3 Commits

Author	SHA1	Message	Date
Stefan Berger	f30e202df6	samples: Extend script to create a CA using a TPM 2 for signing ... Extend the script that creates a CA that uses a TPM 2 for signing. For this we have to create tokens using the TPM 2 pkcs11 module's tpm2_ptool and can then use the p11tool for creating keys. Add a test case that requires a running tpm2-abrmd and tpm2_ptool. Eventually the test case should (try to) start its own tpm2-abrmd and talk to swtpm directly but the tcti module to do that isn't available as a package, yet. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>	2020-04-14 13:09:00 -04:00
Stefan Berger	15a14c552a	samples: Add support for password protected root CA priv. key ... Support creation and usage of the root CA with a password protected private key. The root CA's key password can be set using the environment variable SWTPM_ROOTCA_PASSWORD. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>	2018-10-25 10:32:36 -04:00
Stefan Berger	05f4d55f1f	samples: Add a script to create a TPM 1.2 intermediate CA ... This (experimental) script uses GnuTLS tpmtool to create a TPM 1.2 intermediate CA that can sign a vTPM's EK and platform certificates. Add a man page for this tool. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>	2018-10-15 20:45:48 -04:00