README.md:
- Fix "Fox example" typo (should be "For example")
- Swap CPPFLAGS/LDFLAGS values in configure example (-I for CPPFLAGS,
-L for LDFLAGS)
- Fix word order "which features is it" to "which features it is"
- Add missing verb "set" in DISTCHECK_CONFIGURE_FLAGS note and add
closing period
- Restore indentation of "For more installation information" line
man/man1/p11sak.1.in:
- Fix "a AES" and "a AES-XTS" to "an AES" and "an AES-XTS"
- Capitalize proper nouns "edwards" and "montgomery" in curve descriptions
- Fix "Coyping" typo to "Copying" in two section headings
- Remove stray "command, and the" and fix "supress" to "suppress" in
--force|-f option description
- Fix missing space in "samealgorithm" (two occurrences)
Signed-off-by: Karel Srot <ksrot@redhat.com>
Add support for the new PKCS#11 v3.2 function list and the new functions
(all of them return CKR_FUNCTION_NOT_SUPPORTED as of now), as well as
for the new encapsulate/decvapsulate attributes.
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
CCA support on non-s390x platforms differs from CCA support on s390x
(Linux on IBM Z) in some regards.
The main difference is that CCA on Linux on IBM Z supports the AUTOSELECT
option with adapter/domain selection using the environment variables
CSU_DEFAULT_ADAPTER with 'DEV-ANY' and/or CSU_DEFAULT_DOMAIN with 'DOM-ANY',
while CCA on the other platforms does not support this. Furthermore Linux
on IBM Z presents the crypto adapters and domain in the sysfs file system.
CCA on non-s390x platforms only supports to select a distinct adapter via
environment variable CSU_DEFAULT_ADAPTER, but no 'ANY-DEV', and no domain
selection at all. Those platforms do not support crypto domains at all, thus
domain 0 is implied for those.
Furthermore, the format of the version data as returned by CCA verb CSUACFV
is slightly different on non-s390x platforms than what is returned by CCA
on Linux on IBM Z.
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Don't enclose it in single quotes, and add query parameter (which is ignored)
to avoid caching of outdated image.
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
A few new files were added that require specific copyright notices to be
displayed (err.c and getopt_long.c). These files are specific to AIX and are
not used on any other platforms.
The readme has been updated as well, mentioning AIX-specific build instructions
and pitfalls where necessary. The CCA library dependencies have been updated
to reflect what the code now demands for AIX. The base version has been updated
from 5.x to 7.1, which effectively only leaves the 4769 card as the supported
card on AIX. The requirements for Linux are unchanged.
The coding guideline document has been updated as well to outline the required
formatting for preprocessor macros.
Signed-off-by: Akash Kulhalli <akash.kulhalli@ibm.com>
Support cross compilation by making sure that the build tools are
built with a local compiler.
Note: This requires the AX_PROG_CC_FOR_BUILD` autoconf macro from
the autoconf archive.
Tested-by: Marc Hartmayer <marc@linux.ibm.com>
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
The TPM token is deprecated, because it supports only TPM version 1.2.
Does not work with TPM version 2.0. We plan to remove the TPM token in a
future openCryptoki release or version.
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Variables like 'prefix', 'libdir', or similar should not be specified
with 'make', but should be specified with 'configure' instead.
Specifying them with 'make' is not supported by the openCryptoki package
and may produce unexpected results!
Suggested-by: Juergen Christ <jchrist@linux.ibm.com>
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Use the append (-a) option for the "usermod" command to prevent the
removal of all other supplementary groups of a user.
Signed-off-by: Holger Dengler <dengler@linux.ibm.com>
