: Add patches to avoid using /dev/tpmrm0
FreeBSD does not have an in-kernel Resource Manager for TPM, the tools
must access the /dev/tpm0 device, either directly or through an
userland RM like tpm2-abrmd.
The default behavior of the original code is to try the in kernel RM
on /dev/tpmrm0 as first choice, this causes warnings and errors and
forces the user to override the behavior with options or environment
variables.
This patch removes the attempt to use /dev/tpmrm0 so that the programs
"just work" using the tpm0 device or through tpm2-abrmd.
PR: 286218
Approved by: maintainer
Pull Request: https://github.com/freebsd/freebsd-ports/pull/392
security/tpm2-tss: fix build on GCC architectures
Use newer GCC, base GCC can't build it:
src/tss2-sys/api/Tss2_Sys_AC_GetCapability.c:49: error: '_TSS2_SYS_CONTEXT_BLOB'
has no member named 'decryptAllowed'
src/tss2-sys/api/Tss2_Sys_AC_GetCapability.c:50: error: '_TSS2_SYS_CONTEXT_BLOB'
has no member named 'encryptAllowed'
src/tss2-sys/api/Tss2_Sys_AC_GetCapability.c:51: error: '_TSS2_SYS_CONTEXT_BLOB'
has no member named 'authAllowed'
MFH: 2020Q3 (fix build blanket)