9ab1d9be54
- Resolves: RHEL-90589, CCA token: basic support of AES-GCM - Resolves: RHEL-72964, cca token support cipher keys - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens - Resolves: RHEL-73343, Upgrade openCryptoki to latest version - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server - Resolves: RHEL-75761, ep11 token: import and export of secure key objects - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys
48 lines
3.3 KiB
Diff
48 lines
3.3 KiB
Diff
diff -up opencryptoki-3.25.0/Makefile.am.me opencryptoki-3.25.0/Makefile.am
|
|
--- opencryptoki-3.25.0/Makefile.am.me 2025-06-10 08:52:39.000000000 +0200
|
|
+++ opencryptoki-3.25.0/Makefile.am 2025-06-10 15:32:06.974976310 +0200
|
|
@@ -51,20 +51,8 @@ include tools/tools.mk
|
|
include doc/doc.mk
|
|
|
|
install-data-hook:
|
|
-if AIX
|
|
- lsgroup $(pkcs_group) > /dev/null || $(GROUPADD) -a pkcs11
|
|
- lsuser $(pkcsslotd_user) > /dev/null || $(USERADD) -g $(pkcs_group) -d $(DESTDIR)$(RUN_PATH)/opencryptoki -c "Opencryptoki pkcsslotd user" $(pkcsslotd_user)
|
|
-else
|
|
- getent group $(pkcs_group) > /dev/null || $(GROUPADD) -r $(pkcs_group)
|
|
- getent passwd $(pkcsslotd_user) >/dev/null || $(USERADD) -r -g $(pkcs_group) -d $(RUN_PATH)/opencryptoki -s /sbin/nologin -c "Opencryptoki pkcsslotd user" $(pkcsslotd_user)
|
|
-endif
|
|
$(MKDIR_P) $(DESTDIR)$(RUN_PATH)/opencryptoki/
|
|
- $(CHOWN) $(pkcsslotd_user):$(pkcs_group) $(DESTDIR)$(RUN_PATH)/opencryptoki/
|
|
- $(CHGRP) $(pkcs_group) $(DESTDIR)$(RUN_PATH)/opencryptoki/
|
|
- $(CHMOD) 0710 $(DESTDIR)$(RUN_PATH)/opencryptoki/
|
|
$(MKDIR_P) $(DESTDIR)$(localstatedir)/lib/opencryptoki
|
|
- $(CHGRP) $(pkcs_group) $(DESTDIR)$(localstatedir)/lib/opencryptoki
|
|
- $(CHMOD) 0770 $(DESTDIR)$(localstatedir)/lib/opencryptoki
|
|
if ENABLE_LIBRARY
|
|
$(MKDIR_P) $(DESTDIR)$(libdir)/opencryptoki/stdll
|
|
$(MKDIR_P) $(DESTDIR)$(libdir)/pkcs11
|
|
@@ -117,11 +105,11 @@ if ENABLE_EP11TOK
|
|
endif
|
|
if ENABLE_P11SAK
|
|
test -f $(DESTDIR)$(sysconfdir)/opencryptoki || $(MKDIR_P) $(DESTDIR)$(sysconfdir)/opencryptoki || true
|
|
- test -f $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf || $(INSTALL) -g $(pkcs_group) -m 0640 $(srcdir)/usr/sbin/p11sak/p11sak_defined_attrs.conf $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf || true
|
|
+ test -f $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf || $(INSTALL) -m 0640 $(srcdir)/usr/sbin/p11sak/p11sak_defined_attrs.conf $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf || true
|
|
endif
|
|
if ENABLE_P11KMIP
|
|
test -f $(DESTDIR)$(sysconfdir)/opencryptoki || $(MKDIR_P) $(DESTDIR)$(sysconfdir)/opencryptoki || true
|
|
- test -f $(DESTDIR)$(sysconfdir)/opencryptoki/p11kmip.conf || $(INSTALL) -g $(pkcs_group) -m 0640 $(srcdir)/usr/sbin/p11kmip/p11kmip.conf $(DESTDIR)$(sysconfdir)/opencryptoki/p11kmip.conf || true
|
|
+ test -f $(DESTDIR)$(sysconfdir)/opencryptoki/p11kmip.conf || $(INSTALL) -m 0640 $(srcdir)/usr/sbin/p11kmip/p11kmip.conf $(DESTDIR)$(sysconfdir)/opencryptoki/p11kmip.conf || true
|
|
endif
|
|
if ENABLE_ICATOK
|
|
cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
|
|
@@ -172,7 +160,7 @@ endif
|
|
if ENABLE_DAEMON
|
|
test -f $(DESTDIR)$(sysconfdir)/opencryptoki || $(MKDIR_P) $(DESTDIR)$(sysconfdir)/opencryptoki || true
|
|
test -f $(DESTDIR)$(sysconfdir)/opencryptoki/opencryptoki.conf || $(INSTALL) -m 644 $(srcdir)/usr/sbin/pkcsslotd/opencryptoki.conf $(DESTDIR)$(sysconfdir)/opencryptoki/opencryptoki.conf || true
|
|
- test -f $(DESTDIR)$(sysconfdir)/opencryptoki/strength.conf || $(INSTALL) -m 640 -o root -g $(pkcs_group) -T $(srcdir)/doc/strength-example.conf $(DESTDIR)$(sysconfdir)/opencryptoki/strength.conf || true
|
|
+ test -f $(DESTDIR)$(sysconfdir)/opencryptoki/strength.conf || $(INSTALL) -m 640 -o root -T $(srcdir)/doc/strength-example.conf $(DESTDIR)$(sysconfdir)/opencryptoki/strength.conf || true
|
|
endif
|
|
if !AIX
|
|
$(MKDIR_P) $(DESTDIR)/etc/ld.so.conf.d
|