Skip to content

tpm2-software/tpm2-pkcs11

master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

Fixes things like:
openssl req -provider tpm2 -provider base -new -x509 -days 365 -subj '/CN=my key/' -sha256 -key /tmp/tpm_simulator_TKIAAZ/14.pem --passin pass:1a4b7d67c5a2cce3f2a04cdaf1c062e3 -out /tmp/tpm_simulator_TKIAAZ/cert.pem.ec1
Error adding x509 extensions from section v3_ca
809BACAF177F0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:../crypto/evp/evp_fetch.c:349:Global default library context, Algorithm (SHA1 : 94), Properties (<null>)
809BACAF177F0000:error:11000080:X509 V3 routines:X509V3_EXT_nconf_int:error in extension:../crypto/x509/v3_conf.c:48:section=v3_ca, name=subjectKeyIdentifier, value=hash

Signed-off-by: William Roberts <william.c.roberts@intel.com>
1b3aab9

Git stats

Files

Permalink
Failed to load latest commit information.

tpm2-pkcs11

Build Status Coverage Status Language grade: C/C++ Language grade: Python Coverity Scan

PKCS #11 is a Public-Key Cryptography Standard that defines a standard method to access cryptographic services from tokens/ devices such as hardware security modules (HSM), smart cards, etc. In this project we intend to use a TPM2 device as the cryptographic token.

Getting Started

Example Usages

  • SSH - How to configure and use it with SSH.
  • P11 - How to configure and use it with various P11 components.
  • PKCS11-TOOL - How to configure and use it with OpenSC's pkcs11-tool.
  • EAP-TLS - How to configure and use it for Wi-Fi authentication using EAP-TLS.
  • INTEROPERABILITY - Configuration details for interoperability with tss2-engine and tpm2-tools projects. Note, the tpm2-tools interoperability could cover other projects that use raw marshalled TPM 2.0 structures.

Advanced Knowledge