[Buildroot] [PATCH v2] libp11: Add new package for OpenSSL PKCS#11 engine

jonsmirl at gmail.com jonsmirl at gmail.com
Sat Apr 6 14:39:50 UTC 2019


On Sat, Apr 6, 2019 at 7:57 AM Thomas Petazzoni
<thomas.petazzoni at bootlin.com> wrote:
>
> Hello Jon,
>
> On Fri, 5 Apr 2019 15:29:03 -0400
> "jonsmirl at gmail.com" <jonsmirl at gmail.com> wrote:
>
> > I managed to get libp11 working with this makefile. The previous problems I
> > encountered were fixed by a full rebuild of my tree. I needed libp11
> > because we are using the ATECC608A for securely accessing with AWS IOT. It
> > also works with Google and Azure.
> > https://github.com/MicrochipTech/cryptoauthlib/wiki/PKCS11-Linux-Setup
>
> There is already a libp11 package in Buildroot, I merged the patch that
> was contributed by Trent Piepho a few days ago:

The last release, 0.4.9, of libp11 predates the addition of ECC
(Elliptic-curve cryptography) support to libp11. I'm picking up the
master branch in my build which has ECC support. cryptoauthlib (below)
needs the ECC support.

I just checked libp11, they released 0.4.10 a couple of days ago and
it includes the ECC support.

You also need to edit the source of cryptoauthlib to change the i2c
address. I filed a bug asking them to move this configuration the conf
file.  https://github.com/MicrochipTech/cryptoauthlib/issues/70


>
>   https://git.buildroot.org/buildroot/commit/package/libp11?id=c4fc706f556c80046bf5cba93b1964c376c71208
>
> > ################################################################################
> > #
> > # cryptoauthlib
> > #
>
> However, we don't have this package in Buildroot. Could you submit a
> proper patch adding it, so that we can do a review and hopefully merge
> it ?
>
> Thanks,
>
> Thomas
> --
> Thomas Petazzoni, CTO, Bootlin
> Embedded Linux and Kernel engineering
> https://bootlin.com



-- 
Jon Smirl
jonsmirl at gmail.com


More information about the buildroot mailing list