[Buildroot] [PATCH] package/libpam-pkcs11: new package
Waldemar Brodkorb
wbx at openadk.org
Mon Oct 20 04:52:37 UTC 2025
The Linux-PAM login module for X.509 certificate based user login.
https://github.com/OpenSC/pam_pkcs11
Signed-off-by: Waldemar Brodkorb <wbx at openadk.org>
---
DEVELOPERS | 1 +
package/Config.in | 1 +
package/libpam-pkcs11/Config.in | 18 ++++++++++++++++++
package/libpam-pkcs11/libpam-pkcs11.hash | 2 ++
package/libpam-pkcs11/libpam-pkcs11.mk | 18 ++++++++++++++++++
5 files changed, 40 insertions(+)
create mode 100755 package/libpam-pkcs11/Config.in
create mode 100755 package/libpam-pkcs11/libpam-pkcs11.hash
create mode 100755 package/libpam-pkcs11/libpam-pkcs11.mk
diff --git a/DEVELOPERS b/DEVELOPERS
index 66199a5b72..8f3ef4fc38 100644
--- a/DEVELOPERS
+++ b/DEVELOPERS
@@ -3407,6 +3407,7 @@ F: package/asterisk/
F: package/evilwm/
F: package/fbv/
F: package/libjwt/
+F: package/libpam-pkcs11/
F: package/mksh/
F: package/ruby/
F: package/uclibc/
diff --git a/package/Config.in b/package/Config.in
index 161d61728b..42b9acb807 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -2286,6 +2286,7 @@ menu "Other"
if BR2_PACKAGE_LINUX_PAM
comment "linux-pam plugins"
source "package/libpam-nfc/Config.in"
+ source "package/libpam-pkcs11/Config.in"
source "package/libpam-radius-auth/Config.in"
source "package/libpam-tacplus/Config.in"
endif
diff --git a/package/libpam-pkcs11/Config.in b/package/libpam-pkcs11/Config.in
new file mode 100755
index 0000000000..6678c48ab9
--- /dev/null
+++ b/package/libpam-pkcs11/Config.in
@@ -0,0 +1,18 @@
+config BR2_PACKAGE_LIBPAM_PKCS11
+ bool "libpam-pkcs11"
+ depends on BR2_TOOLCHAIN_HAS_THREADS
+ depends on BR2_USE_MMU # pcsc-lite -> fork()
+ depends on !BR2_STATIC_LIBS
+ depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # pcsc-lite -> _Atomic keyword
+ select BR2_PACKAGE_OPENSSL
+ select BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL
+ select BR2_PACKAGE_PCSC_LITE
+ help
+ The Linux-PAM login module for X.509 certificate based user login.
+
+ https://github.com/OpenSC/pam_pkcs11
+
+comment "libpam-pkcs11 needs a toolchain w/ threads, dynamic library, gcc >= 4.9"
+ depends on BR2_USE_MMU
+ depends on !BR2_TOOLCHAIN_HAS_THREADS || BR2_STATIC_LIBS || \
+ !BR2_TOOLCHAIN_GCC_AT_LEAST_4_9
diff --git a/package/libpam-pkcs11/libpam-pkcs11.hash b/package/libpam-pkcs11/libpam-pkcs11.hash
new file mode 100755
index 0000000000..9ab133f51b
--- /dev/null
+++ b/package/libpam-pkcs11/libpam-pkcs11.hash
@@ -0,0 +1,2 @@
+# Locally calculated
+sha256 8a853f4e6e136ceecdcffad798570e3d6af2fde08e975656b2dc931989c35aff pam_pkcs11-0.6.13.tar.gz
diff --git a/package/libpam-pkcs11/libpam-pkcs11.mk b/package/libpam-pkcs11/libpam-pkcs11.mk
new file mode 100755
index 0000000000..9947e58e1a
--- /dev/null
+++ b/package/libpam-pkcs11/libpam-pkcs11.mk
@@ -0,0 +1,18 @@
+################################################################################
+#
+# libpam-pkcs11
+#
+################################################################################
+
+LIBPAM_PKCS11_VERSION = 0.6.13
+LIBPAM_PKCS11_SOURCE = pam_pkcs11-$(LIBPAM_PKCS11_VERSION).tar.gz
+LIBPAM_PKCS11_SITE = https://github.com/OpenSC/pam_pkcs11/archive/refs/tags
+
+LIBPAM_PKCS11_AUTORECONF = YES
+
+LIBPAM_PKCS11_CONF_OPTS += --libdir=/lib
+LIBPAM_PKCS11_CONF_OPTS += --without-docbook
+LIBPAM_PKCS11_CONF_OPTS += --without-ldap
+LIBPAM_PKCS11_DEPENDENCIES = openssl pcsc-lite linux-pam
+
+$(eval $(autotools-package))
--
2.47.3
More information about the buildroot
mailing list