[Buildroot] [PATCH] package/libpam-pkcs11: new package

Waldemar Brodkorb wbx at openadk.org
Mon Oct 20 04:52:37 UTC 2025


The Linux-PAM login module for X.509 certificate based user login.

https://github.com/OpenSC/pam_pkcs11

Signed-off-by: Waldemar Brodkorb <wbx at openadk.org>
---
 DEVELOPERS                               |  1 +
 package/Config.in                        |  1 +
 package/libpam-pkcs11/Config.in          | 18 ++++++++++++++++++
 package/libpam-pkcs11/libpam-pkcs11.hash |  2 ++
 package/libpam-pkcs11/libpam-pkcs11.mk   | 18 ++++++++++++++++++
 5 files changed, 40 insertions(+)
 create mode 100755 package/libpam-pkcs11/Config.in
 create mode 100755 package/libpam-pkcs11/libpam-pkcs11.hash
 create mode 100755 package/libpam-pkcs11/libpam-pkcs11.mk

diff --git a/DEVELOPERS b/DEVELOPERS
index 66199a5b72..8f3ef4fc38 100644
--- a/DEVELOPERS
+++ b/DEVELOPERS
@@ -3407,6 +3407,7 @@ F:	package/asterisk/
 F:	package/evilwm/
 F:	package/fbv/
 F:	package/libjwt/
+F:	package/libpam-pkcs11/
 F:	package/mksh/
 F:	package/ruby/
 F:	package/uclibc/
diff --git a/package/Config.in b/package/Config.in
index 161d61728b..42b9acb807 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -2286,6 +2286,7 @@ menu "Other"
 if BR2_PACKAGE_LINUX_PAM
 comment "linux-pam plugins"
 	source "package/libpam-nfc/Config.in"
+	source "package/libpam-pkcs11/Config.in"
 	source "package/libpam-radius-auth/Config.in"
 	source "package/libpam-tacplus/Config.in"
 endif
diff --git a/package/libpam-pkcs11/Config.in b/package/libpam-pkcs11/Config.in
new file mode 100755
index 0000000000..6678c48ab9
--- /dev/null
+++ b/package/libpam-pkcs11/Config.in
@@ -0,0 +1,18 @@
+config BR2_PACKAGE_LIBPAM_PKCS11
+	bool "libpam-pkcs11"
+	depends on BR2_TOOLCHAIN_HAS_THREADS
+	depends on BR2_USE_MMU # pcsc-lite -> fork()
+	depends on !BR2_STATIC_LIBS
+	depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # pcsc-lite -> _Atomic keyword
+	select BR2_PACKAGE_OPENSSL
+	select BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL
+	select BR2_PACKAGE_PCSC_LITE
+	help
+	  The Linux-PAM login module for X.509 certificate based user login.
+
+	  https://github.com/OpenSC/pam_pkcs11
+
+comment "libpam-pkcs11 needs a toolchain w/ threads, dynamic library, gcc >= 4.9"
+	depends on BR2_USE_MMU
+	depends on !BR2_TOOLCHAIN_HAS_THREADS || BR2_STATIC_LIBS || \
+		!BR2_TOOLCHAIN_GCC_AT_LEAST_4_9
diff --git a/package/libpam-pkcs11/libpam-pkcs11.hash b/package/libpam-pkcs11/libpam-pkcs11.hash
new file mode 100755
index 0000000000..9ab133f51b
--- /dev/null
+++ b/package/libpam-pkcs11/libpam-pkcs11.hash
@@ -0,0 +1,2 @@
+# Locally calculated
+sha256 8a853f4e6e136ceecdcffad798570e3d6af2fde08e975656b2dc931989c35aff  pam_pkcs11-0.6.13.tar.gz
diff --git a/package/libpam-pkcs11/libpam-pkcs11.mk b/package/libpam-pkcs11/libpam-pkcs11.mk
new file mode 100755
index 0000000000..9947e58e1a
--- /dev/null
+++ b/package/libpam-pkcs11/libpam-pkcs11.mk
@@ -0,0 +1,18 @@
+################################################################################
+#
+# libpam-pkcs11
+#
+################################################################################
+
+LIBPAM_PKCS11_VERSION = 0.6.13
+LIBPAM_PKCS11_SOURCE = pam_pkcs11-$(LIBPAM_PKCS11_VERSION).tar.gz
+LIBPAM_PKCS11_SITE = https://github.com/OpenSC/pam_pkcs11/archive/refs/tags
+
+LIBPAM_PKCS11_AUTORECONF = YES
+
+LIBPAM_PKCS11_CONF_OPTS += --libdir=/lib
+LIBPAM_PKCS11_CONF_OPTS += --without-docbook
+LIBPAM_PKCS11_CONF_OPTS += --without-ldap
+LIBPAM_PKCS11_DEPENDENCIES = openssl pcsc-lite linux-pam
+
+$(eval $(autotools-package))
-- 
2.47.3



More information about the buildroot mailing list