Re: [Buildroot] [PATCH 1/1] package/uboot-tools: select p11-kit when building target mkeficapsule

On 09/08/2026 13:11, Fiona Klute via buildroot wrote:
> Since upstream commit 0c716a157be460006a4b762625de329b5e36dbf9 (first
> release: v2026.07) mkeficapsule supports PKCS#11 keys, and in turn
> requires GnuTLS with PKCS#11 support.
> 
> Without it, building mkeficapsule for the target fails:
> 
>   HOSTLD  tools/mkeficapsule
> /home/fiona/br-test-pkg/bootlin-armv5-uclibc/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/14.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: 
> tools/mkeficapsule.o: in function `main':
> mkeficapsule.c:(.text.startup+0x530): undefined reference to 
> `gnutls_pkcs11_init'
> /home/fiona/br-test-pkg/bootlin-armv5-uclibc/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/14.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: 
> mkeficapsule.c:(.text.startup+0x544): undefined reference to 
> `gnutls_pkcs11_add_provider'
> /home/fiona/br-test-pkg/bootlin-armv5-uclibc/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/14.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: 
> mkeficapsule.c:(.text.startup+0x5fc): undefined reference to 
> `gnutls_pkcs11_obj_list_import_url4'
> /home/fiona/br-test-pkg/bootlin-armv5-uclibc/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/14.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: 
> mkeficapsule.c:(.text.startup+0x620): undefined reference to 
> `gnutls_x509_crt_import_pkcs11'
> /home/fiona/br-test-pkg/bootlin-armv5-uclibc/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/14.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: 
> mkeficapsule.c:(.text.startup+0x1334): undefined reference to 
> `gnutls_pkcs11_deinit'
> collect2: error: ld returned 1 exit status
> 
> The error can be reproduced using "utils/test-pkg -c" with the
> following config:
> 
> BR2_PACKAGE_UBOOT_TOOLS=y
> BR2_PACKAGE_UBOOT_TOOLS_MKEFICAPSULE=y
> 
> For host-uboot-tools this was solved in Buildroot commit
> 6597563da7bb359eac57c8fb70e4efc3d6ef4c02 "package/gnutls: add host
> support for pkcs11" by unconditionally enabling PKCS#11 support for
> host-gnutls. For the target a more fine-grained approach is desirable,
> so instead select BR2_PACKAGE_P11_KIT if
> BR2_PACKAGE_UBOOT_TOOLS_MKEFICAPSULE=y and propagate dependencies.
> 
> Signed-off-by: Fiona Klute <[email protected]>

Applied to master, thanks.
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot