Makes the TPM 2.0 accessible via the standard OpenSSL API and command-line tools, so one can add TPM support to (almost) any OpenSSL 3.x based application. PR 286218 Pull Request: https://github.com/freebsd/freebsd-ports/pull/393 Co-authored-by: Gleb Popov <arrowd@FreeBSD.org>
27 lines
538 B
Plaintext
27 lines
538 B
Plaintext
[
|
|
{ type: install
|
|
message: <<EOM
|
|
The tpm2 OpenSSL provider has been installed as ${PREFIX}/lib/ossl-modules/tpm2.so
|
|
|
|
In order to let openssl find it do one of the following:
|
|
|
|
1. Set the OPENSSL_MODULES environment variable
|
|
2. Use the -provider-path option
|
|
3. Edit /etc/ssl/openssl.cnf replacing the existing [provider_sect] and
|
|
[default_provider] sections with these:
|
|
|
|
[provider_sect]
|
|
default = default_sect
|
|
tpm2 = tpm2_sect
|
|
|
|
[default_sect]
|
|
activate = 1
|
|
|
|
[tpm2_sect]
|
|
activate = 1
|
|
module = ${PREFIX}/lib/ossl-modules/tpm2.so
|
|
|
|
EOM
|
|
}
|
|
]
|