[PATCH 1/9] ppa: update COMPATIBLE_MACHINE

[PATCH 1/9] ppa: update COMPATIBLE_MACHINE

[Chunrong Guo]

*support ls1012a

Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>
---
 recipes-bsp/ppa/ppa_git.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-bsp/ppa/ppa_git.bb b/recipes-bsp/ppa/ppa_git.bb
index b1cbde4..e6dcca3 100644
--- a/recipes-bsp/ppa/ppa_git.bb
+++ b/recipes-bsp/ppa/ppa_git.bb
@@ -19,4 +19,4 @@ do_compile () {
     cd ${S}
 }
 
-COMPATIBLE_MACHINE = "(ls1043a|ls1046a|ls2088a|ls1012afrdm|ls1088a)"
+COMPATIBLE_MACHINE = "(ls1043a|ls1046a|ls2088a|ls1012a|ls1088a)"
-- 
1.9.0

[PATCH 2/9] ppa-optee: add ls1012a support

[Chunrong Guo]

*Set PPA_PATH for ls1012a
*Add ls1012a to COMPATIBLE_MACHINE

Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>
---
 recipes-bsp/ppa/ppa-optee_git.bb | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/recipes-bsp/ppa/ppa-optee_git.bb b/recipes-bsp/ppa/ppa-optee_git.bb
index 9e53e2a..e9f3ec7 100644
--- a/recipes-bsp/ppa/ppa-optee_git.bb
+++ b/recipes-bsp/ppa/ppa-optee_git.bb
@@ -4,6 +4,7 @@ DEPENDS += "optee-os-qoriq"
 
 PPA_PATH_ls1046a = "ls1046"
 PPA_PATH_ls1043a = "ls2088"
+PPA_PATH_ls1012a = "ls1012"
 
 do_compile() {
     export ARMV8_TOOLS_DIR="${STAGING_BINDIR_TOOLCHAIN}"
@@ -15,4 +16,4 @@ do_compile() {
     cd ${S}
 }
 
-COMPATIBLE_MACHINE = "(ls1043a|ls1046a)"
+COMPATIBLE_MACHINE = "(ls1043a|ls1046a|ls1012a)"
-- 
1.9.0

[PATCH 3/9] optee-os-qoriq: update to 1543820

[Chunrong Guo]

*include the following changes:
1543820 - plat-ls: Add support for fetching SSK from armv8 platform flavour.
ced7d32 - Merge pull request #2 in DASH/optee_os from ~NXA18717/dash_optee_os:master to master
b48ba24 - plat-ls: Add support for armv8 platform flavour
789e38a - core: arm: psci: pass nsec ctx to system_suspend
a7337d8 - core: fix allocated object on object creation failure in svc storage
639e5b8 - pta: change DMSG to FMSG for invoke in pta/SDP
bc0d271 - make clean: split file list into manageable chunks
8c6a8af - Fix comment in tee_ree_fs.c
6d57389 - Update CHANGELOG.md for 2.6.0
e4a1f58 - entry_std.c: Initialize num_params to fix gcc warning
b644907 - thread.c: free rpc arg mobj during cache disabling
a3bb288 - Update minor revision to 6 for release tag 2.6.0-rc1
b45ff69 - hikey, hikey960: enable dynamic shared memory
9a85cc0 - core: add v2p/p2v tests in embedded tests
3883028 - core:mmu: privileged land pa2va is not supported in dynamic SHM
0d86665 - core:debug: add verbosity when pa/va do not match
42d91b4 - core:mmu: fix userland pa2va conversion
bbed97b - core:mmu: fix userland va2pa conversion
def98e2 - core:unwind: check user context on stack print of panicked TAs
f98151a - core: map PTA registered shared memory late
430dcbd - core: reimplement mobj_mapped_shm_alloc()

*Update SRC_URL

Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>
---
 recipes-security/optee/optee-os-qoriq_git.bb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/recipes-security/optee/optee-os-qoriq_git.bb b/recipes-security/optee/optee-os-qoriq_git.bb
index 21b467e..fba81fb 100644
--- a/recipes-security/optee/optee-os-qoriq_git.bb
+++ b/recipes-security/optee/optee-os-qoriq_git.bb
@@ -8,8 +8,8 @@ DEPENDS = "python-pycrypto-native"
 
 inherit deploy pythonnative
 
-SRCREV = "4886ddbd44665589215df4ef010958cba55dc8ba"
-SRC_URI = "git://bitbucket.sw.nxp.com/scm/dash/optee_os.git;nobranch=1 \
+SRCREV = "1543820b3dd1294af2eb237559ee003981ff26f4"
+SRC_URI = "git://source.codeaurora.org/external/qoriq/qoriq-components/optee_os;nobranch=1 \
            file://0001-allow-setting-sysroot-for-libgcc-lookup.patch \
           "
 
-- 
1.9.0

[PATCH 4/9] cst: update to 20b9a6e

[Chunrong Guo]

*include the following changes:
20b9a6e - fuse: Correct BSD license holder name
97a6c42 - fuse: Add support for programming debug level
4c340bb - Add sample input file for fuse provisioning tool
861fd75 - Add support for fuse provisioning tool
cc11b63 - taal: Add weak taal api's definition
c8cea82 - Separate secboot_hdrs.bin for different boot typt
1225f4c - Make SRK table default option
69c3d35 - Make ls1088_ls2088.sh executable
75e7e52 - Generate SRK hash value
859d7d6 - LS1088 QSPI: Change in address in input file
2810c51 - LS104x_1012: Add signing of bootscript_decap in case of NAND
ff82bda - LS1088 SD: Add input files for LS1088ardb SD
fbd4b73 - To enable blob, added input file
eb13dd3 - LS1021ATWR: Change SPL hdr load address
a9928ec - LS2088_1088: Add uni_sign input files for sd boot
5975dff - LS2088_1088: Sample uni_pbi input file for sd boot
1dcb623 - LS2088_1088: Modify tool to add pbi commands for sd secure
302ebe4 - Enable cmd line flag "--u" urand option for gen_otpmk_drbg
9089ce2 - Correct copyright on ls104x_1012_sd.sh script
660d19d - Resolve Copyright issue
9dd3971 - Add Distroboot specific changes
246b00a - LS1088: Change DPC,MC  DDR address in input file
4d79962 - Remove Issues observed on coverity analysis
ab5e0cb - Correct gen_otpmk_drbg to generate OTPMK as per TAUG
73e11ad - LS2080A : Input files for QSPI boot target.
b59b41d - LS2088A: Adjust the memory map for NOR boot
d429453 - LS1088A: Signing PPA image using script
04f8046 - LS1088A: PPA Input file for IE key extension feature

*update SRC_URI

Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>
---
 recipes-devtools/cst/cst_git.bb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/recipes-devtools/cst/cst_git.bb b/recipes-devtools/cst/cst_git.bb
index 37ee71c..b3df252 100644
--- a/recipes-devtools/cst/cst_git.bb
+++ b/recipes-devtools/cst/cst_git.bb
@@ -9,10 +9,10 @@ RDEPENDS_${PN} = "bash"
 
 inherit kernel-arch
 
-SRC_URI = "git://github.com/qoriq-open-source/cst.git;nobranch=1 \
+SRC_URI = "git://source.codeaurora.org/external/qoriq/qoriq-components/cst;nobranch=1 \
     file://0001-gen_otpmk_drbg-fails-compilation-due-to-uninitialize.patch \
 "
-SRCREV = "5e0ce7047c0185007efec2757fe4c55d49f95aad"
+SRCREV = "20b9a6e3d454c37ed323bfcc4c87879760c90836"
 
 S = "${WORKDIR}/git"
 
-- 
1.9.0

[PATCH 5/9] aiopsl : update to af8c3b8

[Chunrong Guo]

*include the following changes:
af8c3b8 - apps: update elfs before tag
2d89c6a - firmware no.: 8.2.0
aba7196 - aiopsl: extend copyright and license update
d5b2941 - aiopsl: improved exception handling - prevent infinite interrupt loop
e9b9a8e - aiopsl: improved exception handling for e200 booke critical & non-critical interrupts
3c5c38b - sec: drop GPLv2+ license
727e3be - ipf_demo: fix failing test on ls1088a
2700d89 - IPF: check and return error status for fdma functions
4d654f4 - DPNI: provide support for passing of SW opaque value
06e9990 - soft_parser_demo : Add custom header placed before Eth
ef714f5 - aiopsl: improve error reporting by adding section tracking
a1804f5 - aiopsl: improve boot error handling
4771af0 - aiopsl: perform early system initialization
13e8823 - aiopsl: init cmgw_regs based on relative addresses
5f7cabf - aiopsl: remove unused "err" variable and related code
fc75607 - aiopsl: remove dead code
93ce24e - aiopsl: make function(s) with no error paths return void
5cc0bea - aiopsl: add support for AIOP reset

*Update SRC_URL

Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>
---
 recipes-dpaa2/aiopsl/aiopsl_git.bb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/recipes-dpaa2/aiopsl/aiopsl_git.bb b/recipes-dpaa2/aiopsl/aiopsl_git.bb
index cfa5ce1..6f63da0 100644
--- a/recipes-dpaa2/aiopsl/aiopsl_git.bb
+++ b/recipes-dpaa2/aiopsl/aiopsl_git.bb
@@ -7,8 +7,8 @@ BASEDEPENDS = ""
 
 S = "${WORKDIR}/git"
 
-SRC_URI = "git://github.com/qoriq-open-source/aiopsl.git;nobranch=1"
-SRCREV = "48b5c0b6509472bbdcef13a3721b03f884b28500"
+SRC_URI = "git://source.codeaurora.org/external/qoriq/qoriq-components/aiopsl;nobranch=1"
+SRCREV = "af8c3b8957bb994f553b0ed1a7347558db3b0979"
 
 do_configure[noexec] = "1"
 do_compile[noexec] = "1"
-- 
1.9.0

[PATCH 6/9] ppa-optee: update PPA_PATH for ls1043a

[Chunrong Guo]

Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>
---
 recipes-bsp/ppa/ppa-optee_git.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-bsp/ppa/ppa-optee_git.bb b/recipes-bsp/ppa/ppa-optee_git.bb
index e9f3ec7..f5d7201 100644
--- a/recipes-bsp/ppa/ppa-optee_git.bb
+++ b/recipes-bsp/ppa/ppa-optee_git.bb
@@ -3,7 +3,7 @@ require ppa.inc
 DEPENDS += "optee-os-qoriq"
 
 PPA_PATH_ls1046a = "ls1046"
-PPA_PATH_ls1043a = "ls2088"
+PPA_PATH_ls1043a = "ls1043"
 PPA_PATH_ls1012a = "ls1012"
 
 do_compile() {
-- 
1.9.0

[PATCH 7/9] qe-ucode: update COMPATIBLE_MACHINE for t1024

[Chunrong Guo]

Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>
---
 recipes-bsp/qe-ucode/qe-ucode_git.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-bsp/qe-ucode/qe-ucode_git.bb b/recipes-bsp/qe-ucode/qe-ucode_git.bb
index 0688bb4..fadd930 100644
--- a/recipes-bsp/qe-ucode/qe-ucode_git.bb
+++ b/recipes-bsp/qe-ucode/qe-ucode_git.bb
@@ -33,6 +33,6 @@ addtask deploy before do_build after do_install
 PACKAGES += "${PN}-image"
 FILES_${PN}-image += "/boot/*"
 
-COMPATIBLE_MACHINE = "(ls1021a|ls1043a|t1042)"
+COMPATIBLE_MACHINE = "(ls1021a|ls1043a|t1042|t1024)"
 PACKAGE_ARCH = "${MACHINE_SOCARCH}"
 
-- 
1.9.0

[PATCH 8/9] libpkcs11: add recipes

[Chunrong Guo]

*include the following changes:
dd1bc90 - APP: Fix for Find Operation not working
a06dd4e - Removing Unused Functions
9c3a44c - Changing SecureKey name to Secure Object
8871bdc - Merge pull request #10 in DNDEV/libpkcs11 from ~NXA18717/libpkcs11:master to master
98431e8 - Added PKCS11 Application.
41adb66 - Fixing coverity issuse
66bc41b - Correcting error print message
af84c25 - Changing C_Initialize to return correct value
90de92f - Add RSA mechanisms to C_Sign api
7b5d69e - Adding LICENSE to libpkcs11 files
b55dcbd - Incorporate change in name for SK Attribute LABEL
e713e9a - Removing securekey_api.h and securekey_api_types.h
ed96d82 - Removing coverity issues
c3f7052 - Add support for OPENSSL verification in do_Sign api
fe8cb72 - Add do_Sign api in PKCS application
74aa2ce - Correct CKA_ALLOWED_MECHANISMS attribute addition for object
bbfcec7 - Review Rework: Patch 2 - Removing blackduck issues
64e9962 - Add implementation for CK_Sign
e62a602 - Changing printf to debug prints
25fa509 - Review Rework: Removing blackduck issues
e12226b - Miscellaneous Changes
3917342 - Add implementation for CK_SignInit
ced36ca - Review Rework: Adding code for per slot init in C_Initialize
39cfd5e - Adding code for keeping the position in find_list
5319ed0 - Changing names of some functions for blackduck
09fc58f - Adding Securekey function pointer per slot
7ee9cb1 - Adding general.c and general.h for general functions
81f78f7 - Review Rework: Adding session list per token
ee38111 - Review rework of comments.
26532be - Correcting the prints in the application.
80d65f4 - Adding more RSA mechanisms
57f325f - Review Rework: Creating 2 objects for each keypair object from securekey
ed02339 - Update securekey header files with sign and encrypt api's
2438a8f - Make global function list static & do runtime init
c6f51ea - Adding implementation for Object Related APIs
1bf7f57 - Review rework of comments given till now.
06eb609 - Adding framework for getting function pointers from Securekey
0ad6130 - Adding implementation for session functions
b0d331b - Adding implementation for general functions
6ca8cb9 - Adding file hierarchy framework
c08270f - Initial Commit

Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>
---
 recipes-extended/libpkcs11/libpkcs11_git.bb | 37 +++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 recipes-extended/libpkcs11/libpkcs11_git.bb

diff --git a/recipes-extended/libpkcs11/libpkcs11_git.bb b/recipes-extended/libpkcs11/libpkcs11_git.bb
new file mode 100644
index 0000000..600a131
--- /dev/null
+++ b/recipes-extended/libpkcs11/libpkcs11_git.bb
@@ -0,0 +1,37 @@
+DESCRIPTION = "PKCS library"
+LICENSE = "GPLv2 & BSD"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=803852533e29eb1d6d5e55ad3078b625"
+
+SRC_URI = "git://source.codeaurora.org/external/qoriq/qoriq-components/libpkcs11;nobranch=1"
+SRCREV = "dd1bc90b0f2171d4dddd9d7d0fc5a2acfb067ab8"
+
+DEPENDS = "openssl secure-obj"
+
+S = "${WORKDIR}/git"
+
+WRAP_TARGET_PREFIX ?= "${TARGET_PREFIX}"
+export CROSS_COMPILE_HOST = "${CROSS_COMPILE}"
+export CROSS_COMPILE_TA = "${CROSS_COMPILE}"
+
+CFLAGS += "-fPIC"
+
+EXTRA_OEMAKE = 'CC="${CC}" LD="${CC}" CFLAGS="${CFLAGS}"'
+
+do_compile() {
+        export OPENSSL_PATH="${RECIPE_SYSROOT}/usr"
+        export CROSS_COMPILE="${WRAP_TARGET_PREFIX}"
+        oe_runmake all 
+}
+
+do_install(){
+    mkdir -p ${D}/${libdir}
+    mkdir -p ${D}/${includedir} ${D}/${bindir}
+    cp ${S}/out/export/lib/libpkcs11.so  ${D}/${libdir}
+    cp ${S}/out/export/include/*.h  ${D}/${includedir}
+    cp ${S}/out/export/app/pkcs11_app  ${D}/${bindir}
+}
+
+PARALLEL_MAKE = ""
+INSANE_SKIP_${PN} = "ldflags dev-deps"
+INSANE_SKIP_${PN}-dev = "ldflags dev-elf"
+COMPATIBLE_MACHINE = "(ls1043a|ls1046a|ls2088a|ls1088a)"
-- 
1.9.0

[PATCH 9/9] secure-obj: add recipes

[Chunrong Guo]

*include the following changes:
74befe0 - SOBJ_TA: Fix for crash on running multiple sobj_eng_app simultaneously
abfad4b - SOBJ_ENG: Adding support for parsing fake pem file
0120544 - SOBJ_APP:Adding option to save label in pem file
0f75291 - LIB: Removing compilation error
40cb954 - Updating README file
02be730 - SEC_KEY_DEV: Removing Compilation Error for Linux 4.14
1ed3e61 - SEC_KEY_DEV: Updating module information.
99253c5 - SEC_ENG_APP: Removing Compilation Error
bb77eb4 - Merge pull request #14 in DNDEV/secure_obj from devel to master
7a98861 - Miscellaneous Changes
3225611 - SEC_KEY_DEV: Updating License to GPLV2.0
6d22fae - SEC_KEY_DEV: Removing FLIB dependancy for MP Key feature
436d79c - Removing issues reported by coverity
3db41f7 - LIB: Adding application for testing Secure Object Engine
1ae06b6 - SOBJ_ENGINE: Adding Secure Object based OpenSSL Engine
1e322f4 - LIB: Adding License to MP Apps file
4445c63 - LIB: Adding Manufacturing Key Feature
5b68462 - LIB: Changing library name to libsecure_obj.so
f700c98 - Added Secure Object Application.
d9d6a06 - APP: Coverity issue fix
fe0da83 - TA: Add support for SK_GenerateKeyPair api
6589f45 - LIB: Add support for SK_Digest api
33dccce - TA: Add support for SK_Digest api
748187b - TA: Adding LICENSE to Secure Storage TA files
dded4a9 - LIB: Adding LICENSE to Securekey Library files
0fbacc6 - LIB: Adding description of APIs in securekey_api.h
ff95077 - LIB: Incorporate review comments on securekey_api_types.h
f77a134 - TA: Incorporate review comments
2bb00f3 - LIB: Replacing printf with debug prints
a88d9b8 - Coverity: Solving issues reported by coverity
b0017c8 - TA: Add support for SK_Decrypt instead of SK_Encrypt
352ef6d - LIB: Make global func list static & do runtime init
2d09e72 - LIB: Add SK_Sign & SK_Encrypt APIs implementation
db11a50 - LIB: Update securekey header files with sign and encrypt api's
d4a29de - TA: Add support for SK_Sign and SK_Encrypt api's
09ceac4 - LIB: Adding implementation of SK_GetObjectAttribute API
877c1fb - TA: Update securekey_api_types.h with sign/encrypt types
a1e709a - TA: Add support for SK_GetObjectAttribute api
5c7479c - LIB: Correcting Error mapping function
a0deca2 - LIB: Adding test for enumerate object on attributes
c9a2feb - LIB: Adding implementation of SK_EraseObject
f63f9ce - TA: Add support for SK_EraseObject api
bcb1d3d - TA: Add support for match attribute in SK_FindObject api
3ae46cd - LIB: Exposing function pointers from Securekey Library
e9a2ce9 - LIB: Mapping TEE errors to SecureKey errors
912e388 - LIB: Adding implementation of SK_EnumerateObjects
a14cbbb - LIB: Adding SK_CreateObject Implementation
20ce6af - TA: Add client side test framework
4fafd61 - TA: Add sub.mk for compilation
62edd11 - TA: Add implementation for SK_FindObject api
597d4e0 - TA: Add implementation for SK_CreateObject api
e11ea98 - TA: Add database mgmt and hepler api's
0ba7bd3 - TA: Add framework for Secure Storage API's
e113d79 - TA: Changes in Makefile to comply with OP-TEE compilation
d24d3d4 - Adding file hierarchy framework
9075f15 - Initial Commit

Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>
---
 .../secure-obj/secure-obj-module_git.bb            | 11 +++++++
 recipes-extended/secure-obj/secure-obj.inc         | 27 ++++++++++++++++
 recipes-extended/secure-obj/secure-obj_git.bb      | 37 ++++++++++++++++++++++
 3 files changed, 75 insertions(+)
 create mode 100644 recipes-extended/secure-obj/secure-obj-module_git.bb
 create mode 100644 recipes-extended/secure-obj/secure-obj.inc
 create mode 100644 recipes-extended/secure-obj/secure-obj_git.bb

diff --git a/recipes-extended/secure-obj/secure-obj-module_git.bb b/recipes-extended/secure-obj/secure-obj-module_git.bb
new file mode 100644
index 0000000..3866dde
--- /dev/null
+++ b/recipes-extended/secure-obj/secure-obj-module_git.bb
@@ -0,0 +1,11 @@
+require secure-obj.inc
+
+LIC_FILES_CHKSUM = "file://../README;md5=82b72e88f23cded9dd23f0fb1790b8d2"
+
+DEPENDS += "virtual/kernel"
+
+inherit module 
+
+S = "${WORKDIR}/git/securekeydev"
+
+EXTRA_OEMAKE += 'KERNEL_SRC="${STAGING_KERNEL_DIR}"'
diff --git a/recipes-extended/secure-obj/secure-obj.inc b/recipes-extended/secure-obj/secure-obj.inc
new file mode 100644
index 0000000..3fd70eb
--- /dev/null
+++ b/recipes-extended/secure-obj/secure-obj.inc
@@ -0,0 +1,27 @@
+DESCRIPTION = "Secure Object"
+LICENSE = "BSD"
+
+DEPENDS = "openssl optee-os-qoriq optee-client-qoriq"
+RDEPENDS_${PN} = "bash libcrypto libssl python"
+
+DEPENDS += "python-pycrypto-native"
+
+inherit pythonnative
+
+LDFLAGS += "${TOOLCHAIN_OPTIONS}"
+
+SRC_URI = "git://source.codeaurora.org/external/qoriq/qoriq-components/secure_obj;nobranch=1 \
+"
+SRCREV = "74befe01bda41f1c27b197ef2ab66e475e9a81b3"
+
+WRAP_TARGET_PREFIX ?= "${TARGET_PREFIX}"
+export SECURE_STORAGE_PATH = "${S}/secure_storage_ta/ta/"
+export OPTEE_CLIENT_EXPORT = "${RECIPE_SYSROOT}/usr"
+
+EXTRA_OEMAKE = 'CC="${CC}" LD="${CC}"'
+
+ALLOW_EMPTY_${PN} = "1"
+INHIBIT_PACKAGE_STRIP = "1"
+PARALLEL_MAKE = ""
+INSANE_SKIP_${PN} = "ldflags"
+COMPATIBLE_MACHINE = "(ls2080ardb|ls2084ardb|ls2088a|ls1043a|ls1046a|ls1088a)"
diff --git a/recipes-extended/secure-obj/secure-obj_git.bb b/recipes-extended/secure-obj/secure-obj_git.bb
new file mode 100644
index 0000000..103c089
--- /dev/null
+++ b/recipes-extended/secure-obj/secure-obj_git.bb
@@ -0,0 +1,37 @@
+require secure-obj.inc
+
+LIC_FILES_CHKSUM = "file://README;md5=82b72e88f23cded9dd23f0fb1790b8d2"
+
+S = "${WORKDIR}/git"
+
+WRAP_TARGET_PREFIX ?= "${TARGET_PREFIX}"
+export SECURE_STORAGE_PATH = "${S}/secure_storage_ta/ta/"
+export OPTEE_CLIENT_EXPORT = "${RECIPE_SYSROOT}/usr"
+export CROSS_COMPILE_HOST = "${CROSS_COMPILE}"
+export CROSS_COMPILE_TA = "${CROSS_COMPILE}"
+
+do_compile() {
+        unset LDFLAGS
+        export TA_DEV_KIT_DIR="${RECIPE_SYSROOT}/usr/include/optee/export-user_ta"
+        export CROSS_COMPILE="${WRAP_TARGET_PREFIX}"
+        export OPENSSL_PATH="${RECIPE_SYSROOT}/usr" 
+        for APP in  secure_storage_ta securekey_lib secure_obj-openssl-engine; do        
+            cd  ${APP}
+            oe_runmake
+	    cd ..
+        done       
+}
+
+do_install() {
+	install -d ${D}${bindir}/secure_obj
+        install -d ${D}${libdir}/secure_obj
+        install -d ${D}${includedir}
+        cp ${S}/secure_storage_ta/ta/b05bcf48-9732-4efa-a9e0-141c7c888c34.ta ${D}${bindir}/secure_obj
+        cp ${S}/securekey_lib/out/export/lib/libsecure_obj.so ${D}${libdir}/secure_obj
+        cp ${S}/secure_obj-openssl-engine/libeng_secure_obj.so ${D}${libdir}/secure_obj
+        cp ${S}/securekey_lib/out/export/app/* ${D}${bindir}/secure_obj
+        cp ${S}/securekey_lib/out/export/include/*  ${D}${includedir}
+        cp ${S}/secure_obj-openssl-engine/app/sobj_eng_app ${D}${bindir}/secure_obj
+}
+
+FILES_${PN} += "${libdir}/secure_obj"
-- 
1.9.0