Bug 762445

Summary:	app-crypt/tpm2-tss with USE=fapi is missing libressl support
Product:	Gentoo Linux	Reporter:	Paolo Pedroni <paolo.pedroni>
Component:	Current packages	Assignee:	Christopher Byrne <salah.coronya>
Status:	RESOLVED WONTFIX
Severity:	normal	CC:	ionen, proxy-maint
Priority:	Normal	Keywords:	PullRequest
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://github.com/gentoo/gentoo/pull/18876
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	561854
Attachments:	Add libressl support Add libressl support

Description Paolo Pedroni 2020-12-29 16:50:42 UTC

In general app-crypt/tpm2-tss can be built with either mbedtls or openssl, but USE=fapi only supports openssl. It would be nice to have a libressl alternative for that case, if it is possible.

Comment 1 Ionen Wolkens gentoo-dev

2020-12-29 17:19:33 UTC

Not up to me but feel can safely say it's not happening.
https://github.com/tpm2-software/tpm2-tss/issues/1235

Comment 2 Christopher Byrne 2020-12-30 02:43:37 UTC

Turn out libressl now supports the required functions since 3.0.2: https://github.com/libressl-portable/portable/issues/547 . After editing the ebuild, tpm2-tss seems to build just fine using libressl and the "fapi" flag, so I see no reason not to allow it.

Comment 3 Ionen Wolkens gentoo-dev

2020-12-31 23:47:44 UTC

Nice that it's possible, but given seems bug #762847 will go forward it'll be short lived.

Comment 4 Christopher Byrne 2021-01-21 02:58:33 UTC

Created attachment 683935 [details, diff]
Add libressl support

Comment 5 Christopher Byrne 2021-01-21 02:59:09 UTC

Created attachment 683938 [details, diff]
Add libressl support

Comment 6 Christopher Byrne 2021-01-21 03:06:07 UTC

Given that libressl is on its way out, there seems to be little point in adding support, however, I will include the patches needed here so the can used in an overlay or submitted upstream.