From c5df3bd1430b8b3f66036374ba144763e5903821 Mon Sep 17 00:00:00 2001
From: bart <bart@bartabox>
Date: Tue, 25 Oct 2022 16:56:06 +0200
Subject: Initial commit

---
 pkcs11_install | 46 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)
 create mode 100644 pkcs11_install

(limited to 'pkcs11_install')

diff --git a/pkcs11_install b/pkcs11_install
new file mode 100644
index 0000000..d69385a
--- /dev/null
+++ b/pkcs11_install
@@ -0,0 +1,46 @@
+#!/bin/bash
+
+build() {
+
+    # CCID
+    add_file /etc/libccid_Info.plist
+    add_file /etc/reader.conf.d/libccidtwin
+    add_file /usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist
+    add_binary /usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Linux/libccid.so
+    add_binary /usr/lib/pcsc/drivers/serial/libccidtwin.so
+
+    # OPENSC
+    add_file /etc/opensc.conf
+    add_binary /usr/lib/libopensc.so.8
+    add_binary /usr/lib/libopensc.so.8.0.0
+    add_binary /usr/lib/opensc-pkcs11.so
+    add_binary /usr/lib/pkcs11/opensc-pkcs11.so
+
+    # PCSCLITE
+    add_binary /usr/lib/libpcsclite.so
+    add_binary /usr/lib/libpcsclite.so.1
+    add_binary /usr/lib/libpcsclite.so.1.0.0
+
+
+    # PCSCD at boot before cryptsetup
+    add_systemd_unit pcscd.service
+    add_systemd_unit pcscd.socket
+    add_symlink /usr/lib/systemd/system/cryptsetup.target.wants/pcscd.socket ../pcscd.socket
+
+    # MISC
+    add_binary /usr/bin/p11tool
+    # cat /etc/pkcs11/modules/opensc.module
+    # module: opensc-pkcs11.so
+    add_file /etc/pkcs11/modules/opensc.module
+
+}
+
+help() {
+    cat <<HELPEOF
+Add and early start (ie before cryptsetup) the pcscd socket service. This
+allow cryptsetup "pkcs11-uri=auto" to find yubikey piv based token. Required
+package are: ccid opensc and pcsclite. Use with systemd and sd-encrypt hook.
+HELPEOF
+}
+
+# vim: set ft=sh ts=4 sw=4 et:
-- 
cgit v1.2.3-70-g09d2