Build with TPM support

Rationale

  • Upstream has defaulted to building with TPM support since v3.2.6.
  • The reason this feature used to default to off is that TrouSerS—the TCG software stack on which it depends—used to have an incompatible license, but that hasn't been the case since v0.3.11.2.
  • TPM support is rapidly becoming a must due to Microsoft's making it a requirement for Windows 11. Many people are turning to swtpm to emulate TPM in QEMU/KVM virtual machines, but this requires that GnuTLS be built with TPM support (which it is in every other non-Debian-based distribution).

Bonuses and side effects

  • Adds missing utility tpmtool.
  • Unorphans manual page tpmtool(1), which was being installed without the tool it was meant to document (see file list).
  • New dependencies:
    • libtspi-dev (build)
    • libtspi1 (gnutls-bin package)
  • Closes: #790500 and an Ubuntu counterpart that depends on it.

Merge request reports

Loading