Bug#815846: ITP: tpm2-tss -- TPM (Trusted Platform Module) 2.0 Software Stack

On Sat, Mar 5, 2016 at 6:44 AM, Pierre Chifflier <pollux@debian.org> wrote:

On Wed, Feb 24, 2016 at 09:08:58PM -0500, Mathieu Trudel-Lapierre wrote:
> Package: wnpp
> Severity: wishlist
> Owner: "Mathieu Trudel-Lapierre" <mathieu.tl@gmail.com>
>
> * Package name : tpm2-tss
> Version : 0.9.8
> Upstream Author : Will Arthur <will.c.arthur@intel.com>
> * URL : https://github.com/01org/TPM2.0-TSS
> * License : MIT/BSD
> Programming Lang: C, C++
> Description : TPM (Trusted Platform Module) 2.0 Software Stack
>
> TPM2.0-TSS is a software stack comprising a few layers:
> - Feature API (FAPI)
> - Enhanced System API (ESAPI)
> - System API (SAPI)
> - TPM Command Transmission Interface (TCTI)
> - Trusted Access Broker/Resource Manager (TAB/RM)
>
> These are used to interface with TPM chips to provide specific cryptographic
> services to the system in a secure manner.
>
> TPM2.0-TSS is a requirement (for tss2 and tcti) for tpm2-tools (TPM2.0-tools),
> for which I will file another ITP.
>
> It may be relevant here to merge efforts for maintaining TPM tools in a team,
> there has been lots of work by pollux in maintaining the trousers stack for
> which this project seeks to be an improvement / evolution.
>

Hi Mathieu,

Hi Pierre,

I was indeed intending to package it, since we discussed that during the
last TCG meeting in San Francisco.
If you are OK to create a team and a project on alioth, I can do it if
you want.

Yeah, let's create a team and projet on alioth. Feel free to do it; or we could simply maintain this on collab-maint. For now, I pushed the work I have to github as a temporary spot so I don't lose it:

https://github.com/cyphermox/tpm2-tools
https://github.com/cyphermox/tpm2-tss

Like I said, this is only temporary for myself, we should move this off github and onto alioth before upload.

However, I did notice some potential issues: tpm2-tss ships some png files in the source tarball (or at least in the git snapshot I took), and I understand those probably ought not be shipped. As for tpm2-tools, it potentially links against openssl, so we should address that or check if it's a false positive from lintian.

Regards,

Mathieu Trudel-Lapierre <mathieu.tl@gmail.com>
Freenode: cyphermox, Jabber: mathieu.tl@gmail.com
4096R/65B58DA1 818A D123 0992 275B 23C2 CF89 C67B B4D6 65B5 8DA1