Comment 2 for bug 1940079

Revision history for this message
Lucas Kanashiro (lucaskanashiro) wrote : Re: Strongswan in Focal doesn't support TPM 2.0 through the TSS2 interface...

Thanks for taking the time to file this bug and trying to make Ubuntu better.

From the upstream documentation:

'''
--enable-tpm

enable plugin to access persistent RSA and ECDSA private keys bound to Trusted Platform Module 2.0 [ no ]. Since 5.5.2.
'''

The --enable-tpm option was used to build the Focal package, so from what I understood it has the ability to access persistent keys bound to TPM 2.0. To enable the TSS2 library, we would need to add a new build dependency on libtss2 according to upstream documentation. I am not sure if the SRU team would accept this kind of change in a stable release.

@Tobias, what is --enable-tpm option exactly? Does it work without --enable-tss-trousers and --enable-tss-tss2?