Go to file
Daniel P. Berrangé 12589a1af6 Port to pycryptography and pyasn1 and make keyring optional
pyOpenSSL 24.0.0 removed several APIs required by pccsadmin, so
porting to pycryptography is required on Fedora. Since RHEL does
not ship pyOpenSSL, the port is useful here too.

Using pyasn1 instead of asn1 gives stronger validation during
parsing and brings compatibility with RHEL that lacks python3-asn1

The keyring package needs to be optional on RHEL which lacks this
module (currently).

Also drop the inappropriate pccs port number change

Related: https://issues.redhat.com/browse/RHEL-121612
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-12-10 11:17:54 +00:00
.gitignore Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
92-sgx-provision.rules Initial import 2025-03-19 16:55:37 +00:00
0000-Add-support-for-building-against-host-openssl-crypto.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0001-Add-support-for-building-against-host-tinyxml2-lib.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0002-Add-support-for-building-against-host-CppMicroServic.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0003-Improve-make-debuggability.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0004-Support-disabling-use-of-git-for-ippcp-code.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0005-disable-openmp-protobuf-sample_crypto-builds.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0006-Fix-compat-with-gcc-14.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0007-Fix-escaping-of-regexes-in-sgx-asm-pp.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0008-psw-prefer-dev-sgx_provision-dev-sgx_enclave.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0009-psw-fix-soname-for-libuae_service.so-library.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0010-pcl-remove-redundant-use-of-bool-type.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0011-sdk-honour-CFLAGS-LDFLAGS-set-from-environment.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0012-psw-make-aesm_service-build-verbose.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0013-Fix-modern-C-function-prototype-compliance.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0014-Add-wrapper-for-nasm-to-fix-cmake-compat.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0015-fix-BOM-for-pccs-with-DCAP-1.23.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0050-Disable-inclusion-of-AESM-in-installer.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0100-Drop-use-of-bundled-pre-built-openssl.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0101-Improve-debuggability-of-build-system.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0102-Support-build-time-setting-of-enclave-load-directory.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0103-Look-for-versioned-sgx_urts-library-in-PCKRetrievalT.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0104-pccsadmin-only-import-pypac-module-on-Windows.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0105-Look-for-PCKRetrievalTool-config-file-in-etc.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0106-Honour-CFLAGS-CXXFLAGS-LDFLAGS-for-various-tools-and.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0107-qgs-add-space-between-program-name-first-arg-in-usag.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0108-qgs-protect-against-format-strings-in-QL-log-message.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0109-qgs-add-debug-parameter-to-control-logging.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0110-pccsadmin-remove-leftover-debugging-print-args-state.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0111-Fix-soname-version-for-libsgx_qe3_logic.so-library.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0112-Workaround-broken-GCC-15.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0113-Don-t-disable-cf-protection-for-qgs.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0114-Delete-broken-checks-for-GCC-version-that-break-fsta.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0115-Use-distro-provided-rapidjson-package.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0116-Don-t-stomp-on-VERBOSE-variable.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0117-qgs-add-m-MODE-parameter-for-UNIX-socket-mode.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0118-pccs-sanitize-paths-to-all-resources.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0119-pccs-only-pass-ApiKey-if-it-is-set.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0120-pccsadmin-make-keyring-module-optional.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0121-pccsadmin-convert-from-asn1-to-pyasn1-python-module.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0122-pccsadmin-fully-switch-to-pycryptography-for-CRL-ver.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0123-pccsadmin-use-more-of-pycryptography-instead-of-pyop.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0124-pccsadmin-prefer-pycryptography-over-pyopenssl.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0125-pccsadmin-add-fallback-for-when-pyopenssl-is-not-ava.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0126-pccsadmin-ignore-errors-trying-to-clear-the-keyring.patch Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
0200-Enable-pointing-sgxssl-build-to-alternative-glibc-he.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0201-Workaround-missing-output-directory.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0202-Disable-various-EC-crypto-features.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0203-Disable-sm2-and-sm4-crypto-algorithms.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0300-Drop-min-openssl-from-3.0.8-to-3.0.7.patch Initial import 2025-03-19 16:55:37 +00:00
0301-Drop-Werror-from-build-flags.patch Initial import 2025-03-19 16:55:37 +00:00
aesmd.service Fix paths to binaries in service files 2025-04-01 10:28:39 +01:00
aesmd.sysusers.conf Initial import 2025-03-19 16:55:37 +00:00
download.sh Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
gating.yaml Temporarily disable automatic tier1 gating 2025-06-16 13:50:53 +01:00
linux-sgx.spec Port to pycryptography and pyasn1 and make keyring optional 2025-12-10 11:17:54 +00:00
mpa_registration.service Fix paths to binaries in service files 2025-04-01 10:28:39 +01:00
pccs-node-ffi-rs-bundler Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
pccs-nodejs-bundler Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
pccs.service Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
pccs.sysusers.conf Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
qgs.service Adapt qgs.service for SELinux policy and sock perms 2025-06-09 13:55:12 +01:00
qgs.sysconfig Adapt qgs.service for SELinux policy and sock perms 2025-06-09 13:55:12 +01:00
qgs.sysusers.conf Initial import 2025-03-19 16:55:37 +00:00
repack.sh Initial import 2025-03-19 16:55:37 +00:00
sgxprv.sysusers.conf Initial import 2025-03-19 16:55:37 +00:00
sources Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00