security/tpm2-openssl: TPM2 provider for OpenSSL3+

Makes the TPM 2.0 accessible via the standard OpenSSL API and
command-line tools, so one can add TPM support to (almost) any
OpenSSL 3.x based application.

PR		286218
Pull Request:	https://github.com/freebsd/freebsd-ports/pull/393
Co-authored-by: Gleb Popov <arrowd@FreeBSD.org>

security/Makefile

@@ -1369,6 +1369,7 @@
     SUBDIR += tpm-quote-tools
     SUBDIR += tpm-tools
     SUBDIR += tpm2-abrmd
+    SUBDIR += tpm2-openssl
     SUBDIR += tpm2-pkcs11
     SUBDIR += tpm2-tools
     SUBDIR += tpm2-tss

security/tpm2-openssl/Makefile

@@ -0,0 +1,28 @@
+PORTNAME=	tpm2-openssl
+DISTVERSION=	1.3.0
+CATEGORIES=	security
+MASTER_SITES=	https://github.com/tpm2-software/tpm2-openssl/releases/download/${DISTVERSION}/
+
+MAINTAINER=	blackye@gmail.com
+COMMENT=	Provider for integration of TPM 2.0 into OpenSSL 3.x
+WWW=		https://github.com/tpm2-software/tpm2-openssl
+
+LICENSE=	BSD3CLAUSE
+LICENSE_FILE=	${WRKSRC}/LICENSE
+
+IGNORE_FreeBSD_13=	Requires OpenSSL 3+
+
+LIB_DEPENDS=    libtss2-esys.so:security/tpm2-tss
+RUN_DEPENDS=    tpm2-abrmd:security/tpm2-abrmd
+
+USES=		gmake libtool pkgconfig ssl
+USE_LDCONFIG=	yes
+
+GNU_CONFIGURE=	yes
+CONFIGURE_ARGS=	--with-modulesdir=${PREFIX}/lib/ossl-modules
+
+INSTALL_TARGET=	install-strip
+
+PLIST_FILES=	lib/ossl-modules/tpm2.so
+
+.include <bsd.port.mk>

security/tpm2-openssl/distinfo

@@ -0,0 +1,3 @@
+TIMESTAMP = 1737838478
+SHA256 (tpm2-openssl-1.3.0.tar.gz) = 9a9aca55d4265ec501bcf9c56d21d6ca18dba902553f21c888fe725b42ea9964
+SIZE (tpm2-openssl-1.3.0.tar.gz) = 432730

security/tpm2-openssl/pkg-descr

@@ -0,0 +1 @@
+Provider for integration of TPM 2.0 to OpenSSL 3.x

security/tpm2-openssl/pkg-message

@@ -0,0 +1,26 @@
+[
+{ type: install
+  message: <<EOM
+The tpm2 OpenSSL provider has been installed as ${PREFIX}/lib/ossl-modules/tpm2.so
+
+In order to let openssl find it do one of the following:
+
+1. Set the OPENSSL_MODULES environment variable
+2. Use the -provider-path option
+3. Edit /etc/ssl/openssl.cnf replacing the existing [provider_sect] and
+   [default_provider] sections with these:
+
+[provider_sect]
+default = default_sect
+tpm2 = tpm2_sect
+
+[default_sect]
+activate = 1
+
+[tpm2_sect]
+activate = 1
+module = ${PREFIX}/lib/ossl-modules/tpm2.so
+
+EOM
+}
+]