From patchwork Mon Apr 27 20:46:37 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Burton X-Patchwork-Id: 87019 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CD8CAFF8870 for ; Mon, 27 Apr 2026 20:46:51 +0000 (UTC) Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5990.1777322809579212451 for ; Mon, 27 Apr 2026 13:46:50 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@arm.com header.s=foss header.b=tbbInC6v; spf=pass (domain: arm.com, ip: 217.140.110.172, mailfrom: ross.burton@arm.com) Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 4083C497 for ; Mon, 27 Apr 2026 13:46:43 -0700 (PDT) Received: from cesw-amp-gbt-1s-m12830-04.lab.cambridge.arm.com (usa-sjc-imap-foss1.foss.arm.com [10.121.207.14]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPA id 5CE9E3F763 for ; Mon, 27 Apr 2026 13:46:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=arm.com; s=foss; t=1777322808; bh=AIm4iRRIaZDt/DNKYgYmnNy+wP3i13flbHQQyRVIjHI=; h=From:To:Subject:Date:From; b=tbbInC6vG5SbUti72wR+OJJ5Q9nOKrRpO796lV3ZHp27AsNrII+zX11MwlB4DU423 yfIGQRBdHKCHoTP9QaLs2IVycvZz6VQvKzqzXJhTcNCsCcI8cNX2s/7KQoM11mf3mv 9XZyxOPHKmg03WpWJSNiS68l7VRCJmcPJEmvlS9M= From: Ross Burton To: openembedded-core@lists.openembedded.org Subject: [PATCH 1/4] p11-kit: remove obsolete compile error workaround Date: Mon, 27 Apr 2026 21:46:37 +0100 Message-ID: <20260427204640.2003231-1-ross.burton@arm.com> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 27 Apr 2026 20:46:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236021 I couldn't replicate this compile error from 2024 so it's presumably no longer needed. Signed-off-by: Ross Burton --- meta/recipes-support/p11-kit/p11-kit_0.26.2.bb | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb b/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb index 5f553f11bbb..aa8b28e0e71 100644 --- a/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb +++ b/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb @@ -33,14 +33,4 @@ INSANE_SKIP:${PN} = "dev-so" BBCLASSEXTEND = "native nativesdk" -# # This one is reproducible only on 32bit MACHINEs -# http://errors.yoctoproject.org/Errors/Details/766969/ -# git/p11-kit/import-object.c:223:62: error: passing argument 3 of 'p11_asn1_read' from incompatible pointer type [-Wincompatible-pointer-types] -# git/p11-kit/import-object.c:229:70: error: passing argument 3 of 'p11_asn1_read' from incompatible pointer type [-Wincompatible-pointer-types] -# git/p11-kit/import-object.c:264:78: error: passing argument 3 of 'p11_asn1_read' from incompatible pointer type [-Wincompatible-pointer-types] -# git/p11-kit/import-object.c:223:62: error: passing argument 3 of 'p11_asn1_read' from incompatible pointer type [-Wincompatible-pointer-types] -# git/p11-kit/import-object.c:229:70: error: passing argument 3 of 'p11_asn1_read' from incompatible pointer type [-Wincompatible-pointer-types] -# git/p11-kit/import-object.c:264:78: error: passing argument 3 of 'p11_asn1_read' from incompatible pointer type [-Wincompatible-pointer-types] -CFLAGS += "-Wno-error=incompatible-pointer-types" - CVE_STATUS[CVE-2026-2100] = "fixed-version: fixed since 0.26.2" From patchwork Mon Apr 27 20:46:38 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Burton X-Patchwork-Id: 87021 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CDEEDFF8872 for ; Mon, 27 Apr 2026 20:46:51 +0000 (UTC) Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5992.1777322810038155514 for ; Mon, 27 Apr 2026 13:46:50 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@arm.com header.s=foss header.b=JXT9CzgU; spf=pass (domain: arm.com, ip: 217.140.110.172, mailfrom: ross.burton@arm.com) Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id E461616F2 for ; Mon, 27 Apr 2026 13:46:43 -0700 (PDT) Received: from cesw-amp-gbt-1s-m12830-04.lab.cambridge.arm.com (usa-sjc-imap-foss1.foss.arm.com [10.121.207.14]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPA id 0E2063F763 for ; Mon, 27 Apr 2026 13:46:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=arm.com; s=foss; t=1777322809; bh=5/+S2QgTSmF1c7oSQvPzT+N7GBUSWcWnBdRs9/y5xJE=; h=From:To:Subject:Date:In-Reply-To:References:From; b=JXT9CzgU5eiIELwzOBu8x4+YXE3Tuc2BTXBeFEbP5Rtq2h1nbW5Q2Six8BTIVXtoY I1xvYdbcR7cdwBrhZQeynajOUNglU0aVhIFBq1HYdC1lzMHRmoR5XqbyjgDw/Y7ebf XD6apagMFAONyZV/A6ZcXDvCkP0/h7ROqHJRvr+0= From: Ross Burton To: openembedded-core@lists.openembedded.org Subject: [PATCH 2/4] p11-kit: add PACKAGECONFIG for trust and systemd Date: Mon, 27 Apr 2026 21:46:38 +0100 Message-ID: <20260427204640.2003231-2-ross.burton@arm.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260427204640.2003231-1-ross.burton@arm.com> References: <20260427204640.2003231-1-ross.burton@arm.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 27 Apr 2026 20:46:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236022 libtasn dependencies are specific to the trust module, add a PACKAGECONFIG for that and move the dependencies. This is currently enabled by default to preserve behaviour. p11-kit has optional systemd user units for the remote server, add a PACKAGECONFIG for that that respects the systemd DISTRO_FEATURE. Signed-off-by: Ross Burton --- meta/recipes-support/p11-kit/p11-kit_0.26.2.bb | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb b/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb index aa8b28e0e71..a0e2e17d026 100644 --- a/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb +++ b/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb @@ -6,16 +6,17 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=02933887f609807fbb57aa4237d14a50" inherit meson gettext pkgconfig gtk-doc bash-completion manpages -DEPENDS = "libtasn1 libtasn1-native libffi" +DEPENDS = "libffi" DEPENDS:append = "${@' glib-2.0' if d.getVar('GTKDOC_ENABLED') == 'True' else ''}" -SRC_URI = "gitsm://github.com/p11-glue/p11-kit;branch=master;protocol=https;tag=${PV} \ - " +SRC_URI = "gitsm://github.com/p11-glue/p11-kit;branch=master;protocol=https;tag=${PV}" SRCREV = "8e6e4e6d64d9fe91c62b0052c105b2b72d4c24ef" -PACKAGECONFIG ??= "" +PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)} trust" +PACKAGECONFIG[systemd] = "-Dsystemd=enabled,-Dsystemd=disabled,systemd" PACKAGECONFIG[manpages] = "-Dman=true,-Dman=false,libxslt-native" +PACKAGECONFIG[trust] = "-Dtrust_module=enabled,-Dtrust_module=disabled,libtasn1-native libtasn1" PACKAGECONFIG[trust-paths] = "-Dtrust_paths=/etc/ssl/certs/ca-certificates.crt,,,ca-certificates" EXTRA_OEMESON:append = " -Dnls=${@'false' if d.getVar('USE_NLS') == 'no' else 'true'}" From patchwork Mon Apr 27 20:46:39 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Burton X-Patchwork-Id: 87018 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CB908FF8867 for ; Mon, 27 Apr 2026 20:46:51 +0000 (UTC) Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5993.1777322810675823670 for ; Mon, 27 Apr 2026 13:46:50 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@arm.com header.s=foss header.b=ttYcWlSr; spf=pass (domain: arm.com, ip: 217.140.110.172, mailfrom: ross.burton@arm.com) Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 9D7D1497 for ; Mon, 27 Apr 2026 13:46:44 -0700 (PDT) Received: from cesw-amp-gbt-1s-m12830-04.lab.cambridge.arm.com (usa-sjc-imap-foss1.foss.arm.com [10.121.207.14]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPA id B2FBA3F763 for ; Mon, 27 Apr 2026 13:46:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=arm.com; s=foss; t=1777322810; bh=9l/0IISeAALwP0ogMyMIWQmfxj9Arpr1Aqmv/d1wLSw=; h=From:To:Subject:Date:In-Reply-To:References:From; b=ttYcWlSrt3UKBDIFKFPaks3ZSUVwEhkUayw3OMwLB9BOjVxCkDKdXsn6zYSYsjMCv VEKTH60tYyXnxMvzcWjPhZPfo8oxnWyfUTokv5UQ8myrwpd35zPJV5sq8z15cDBgby pjzVhwSDit9UUL/y+Ubob+Gy/QpnFdO0oJP8Gv+4= From: Ross Burton To: openembedded-core@lists.openembedded.org Subject: [PATCH 3/4] p11-kit: explicitly disable tests and zsh-completions Date: Mon, 27 Apr 2026 21:46:39 +0100 Message-ID: <20260427204640.2003231-3-ross.burton@arm.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260427204640.2003231-1-ross.burton@arm.com> References: <20260427204640.2003231-1-ross.burton@arm.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 27 Apr 2026 20:46:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236023 There's no need to build the tests as we won't run them, and disable the zsh completion to avoid having to package the files. Signed-off-by: Ross Burton --- meta/recipes-support/p11-kit/p11-kit_0.26.2.bb | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb b/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb index a0e2e17d026..69fb76658ea 100644 --- a/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb +++ b/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb @@ -19,7 +19,11 @@ PACKAGECONFIG[manpages] = "-Dman=true,-Dman=false,libxslt-native" PACKAGECONFIG[trust] = "-Dtrust_module=enabled,-Dtrust_module=disabled,libtasn1-native libtasn1" PACKAGECONFIG[trust-paths] = "-Dtrust_paths=/etc/ssl/certs/ca-certificates.crt,,,ca-certificates" -EXTRA_OEMESON:append = " -Dnls=${@'false' if d.getVar('USE_NLS') == 'no' else 'true'}" +EXTRA_OEMESON = "\ + -Dtest=false \ + -Dzsh_completion=disabled \ + -Dnls=${@'false' if d.getVar('USE_NLS') == 'no' else 'true'}" + GTKDOC_MESON_OPTION = 'gtk_doc' FILES:${PN} += " \ From patchwork Mon Apr 27 20:46:40 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Burton X-Patchwork-Id: 87020 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 03E88FF8868 for ; Mon, 27 Apr 2026 20:46:52 +0000 (UTC) Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.5876.1777322811288408165 for ; Mon, 27 Apr 2026 13:46:51 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@arm.com header.s=foss header.b=cu3vksce; spf=pass (domain: arm.com, ip: 217.140.110.172, mailfrom: ross.burton@arm.com) Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 4CF2C497 for ; Mon, 27 Apr 2026 13:46:45 -0700 (PDT) Received: from cesw-amp-gbt-1s-m12830-04.lab.cambridge.arm.com (usa-sjc-imap-foss1.foss.arm.com [10.121.207.14]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPA id 6CCE43F763 for ; Mon, 27 Apr 2026 13:46:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=arm.com; s=foss; t=1777322810; bh=mCFuN9XO19jUB89vhcqAobF24+L053sYOdYwLpUnXbA=; h=From:To:Subject:Date:In-Reply-To:References:From; b=cu3vksce0vfJQkzBBhz2xvnlbObAdn9rgpOYje616j+Y75Qqk9iy5+k5hroJuAKex A5s9ZPCM4owiC6bdtr2rwi23ttn+NHiok74pjjKvayoUUoeg+DPSRimCWBKv5Dtk3r PgYYlx7AYxWa/pep7EdZxwm5sJfxgaThEiPT81XI= From: Ross Burton To: openembedded-core@lists.openembedded.org Subject: [PATCH 4/4] p11-kit: packaging rewrite Date: Mon, 27 Apr 2026 21:46:40 +0100 Message-ID: <20260427204640.2003231-4-ross.burton@arm.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260427204640.2003231-1-ross.burton@arm.com> References: <20260427204640.2003231-1-ross.burton@arm.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 27 Apr 2026 20:46:52 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236024 p11-kit is actually a library, pluggable modules, and some helper tools. Add new packages -bin -modules and -remote to package up the pieces separately, and leave just the library in the main package. Signed-off-by: Ross Burton --- .../recipes-support/p11-kit/p11-kit_0.26.2.bb | 25 ++++++++++++------- 1 file changed, 16 insertions(+), 9 deletions(-) diff --git a/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb b/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb index 69fb76658ea..ea636bfb0a8 100644 --- a/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb +++ b/meta/recipes-support/p11-kit/p11-kit_0.26.2.bb @@ -4,7 +4,7 @@ HOMEPAGE = "https://p11-glue.github.io/p11-glue/p11-kit.html" LICENSE = "BSD-3-Clause" LIC_FILES_CHKSUM = "file://COPYING;md5=02933887f609807fbb57aa4237d14a50" -inherit meson gettext pkgconfig gtk-doc bash-completion manpages +inherit meson gettext pkgconfig gtk-doc bash-completion manpages lib_package DEPENDS = "libffi" @@ -26,15 +26,22 @@ EXTRA_OEMESON = "\ GTKDOC_MESON_OPTION = 'gtk_doc' -FILES:${PN} += " \ - ${libdir}/p11-kit-proxy.so \ - ${libdir}/pkcs11/*.so \ - ${libdir}/pkcs11/*.la \ - ${datadir} \ - ${systemd_user_unitdir}/*" +PACKAGES =+ "${PN}-modules ${PN}-remote" -# PN contains p11-kit-proxy.so, a symlink to a loadable module -INSANE_SKIP:${PN} = "dev-so" +FILES:${PN}-bin += "${libexecdir}/p11-kit/trust-extract-compat" + +FILES:${PN}-modules = "\ + ${datadir}/p11-kit/modules \ + ${libdir}/p11-kit-proxy.so \ + ${libdir}/pkcs11" + +# p11-kit-proxy.so, a symlink to a loadable module +INSANE_SKIP:${PN}-modules = "dev-so" + +FILES:${PN}-remote = "\ + ${libexecdir}/p11-kit/p11-kit-remote \ + ${libexecdir}/p11-kit/p11-kit-server \ + ${systemd_user_unitdir}" BBCLASSEXTEND = "native nativesdk"