microsoft / azurelinux

Linux OS for Azure 1P services and edge appliances
MIT License
4.08k stars 497 forks source link

Fix libtpms <-> SymCrypt provider compatibility #9511

Closed mamckee closed 1 week ago

mamckee commented 1 week ago
Merge Checklist

All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)


Summary

Recent testing found an incompatibility between libtpms and the SymCrypt provider. Version 0.9.6 of libtpms is using the old OpenSSL APIs and does not export the RSA key primes as part of RSA private key export. SymCrypt expects these primes to import the RSA private key. This PR adds a patch to libtpms to export the expected primes.

The latest changes to libtpms appear to fix this issue and update to the OpenSSL 3 APIs, so this patch is only necessary until those changes make it to release.

Change Log
Does this affect the toolchain?

NO

Test Methodology