of gnutls-wolfssl (https://github.com/wolfSSL/gnutls/tree/gnutls-wolfssl-3.8.11);
- added nettle 3.10 recipe, gnutls depends on nettle to be >= 3.10;
- removed conditional bbappends in favor of the demo image and
recipes-core + inc configuration setup;
Bbclass to apply wolfSSL DRBG callback hooks to Linux kernel.
Fetches patches from wolfSSL GitHub, works with any kernel flavor.
Usage in kernel bbappend:
inherit wolfssl-kernel-random
WOLFSSL_KERNEL_RANDOM_PATCH = "5.17-ubuntu-jammy-tegra"
Signed-off-by: Sameeh Jubran <sameeh@wolfssl.com>
This introduces support for building the wolfSSL Linux kernel module (linuxkm)
in non-FIPS configurations and adds a generic bbclass for including the module
in any initramfs image.
Key additions:
- New recipe: wolfssl-linuxkm.bb (non-FIPS)
* Builds linuxkm against the target kernel
* Installs libwolfssl.ko into /lib/modules/.../extra
* Adds auto-load entry under /etc/modules-load.d/
* Tracks upstream wolfSSL master at commit 3062d1524
- New class: wolfssl-initramfs.bbclass
* Allows any initramfs image to include the linuxkm module
* Intended to be inherited from BSP/distro override layers
This prepares the layer for future FIPS/non-FIPS split support and provides
a clean mechanism for systems that need early-boot availability of the
wolfSSL kernel module.
Signed-off-by: Sameeh Jubran <sameeh@wolfssl.com>
- Install provider*.conf files to /etc/ssl/openssl.cnf.d/ instead of /opt
- Remove OPENSSL_CONF environment variable approach
- Add .include directive to openssl.cnf automatically in explicit load mode
- This allows OpenSSL to automatically load the provider configuration
- Update script output to reflect the new approach
- update layer.conf to conditionally include gnutls-image-minimal if
included in the WOLFSSL_DEMOS;
- minor update to inc/gnutls/gnutls-enable-wolfssl.inc to by pass the
fuzzing binaries from the base recipes;
Added 3 layers
- gnutls: gnutls fork patched to use wolfssl as cryptographic
provider
- wolfssl: wolfssl configured to work against gnutls
- wolfssl-gnutls-wrapper: shim layer that gets called by gnutls
applications when linked against gnutls-wolfssl
- gnutls-wolfssl-tests: tests from the wolfssl-gnutls-wrapper folder
installed under /usr/lib/wolfssl-gnutls-wrapper/
Everything gets installed under /usr ovverriding the system installed
recipes, the wrapper is symlinked in /opt.
Fips currently not supported.
* Fixes 7z extraction issues, mostly around using password when the
password has already been stripped out
* Fixes autoreconf and configure issues with the FIPS package
* Fixes wolfcrypttest and wolfcryptbenchmark not being isntalled with
FIPS when they are selected
night1rider
Aidan Garske
Paul Adelsbach
Sameeh Jubran
Reda Chouk
Andrew Hutchings