google / google/go-tpm

old version of go-tpm-tools

Open
#419 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
673
Forks
188
PR merge metrics
No merged PRs in 30d

Description

This project depends on a rather old version of go-tpm-tools (v0.3.13 from June 2023).

I ran into CGO issues on macOS when using the simulator from go-tpm-tools. The older v0.3.13 version has hardcoded OpenSSL paths that don't work out of the box, but v0.4.5 fixes this apparently.

The problem is that go-tpm v0.9.7 depends on v0.3.13:

```
github.com/google/go-tpm-tools v0.3.13-0.20230620182252-4639ecce2aba
```

This means even if I add go-tpm-tools v0.4.5 to my go.mod, Go's MVS picks the older v0.3.13 because of go-tpm's requirement.

Could you update the dependency to v0.4.5?

Contributor guide

Open the contributing guide

Research direction

Start with go.mod and inspect the go-tpm v0.9.7 requirement for go-tpm-tools. Update the dependency so the module graph selects v0.4.5, then verify the resolved version and confirm the macOS simulator dependency issue is addressed.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
build-system
Issue type
Bug
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
50/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.