Source: strongswan Version: 5.9.1-1 Severity: normal X-Debbugs-Cc: [email protected]
Spun-off from: https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/1940079 Hi Yves-Alexis, The Debian strongswan package doesn't currently have any TPM support, even if d/rules calls ./configure --enable-tpm, as actually enabling TPM requires a TSS (Tpm Software Stack) implementation. To enable TPM2 we need TSS2, which is enabled via --enable-tss-tss2 (which requires an additional build-dep: libtss2-dev). Please consider adding those to the strongswan packaging. Note: this still doesn't enable TPM1.2, for which --enable-tss-trousers is required. My suggestion is to avoid enabling it, and strongswan upstream Tobias Brunner agrees, see the discussion in the Ubuntu bug I linked. Thanks! Paride -- System Information: Debian Release: bookworm/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-8-amd64 (SMP w/4 CPU threads) Kernel taint flags: TAINT_FIRMWARE_WORKAROUND Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled
