Commit Graph

  • 9551c3287c
    Merge 93bd98c7e8 into a1d85c9ee7 adrobvz 2026-06-15 11:30:39 +0200
  • f9dd8ab089
    Merge 119c20c131 into a1d85c9ee7 Stefan Berger 2026-06-13 14:06:09 +0200
  • ef0faa4a45
    Merge 2ac6ba54c0 into fe525133c7 Stefan Berger 2026-06-13 14:05:57 +0200
  • 4cdd7a50a1
    Merge 74f1c9bbb2 into a1d85c9ee7 Stefan Berger 2026-06-13 14:05:36 +0200
  • 0c73f803f7
    Merge ea49575290 into a1d85c9ee7 Stefan Berger 2026-06-12 14:39:48 -0400
  • ea49575290 tests: Test failure to init TPM 2 with 5kb buffer and default-v2 profile stefanberger/swtpm_setup_pqc Stefan Berger 2026-05-11 18:17:59 +0000
  • 02518f93f8 tests: Extend test to check created ML-DSA and ML-KEM EK certificates Stefan Berger 2026-04-16 16:38:30 -0400
  • 27ebf9bad5 tests: Add test cases for creating ML-KEM and ML-DSA keys with swtpm_setup Stefan Berger 2026-04-13 15:01:47 -0400
  • dd88941c50 swtpm_setup: Display type of storage primary key that was created Stefan Berger 2026-04-13 14:29:26 -0400
  • 87174cd2a4 swtpm_setup: Enable ML-DSA key types as IAK 1st and 2nd EK keys Stefan Berger 2026-04-12 21:20:53 -0400
  • f897f8ce25 swtpm_setup: Implement functions to create an ML-DSA primary key Stefan Berger 2026-04-12 21:17:29 -0400
  • 0aecbb9ce5 swtpm_setup: Enable ML-KEM key types as 1st and 2nd EK keys Stefan Berger 2026-04-10 16:56:12 -0400
  • dddda85d26 swtpm_setup: Implement functions to create an ML-KEM primary key Stefan Berger 2026-04-01 13:32:29 -0400
  • 3823c2c2ed swtpm_localca: Parse public key parameters for ML-KEM keys Stefan Berger 2026-04-01 17:13:57 -0400
  • 2b99a981d5 swtpm_localca: Add beginning and end anchors to regex for EC keys Stefan Berger 2026-06-11 17:23:23 +0000
  • 73f085d97d swtpm_setup: Check for SETUP_EK_CERT_F when createing an IAK or IDevID Stefan Berger 2026-06-11 18:25:46 +0000
  • a1d85c9ee7 man: Document support for IAK and IDevID in swtpm_setup.conf master Stefan Berger 2026-06-11 02:45:33 +0000
  • f6fb36babd man: Document support for IAK and IDevID in swtpm_setup.conf master.next Stefan Berger 2026-06-11 02:45:33 +0000
  • 74f1c9bbb2 swtpm_setup: Enable creating Ed25519 key as 1st and 2nd EKs stefanberger/swtpm_setup_pqc+eddsa Stefan Berger 2026-05-13 00:30:23 +0000
  • aca7539c12 WIP: swtpm_setup: Add parameters for ED25519 and Ed448 curves Stefan Berger 2026-05-12 22:09:08 +0000
  • 5f33bb7479 swtpm_cert: Enable creating certificates for EdDSA keys Stefan Berger 2026-05-13 01:49:41 +0000
  • b0dd664cab tests: Test failure to init TPM 2 with 5kb buffer and default-v2 profile Stefan Berger 2026-05-11 18:17:59 +0000
  • 9f094cb759 tests: Extend test to check created ML-DSA and ML-KEM EK certificates Stefan Berger 2026-04-16 16:38:30 -0400
  • 3f71c2d27e tests: Add test cases for creating ML-KEM and ML-DSA keys with swtpm_setup Stefan Berger 2026-04-13 15:01:47 -0400
  • 20a630f375 swtpm_setup: Display type of storage primary key that was created Stefan Berger 2026-04-13 14:29:26 -0400
  • eeb33415e7 swtpm_setup: Query TPM 2 for MAX_NV_BUFFER_SIZE for larger NV writes Stefan Berger 2026-04-13 12:47:25 -0400
  • 3a6f61f6ca swtpm_setup: Enable ML-DSA key types as 1st and 2nd EK keys Stefan Berger 2026-04-12 21:20:53 -0400
  • 7521ef627e swtpm_setup: Implement functions to create an ML-DSA primary key Stefan Berger 2026-04-12 21:17:29 -0400
  • 09fe5ced9d swtpm_setup: Enable ML-KEM key types as 1st and 2nd EK keys Stefan Berger 2026-04-10 16:56:12 -0400
  • fc175745c4 swtpm_setup: Implement functions to create an ML-KEM primary key Stefan Berger 2026-04-01 13:32:29 -0400
  • d41fdabf11 swtpm_local: Parse public key parameters for ML-KEM keys Stefan Berger 2026-04-01 17:13:57 -0400
  • 8356e28a4e tests: Sign different TPM 2 certificate types with an Ed448 key Stefan Berger 2026-06-03 18:51:12 +0000
  • 9b0bcf3b88 tests: Sign different TPM 2 certificate types with an ML-DSA key Stefan Berger 2026-05-07 23:06:50 +0000
  • 71cc7a41e0 swtpm_cert: Enable signing of EK certificates with hashless signing schemes Stefan Berger 2026-04-17 17:06:34 -0400
  • b12c5a264c man: Describe new options for swtpm_cert Stefan Berger 2026-04-08 22:08:20 -0400
  • 93f64a1a8e tests: Create certificates for ML-DSA and ML-KEM keys Stefan Berger 2026-05-07 21:54:13 +0000
  • ce2a46169a swtpm_cert: Enable certificate creation for ML-DSA keys Stefan Berger 2026-04-08 22:18:41 -0400
  • 841f0f9a1c swtpm_cert: Enable certificate creation for ML-KEM keys Stefan Berger 2026-04-01 17:57:51 -0400
  • 001eaa2730 tests: Sign different TPM 2 certificate types with an Ed448 key Stefan Berger 2026-06-03 18:51:12 +0000
  • be6f5c2c58 tests: Sign different TPM 2 certificate types with an ML-DSA key Stefan Berger 2026-05-07 23:06:50 +0000
  • 9b05c35614 swtpm_cert: Enable signing of EK certificates with hashless signing schemes Stefan Berger 2026-04-17 17:06:34 -0400
  • 14a3e63ba3 man: Describe new options for swtpm_cert Stefan Berger 2026-04-08 22:08:20 -0400
  • 33ca2344cb tests: Create certificates for ML-DSA and ML-KEM keys Stefan Berger 2026-05-07 21:54:13 +0000
  • 8de78fb77c swtpm_cert: Enable certificate creation for ML-DSA keys Stefan Berger 2026-04-08 22:18:41 -0400
  • 9fea858c3b swtpm_cert: Enable certificate creation for ML-KEM keys Stefan Berger 2026-04-01 17:57:51 -0400
  • ac400260c0 tests: Refactor certificate creation tests Stefan Berger 2026-05-07 15:22:46 +0000
  • 4fe291dfc0 swtpm_cert: Fix the ASN.1 for IAK/IDevID SAN Stefan Berger 2026-05-07 19:40:37 +0000
  • b96bbfafc4 swtpm_cert: Adjust error message for 'days' too far in future Stefan Berger 2026-05-07 14:40:49 +0000
  • 69b8ad8b6e build-sys: Require OpenSSL's libcrypto >= v3.5 for ML-KEM & ML-DSA support Stefan Berger 2026-04-08 22:38:57 -0400
  • a378d740cd tests: Refactor certificate creation tests Stefan Berger 2026-05-07 15:22:46 +0000
  • a01ae440a9 swtpm_cert: Fix the ASN.1 for IAK/IDevID SAN Stefan Berger 2026-05-07 19:40:37 +0000
  • 238041f73c swtpm_cert: Adjust error message for 'days' too far in future Stefan Berger 2026-05-07 14:40:49 +0000
  • 66543e3951 build-sys: Require OpenSSL's libcrypto >= v3.5 for ML-KEM & ML-DSA support Stefan Berger 2026-04-08 22:38:57 -0400
  • 11f6fa7ed9 ci: Move testing into ubuntu:26.04 containers Stefan Berger 2026-06-03 12:47:13 +0000
  • f80b6e9d32 tests: Make some tests work in ubuntu:26.04 containers Stefan Berger 2026-06-03 13:05:56 +0000
  • 39e53e28f0 ci: Move testing into ubuntu:26.04 containers Stefan Berger 2026-06-03 12:47:13 +0000
  • d38c1f2496 tests: Make some tests work in ubuntu:26.04 containers Stefan Berger 2026-06-03 13:05:56 +0000
  • fe525133c7 selinux: Add SELinux policy for virtqemud_t swtpm_t setsched process and unix socket interactions. stable-0.10 JMarcosHP 2026-05-27 09:49:33 -0600
  • 102c252eac selinux: Add SELinux policy for virtqemud_t swtpm_t setsched process and unix socket interactions. stable-0.10-next JMarcosHP 2026-05-27 09:49:33 -0600
  • 4a748877d7 selinux: Add SELinux policy for virtqemud_t swtpm_t setsched process and unix socket interactions. Allows virtqemud_t to: - Signal and control swtpm_t processes (noatsecure, rlimitinh, siginh, signull, setsched) - Create and listen on Unix stream sockets with swtpm_t processes JMarcosHP 2026-05-27 09:49:33 -0600
  • 52bbff4c7e selinux: Add SELinux policy for virtqemud_t swtpm_t setsched process and unix socket interactions. Allows virtqemud_t to: - Signal and control swtpm_t processes (noatsecure, rlimitinh, siginh, signull, setsched) - Create and listen on Unix stream sockets with swtpm_t processes JMarcosHP 2026-05-27 09:49:33 -0600
  • 004e9bc009
    Merge a1868d6071 into 89a67f3d40 Marc-Andre Lureau 2026-05-23 16:06:17 +0800
  • 89a67f3d40 ci: Install IBMTSS2 tools from the sources Stefan Berger 2026-05-21 09:33:44 -0400
  • 53f45f1525 tests: Use IBMTSS2 test v2.5.0 Stefan Berger 2026-05-21 09:10:17 -0400
  • f55a545eb6 ci: Install IBMTSS2 tools from the sources Stefan Berger 2026-05-21 09:33:44 -0400
  • 7b344c7e99 tests: Use IBMTSS2 test v2.5.0 Stefan Berger 2026-05-21 09:10:17 -0400
  • e7778f93c9 tests: Replace --in option with -in Stefan Berger 2026-05-20 09:55:50 -0400
  • bf0503352d tests: Use get_filesize rather than plain stat Stefan Berger 2026-05-20 09:54:23 -0400
  • ce302d97a7 tests: Replace --in option with -in Stefan Berger 2026-05-20 09:55:50 -0400
  • 45c5b4150c tests: Use get_filesize rather than plain stat Stefan Berger 2026-05-20 09:54:23 -0400
  • 895df2c36e tests+samples: Check for --help support to determine stat/sed tools flavor Stefan Berger 2026-05-19 16:42:27 +0000
  • 8661246177 tests+samples: Check for --help support to determine stat/sed tools flavor Stefan Berger 2026-05-19 16:42:27 +0000
  • c43003b954 swtpm_setup: Remove casts to arrays since unacceptable to clang Stefan Berger 2026-05-19 14:42:51 +0000
  • 3dd2b71083 swtpm: Remove SOCK_CLOEXEC flag from socket call Stefan Berger 2026-05-19 14:08:58 +0000
  • 93c9d46b59 swtpm: Fix broken format string % to be %s instead Stefan Berger 2026-05-19 14:00:16 +0000
  • 1b7088fb0b swtpm_setup: Remove casts to arrays since unacceptable to clang Stefan Berger 2026-05-19 14:42:51 +0000
  • 613a9b102b swtpm: Remove SOCK_CLOEXEC flag from socket call Stefan Berger 2026-05-19 14:08:58 +0000
  • cf497cdd35 swtpm: Fix broken format string % to be %s instead Stefan Berger 2026-05-19 14:00:16 +0000
  • 93bd98c7e8 swtpm: ctrlchannel: flush PERMANENT state before GET_STATEBLOB Andrey Drobyshev 2026-05-04 19:00:52 +0300
  • 5a89ef3d57 swtpm: Use TPMPROP_TPM2_BUFFER_MAX when using a libtpms v0.11 TPM 2 Stefan Berger 2026-03-13 10:03:15 -0400
  • 6a01b548bc build-sys: Add dependency on libtpms v0.11 Stefan Berger 2026-03-18 09:18:31 -0400
  • 5b8dffd9d0 swtpm: Use TPMPROP_TPM2_BUFFER_MAX when using a libtpms v0.11 TPM 2 Stefan Berger 2026-03-13 10:03:15 -0400
  • 883eeb570f build-sys: Add dependency on libtpms v0.11 Stefan Berger 2026-03-18 09:18:31 -0400
  • 74f272e337 debian/rpm: Add openssl as dependent package Stefan Berger 2026-05-06 09:42:03 -0400
  • 1b4f67d6aa debian/rpm: Add openssl as dependent package Stefan Berger 2026-05-06 09:42:03 -0400
  • a115055450 build-sys: Remove checking for GnuTLS and certtool Stefan Berger 2026-05-05 18:36:27 +0000
  • 5804f19649 debian/rpm: Remove gnutls-utils/gnutls-bin dependency where possible Stefan Berger 2026-05-05 15:46:34 -0400
  • 896f19bc49 tests: Skip tests if p11tool is not found in PATH Stefan Berger 2026-05-05 17:39:36 -0400
  • ee977b9eec samples: Remove usage of certtool from swtpm-create-tpmca Stefan Berger 2026-05-05 13:36:08 +0000
  • f8042da600 build-sys: Remove checking for GnuTLS and certtool Stefan Berger 2026-05-05 18:36:27 +0000
  • c0b20c553e debian/rpm: Remove gnutls-utils/gnutls-bin dependency where possible Stefan Berger 2026-05-05 15:46:34 -0400
  • 6239c3811c tests: Skip tests if p11tool is not found in PATH Stefan Berger 2026-05-05 17:39:36 -0400
  • dc2f5a673e samples: Remove usage of certtool from swtpm-create-tpmca Stefan Berger 2026-05-05 13:36:08 +0000
  • a5de646f9a docs: Remove expect and trousers as packages to install Stefan Berger 2026-05-05 16:54:50 -0400
  • 1106f2c98a debian/rpm: Remove expect and trousers packages as dependencies Stefan Berger 2026-05-05 16:53:54 -0400
  • 55b986226a CI: Do not install expect package anymore Stefan Berger 2026-05-05 16:49:29 -0400
  • 23b9b67880 man: Remove reference to TPM 1.2 tcsd from swtpm-local.conf page Stefan Berger 2026-05-05 16:15:12 -0400
  • a4f5c75637 build-sys: Remove checks for TPM 1.2 tcsd from build system Stefan Berger 2026-05-05 16:15:54 -0400
  • 0a1efc5b79 tests: Pass --disable-tests when building swtpm across versions Stefan Berger 2026-05-05 16:25:55 -0400
  • d2b74f0f63 docs: Remove expect and trousers as packages to install Stefan Berger 2026-05-05 16:54:50 -0400