@@ -27,3 +27,5 @@ apt-get install -y \
xsltproc \
xxd \
&& control openssl-gost enabled
+
+apt-get install -y pkcs11-provider || true
@@ -59,3 +59,4 @@ $apt \
$apt xxd || $apt vim-common
$apt libengine-gost-openssl1.1$ARCH || true
$apt softhsm gnutls-bin libengine-pkcs11-openssl1.1$ARCH || true
+$apt softhsm gnutls-bin pkcs11-provider || true
@@ -60,6 +60,7 @@ if [ -f /etc/centos-release ]; then
yum -y install epel-release
fi
yum -y install softhsm || true
+yum -y install softhsm pkcs11-provider || true
# haveged is available via EPEL on CentOS stream8.
yum -y install haveged || true
@@ -48,6 +48,8 @@ zypper --non-interactive install --force-resolution --no-recommends \
zypper --non-interactive install --force-resolution --no-recommends \
gnutls openssl-engine-libp11 softhsm || true
+zypper --non-interactive install --force-resolution --no-recommends \
+ gnutls pkcs11-provider softhsm || true
if [ -f /usr/lib/ibmtss/tpm_server -a ! -e /usr/local/bin/tpm_server ]; then
ln -s /usr/lib/ibmtss/tpm_server /usr/local/bin
Install the pkcs11-provider package. For it to be useful softhsm and gnutls are also needed, so in some cases install them together so that if one of the packages cannot be installed then none of them are installed. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> --- ci/alt.sh | 2 ++ ci/debian.sh | 1 + ci/fedora.sh | 1 + ci/tumbleweed.sh | 2 ++ 4 files changed, 6 insertions(+)