Bug 545482 – new ebuild: app-crypt/simple-tpm-pk11-0.03

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Kristian 2015-04-04 08:40:42 UTC]

Created attachment 400522 [details]
app-crypt/simple-tpm-pk11-0.03.ebuild

simple-tpm-pk11 is a "Simple PKCS11 provider for TPM chips". It allows you to use your systems TPM chip as crypto-provider to secure your ssh keys.

[Comment 1 Jason Zaman 2015-04-06 11:47:36 UTC]

This is something ive been wanting to try and play around with. I'll test it and add it. Do you want to proxy maintain this as well?

[Comment 2 Kristian 2015-04-06 19:44:01 UTC]

(In reply to Jason Zaman from comment #1)
> This is something ive been wanting to try and play around with. I'll test it
> and add it. Do you want to proxy maintain this as well?

well, if i got it to work, i'd be willing to. If you get it to work, let me know. For me openssh fails with "cannot read public key from pkcs11" while stpm-sign works.

[Comment 3 Kristian 2015-04-07 14:15:37 UTC]

Created attachment 400762 [details]
app-crypt/simple-tpm-pk11.ebuild

I finally with kind help from upstream could get it to work. It depends on openssh not using the X509 patch. I adapted the ebuild.

[Comment 4 Kristian 2015-04-07 14:18:35 UTC]

Created attachment 400764 [details]
app-crypt/simple-tpm-pk11-0.03.ebuild

fixed version in ebuild name

[Comment 5 Jason Zaman 2015-05-19 20:52:33 UTC]

Ive tested this for a while, its working fine for me.
Its been added to the tree now. Thanks!