greengrass: Add pkcs11 plugin

This plugin can be enabled via adding `pkcs11` to
PACKAGECONFIG.

Signed-off-by: Mariam Elshakfy <[email protected]>

Author: mariam-elshakfy

recipes-iot/aws-iot-greengrass/greengrass-bin_2.14.1.bb

@@ -13,6 +13,7 @@ DEPENDS += "gettext-native"
 PACKAGECONFIG ??= "${@bb.utils.contains('PTEST_ENABLED', '1', 'fleetprovisioning', '', d)}"
 
 PACKAGECONFIG[fleetprovisioning] = ",,greengrass-plugin-fleetprovisioning,greengrass-plugin-fleetprovisioning"
+PACKAGECONFIG[pkcs11] = ",,greengrass-plugin-pkcs11,greengrass-plugin-pkcs11"
 
 SRC_URI = "\
     https://d2s8p88vqu9w66.cloudfront.net/releases/greengrass-${PV}.zip;subdir=greengrass-bin \

recipes-iot/aws-iot-greengrass/greengrass-plugin-pkcs11/config.yaml.template

@@ -0,0 +1,7 @@
+services:
+  aws.greengrass.crypto.Pkcs11Provider:
+    configuration:
+      name: "aws.greengrass.crypto.Pkcs11Provider"
+      library: "/usr/lib/pkcs11/libtpm2_pkcs11.so"
+      slot: 1
+      userPin: "123456"

recipes-iot/aws-iot-greengrass/greengrass-plugin-pkcs11_2.0.9.bb

@@ -0,0 +1,22 @@
+# SPDX-FileCopyrightText: Copyright (c) 2025, Linaro Limited.
+#
+# SPDX-License-Identifier: MIT
+
+SUMMARY = "AWS Greengrass Crypto PKCS11 Provider"
+DESCRIPTION = "Install Java based AWS Greengrass crypto pkcs11 provider plugin"
+HOMEPAGE = "https://github.com/aws-greengrass/aws-greengrass-pkcs11-provider"
+LICENSE = "Apache-2.0"
+LIC_FILES_CHKSUM = "file://${UNPACKDIR}/LICENSE;md5=34400b68072d710fecd0a2940a0d1658"
+
+PLUGIN_SRC_NAME = "aws.greengrass.crypto.Pkcs11Provider-${PV}.jar"
+PLUGIN_NAME = "aws.greengrass.crypto.Pkcs11Provider.jar"
+
+inherit greengrass-plugin
+
+# PKCS11 Plugin version: 2.0.9
+SRC_URI = "https://d2s8p88vqu9w66.cloudfront.net/releases/Pkcs11Provider/aws.greengrass.crypto.Pkcs11Provider-${PV}.jar;unpack=false; \
+           https://raw.githubusercontent.com/aws-greengrass/aws-greengrass-pkcs11-provider/v${PV}/LICENSE;name=license; \
+           file://config.yaml.template;"
+
+SRC_URI[sha256sum] = "00516cbdaa39fd3a9436eba3efae5388a7a82b3fedc60a5af675200737f5737c"
+SRC_URI[license.sha256sum] = "09e8a9bcec8067104652c168685ab0931e7868f9c8284b66f5ae6edae5f1130b"