Re: openconnect and tpm2

2020-03-03 Thread James Bottomley
On Tue, 2020-03-03 at 13:11 +0200, David Woodhouse wrote: > On Tue, 2020-03-03 at 09:02 +0100, Grant Williamson wrote: > > In our use case. We are provided a p12 file. > > We are testing om RHEL 8. > > Where improvement could take place, my thoughts. > > > > - instructions on how to extract the pr

Re: openconnect and tpm2

2020-03-03 Thread David Woodhouse
On Tue, 2020-03-03 at 09:02 +0100, Grant Williamson wrote: > In our use case. We are provided a p12 file. > We are testing om RHEL 8. > Where improvement could take place, my thoughts. > > - instructions on how to extract the private key and the certs from > the p12(see below) I'm definitely goin

Re: openconnect and tpm2

2020-03-03 Thread Grant Williamson
In our use case. We are provided a p12 file. We are testing om RHEL 8. Where improvement could take place, my thoughts. - instructions on how to extract the private key and the certs from the p12(see below) - offer openssl_tpm2_engine ibmtss(ibmtss-devel, libibmtss0) packages in epel 8 - build the

Re: openconnect and tpm2

2020-03-02 Thread David Woodhouse
On Mon, 2020-03-02 at 18:26 +0100, Grant Williamson wrote: > Thank you. Sorry I intended to reply sooner. That's good to know; thanks. Next question: Now you've worked it out, could the documentation be improved in any way? What was missing? Better still, what should be fixed in the code (or too

Re: openconnect and tpm2

2020-03-02 Thread Grant Williamson
Thank you. Sorry I intended to reply sooner. This works. On Mon, Mar 2, 2020 at 6:04 PM David Woodhouse wrote: > > On Tue, 2020-02-18 at 15:49 +0100, Grant Williamson wrote: > > Hi, looking for guidance on how to use openconnect in conjunction > > with > > a private key stored in the tpm. > > > >

Re: openconnect and tpm2

2020-03-02 Thread David Woodhouse
On Tue, 2020-02-18 at 15:49 +0100, Grant Williamson wrote: > Hi, looking for guidance on how to use openconnect in conjunction > with > a private key stored in the tpm. > > - RHEL 8.1 > - UEFI and Secure Boot are enabled. > - Upstream packages:- > tpm2-abrmd-2.3.1-1.el8.x86_64.rpm > tpm2-a

Re: openconnect and tpm2

2020-02-18 Thread David Woodhouse
On 18 February 2020 15:49:41 CET, Grant Williamson wrote: >Hi, looking for guidance on how to use openconnect in conjunction with >a private key stored in the tpm. > >- RHEL 8.1 >- UEFI and Secure Boot are enabled. >- Upstream packages:- >tpm2-abrmd-2.3.1-1.el8.x86_64.rpm >tpm2-abrmd-se

openconnect and tpm2

2020-02-18 Thread Grant Williamson
Hi, looking for guidance on how to use openconnect in conjunction with a private key stored in the tpm. - RHEL 8.1 - UEFI and Secure Boot are enabled. - Upstream packages:- tpm2-abrmd-2.3.1-1.el8.x86_64.rpm tpm2-abrmd-selinux-2.3.1-2.el8.noarch.rpm tpm2-tools-4.1-2.el8.x86_64.rpm t