]> git.ipfire.org Git - thirdparty/systemd.git/commit
Add support for systemd-pkcs11 libcryptsetup plugin. 19797/head
authorOndrej Kozina <okozina@redhat.com>
Thu, 20 May 2021 13:37:08 +0000 (15:37 +0200)
committerOndrej Kozina <okozina@redhat.com>
Thu, 19 Aug 2021 11:58:10 +0000 (13:58 +0200)
commit8186022c9dace11f3e21dde9982c492054c5105c
treee1629e5a57eb9b8176e1b63ef11b5841588ce968
parent0ff605665a76d5154cfda4f22cbe771f34615070
Add support for systemd-pkcs11 libcryptsetup plugin.

Add support for systemd-pkcs11 based LUKS2 device activation
via libcryptsetup plugin. This make the feature (pkcs11 sealed
LUKS2 keyslot passphrase) usable from both systemd utilities
and cryptsetup cli.

The feature is configured via -Dlibcryptsetup-plugins combo
with default value set to 'auto'. It get's enabled automatically
when cryptsetup 2.4.0 or later is installed in build system.
meson.build
src/cryptsetup/cryptsetup-tokens/cryptsetup-token-systemd-pkcs11.c [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/cryptsetup-token-util.h
src/cryptsetup/cryptsetup-tokens/luks2-pkcs11.c [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/luks2-pkcs11.h [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/meson.build
src/cryptsetup/cryptsetup.c
src/shared/pkcs11-util.h