commit softhsm for openSUSE:Factory
Hello community, here is the log from the commit of package softhsm for openSUSE:Factory checked in at 2019-05-22 15:40:36 Comparing /work/SRC/openSUSE:Factory/softhsm (Old) and /work/SRC/openSUSE:Factory/.softhsm.new.5148 (New) Package is "softhsm" Wed May 22 15:40:36 2019 rev:7 rq:704679 version:2.5.0 Changes: --- /work/SRC/openSUSE:Factory/softhsm/softhsm.changes 2018-09-26 14:24:33.137813929 +0200 +++ /work/SRC/openSUSE:Factory/.softhsm.new.5148/softhsm.changes 2019-05-22 15:41:16.878427258 +0200 @@ -1,0 +2,5 @@ +Mon May 20 13:38:34 UTC 2019 - Christophe Giboudeaux + +- Add the missing zlib requirement. + +--- Other differences: -- ++ softhsm.spec ++ --- /var/tmp/diff_new_pack.g5j3Cq/_old 2019-05-22 15:41:20.694427241 +0200 +++ /var/tmp/diff_new_pack.g5j3Cq/_new 2019-05-22 15:41:20.698427241 +0200 @@ -1,7 +1,7 @@ # # spec file for package softhsm # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -39,6 +39,7 @@ BuildRequires: pkgconfig BuildRequires: sqlite3 BuildRequires: sqlite3-devel >= 3.4.2 +BuildRequires: pkgconfig(zlib) Requires(pre): shadow Requires: mozilla-nss-tools Requires: p11-kit
commit softhsm for openSUSE:Factory
Hello community, here is the log from the commit of package softhsm for openSUSE:Factory checked in at 2018-09-26 14:24:06 Comparing /work/SRC/openSUSE:Factory/softhsm (Old) and /work/SRC/openSUSE:Factory/.softhsm.new (New) Package is "softhsm" Wed Sep 26 14:24:06 2018 rev:6 rq:638263 version:2.5.0 Changes: --- /work/SRC/openSUSE:Factory/softhsm/softhsm.changes 2018-02-28 20:02:42.652009390 +0100 +++ /work/SRC/openSUSE:Factory/.softhsm.new/softhsm.changes 2018-09-26 14:24:33.137813929 +0200 @@ -1,0 +2,22 @@ +Mon Sep 24 18:05:44 UTC 2018 - Michael Ströder + +- Update to version 2.5.0 + +Updates: + * Issue #323: Support for EDDSA with vendor defined mechanisms. + * Issue #362: CMake Build System Support for SoftHSM. + * Issue #368: Support migrating 32-bit SoftHSMv1 DB on 64-bit system (LP64). + * Issue #385: Default is not to build EDDSA since it has not been released in OpenSSL. + * Issue #387: Windows: Add VS2017 detection to Configure.py. + * Issue #412: Replace PKCS11 headers with a version from p11-kit. + +Bugfixes: + * Issue #366: Support cross-compilation. + * Issue #377: Duplicate symbol error with custom p11test. + * Issue #386: Use RDRAND in OpenSSL if that engine is available. + * Issue #388: Update DBTests.cpp to fix x86 test failure. + * Issue #393: Not setting CKA_PUBLIC_KEY_INFO correctly. + * Issue #401: Wrong key and keyserver mentioned in installation documentation. + * Issue #408: Remove mutex callbacks after C_Finalize(). + +--- Old: softhsm-2.4.0.tar.gz New: softhsm-2.5.0.tar.gz Other differences: -- ++ softhsm.spec ++ --- /var/tmp/diff_new_pack.oKbzbD/_old 2018-09-26 14:24:34.689811463 +0200 +++ /var/tmp/diff_new_pack.oKbzbD/_new 2018-09-26 14:24:34.693811457 +0200 @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -20,7 +20,7 @@ License:BSD-2-Clause Group: Productivity/Security Name: softhsm -Version:2.4.0 +Version:2.5.0 Release:0 Url:http://www.opendnssec.org/ Source: https://dist.opendnssec.org/source/%{name}-%{version}.tar.gz ++ softhsm-2.4.0.tar.gz -> softhsm-2.5.0.tar.gz ++ 20684 lines of diff (skipped)
commit softhsm for openSUSE:Factory
Hello community, here is the log from the commit of package softhsm for openSUSE:Factory checked in at 2018-02-28 20:02:41 Comparing /work/SRC/openSUSE:Factory/softhsm (Old) and /work/SRC/openSUSE:Factory/.softhsm.new (New) Package is "softhsm" Wed Feb 28 20:02:41 2018 rev:5 rq:580779 version:2.4.0 Changes: --- /work/SRC/openSUSE:Factory/softhsm/softhsm.changes 2018-01-13 21:44:38.098500662 +0100 +++ /work/SRC/openSUSE:Factory/.softhsm.new/softhsm.changes 2018-02-28 20:02:42.652009390 +0100 @@ -1,0 +2,16 @@ +Tue Feb 27 18:50:20 UTC 2018 - mar...@gmx.de + +- Update to version 2.4.0 + * Support PKCS#8 for GOST. + * Support for CKA_ALLOWED_MECHANISMS. + * Support CKA_ALWAYS_AUTHENTICATE for private key objects. + * Support for CKM_DES3_CMAC and CKM_AES_CMAC. + * Support for CKM_AES_GCM. + * Document that initialized tokens will be reassigned to another +slot (based on the token serial number). + * Support for CKM_RSA_PKCS_PSS. + * Import AES keys with softhsm2-util. + * softhsm2-util will check the configuration and report any +issues before loading the PKCS#11 library. + +--- Old: softhsm-2.3.0.tar.gz New: softhsm-2.4.0.tar.gz Other differences: -- ++ softhsm.spec ++ --- /var/tmp/diff_new_pack.yUHSHB/_old 2018-02-28 20:02:43.875965104 +0100 +++ /var/tmp/diff_new_pack.yUHSHB/_new 2018-02-28 20:02:43.879964960 +0100 @@ -1,7 +1,7 @@ # # spec file for package softhsm # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,9 +18,9 @@ Summary:Software version of a PKCS#11 Hardware Security Module License:BSD-2-Clause -Group: Applications/System +Group: Productivity/Security Name: softhsm -Version:2.3.0 +Version:2.4.0 Release:0 Url:http://www.opendnssec.org/ Source: https://dist.opendnssec.org/source/%{name}-%{version}.tar.gz ++ softhsm-2.3.0.tar.gz -> softhsm-2.4.0.tar.gz ++ 40871 lines of diff (skipped)
commit softhsm for openSUSE:Factory
Hello community, here is the log from the commit of package softhsm for openSUSE:Factory checked in at 2018-01-13 21:44:33 Comparing /work/SRC/openSUSE:Factory/softhsm (Old) and /work/SRC/openSUSE:Factory/.softhsm.new (New) Package is "softhsm" Sat Jan 13 21:44:33 2018 rev:4 rq:557872 version:2.3.0 Changes: --- /work/SRC/openSUSE:Factory/softhsm/softhsm.changes 2017-05-08 19:04:37.458495614 +0200 +++ /work/SRC/openSUSE:Factory/.softhsm.new/softhsm.changes 2018-01-13 21:44:38.098500662 +0100 @@ -1,0 +2,102 @@ +Sun Dec 17 19:16:24 UTC 2017 - mar...@gmx.de + +- Update to version 2.3.0 + * Upgraded to PKCS#11 v2.40. + * Minor changes to some return values. + * Added CKA_DESTROYABLE to all objects. Used by C_DestroyObject(). + * Added CKA_PUBLIC_KEY_INFO to certificates, private, and public key +objects. Will be accepted from application, but SoftHSM will +currently not calculate it. + * Support for CKM_AES_CTR. + * Add unit tests for SessionManager. + * C_DigestKey returns CKR_KEY_INDIGESTIBLE when key +attribute CKA_EXTRACTABLE = false. Whitelist SHA algorithms to allow +C_DigestKey in this case. + * Show slot id after initialization. + * Run AppVeyor (Windows CI) for each PR and merge. + * Set CKA_DECRYPT/CKA_ENCRYPT flags on key import to true. + * Add support for libeaycompat lib for FIPS on Windows. + * Support importing ECDSA P-521 in softhsm-util. + * Support for Botan 2.0. + * Editorial changes from Mountain Lion to Sierra. + * More detailed error messages when initializing SoftHSM. + * Support for LibreSSL. + * Change to enable builds and reports on new Jenkinks environment. + * Detect cppunit in autoconf. + * CKO_CERTIFICATE and CKO_PUBLIC_KEY now defaults to CKA_PRIVATE=false. + * Update README with information about logging. + * Adjust log levels for failing to enumerate object store. + * Better handling of CRYPTO_set_locking_callback() for OpenSSL. + * Fix deriving shared secret with ECC. + * HMAC with sizes less than L bytes is strongly discouraged. +Set a lower bound equal to L bytes in ulMinKeySize and check it when +initializing the operation. + * Fix test of p11 shared library. + * Minor fix of 'EVP_CipherFinal_ex'. + * Fix build with cppunit. + * Export PKCS#11 symbols from the library. + * Zero pad key to fit the block in CKM_AES_KEY_WRAP. + * Detecting CppUnit when using Macports. + +- Update to version 2.2.0 + * Delete a token using softhsm2-util. + * Change access mode bits for /var/lib/softhsm/tokens/ +to 1777. All users can now create tokens, but only access their own. + * Reinitializing a token will now keep the token, but all +token objects are deleted, the user PIN is removed and the token +label is updated. + * Support for OpenSSL 1.1.0. + * Calling C_GetSlotList with NULL_PTR will make sure that +there is always a slot with an uninitialized token available. + * The token serial number will be used when setting the slot +number. The serial number is set after the token has been initialized. + * Update the command utils to use the token label or serial +to find the token and its slot number. + * Possibility to test other PKCS#11 implementations with the CppUnit test. + * Mark public key as non private by default. + * Install p11-kit module, to disable use --disable-p11-kit. + * Add windows continuous integration build. + * Missing new source file and test configuration in the +Windows build project. + * ECDSA P-521 support for OpenSSL and better test coverage. + * Fix segmentation faults in loadLibrary function. + * Crash on module unload with OpenSSL. + * C++11 not detected. + * API changes in Botan 1.11.27. + * Fix include guard to check WITH_FIPS. + * p11test fails on 32-bit systems. + * Build warning about "converting a string constant". + * Fix C++11 check to look for unique_ptr. + +- Update to version 2.1.0 + * Improved guide and build scripts for Windows. + * The password prompt in softhsm2-util can now be +interrupted (ctrl-c). + * Add slots.removable config option. + * Prioritize the return values in C_GetAttributeValue. + * Handle the CKA_CHECK_VALUE correctly for certificates +and symmetric key objects. + * Not possible to create certificate objects containing +CKA_CERTIFICATE_CATEGORY, CKA_NAME_HASH_ALGORITHM, or +CKA_JAVA_MIDP_SECURITY_DOMAIN. + * Do not attempt decryption of empty byte strings. + * Minor changes after a PVS-Studio code analysis, and +C_EncryptUpdate crash if no ciphered data is produced. + * One-byte buffer overflow in call to EVP_DecryptUpdate. + * Problem while closing library that is initialized but +improperly finalized. + * Adjust return values for the template parsing. + * C_DeriveKey() error with leading zero bytes. + * CKA_NEVER_EXTRAC
commit softhsm for openSUSE:Factory
Hello community, here is the log from the commit of package softhsm for openSUSE:Factory checked in at 2017-05-08 19:04:05 Comparing /work/SRC/openSUSE:Factory/softhsm (Old) and /work/SRC/openSUSE:Factory/.softhsm.new (New) Package is "softhsm" Mon May 8 19:04:05 2017 rev:3 rq:493357 version:2.0.0b1 Changes: --- /work/SRC/openSUSE:Factory/softhsm/softhsm.changes 2015-10-14 16:44:41.0 +0200 +++ /work/SRC/openSUSE:Factory/.softhsm.new/softhsm.changes 2017-05-08 19:04:37.458495614 +0200 @@ -1,0 +2,6 @@ +Sun May 7 17:08:43 UTC 2017 - meiss...@suse.com + +- softhsm-newcppunit.patch: new cppunit uses pkg-config now, not + cppunit-config + +--- New: softhsm-newcppunit.patch Other differences: -- ++ softhsm.spec ++ --- /var/tmp/diff_new_pack.q7eXV2/_old 2017-05-08 19:04:39.050270748 +0200 +++ /var/tmp/diff_new_pack.q7eXV2/_new 2017-05-08 19:04:39.054270183 +0200 @@ -1,7 +1,7 @@ # # spec file for package softhsm # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -30,6 +30,7 @@ Patch1: softhsm-v2.0.0b1-aes-key-wrap.patch Patch2: softhsm-v2.0.0b1-ckm-rsa-pkcs-oaep-key-wrap.patch Patch3: softhsm-rsakeys.patch +Patch4: softhsm-newcppunit.patch BuildRequires: automake BuildRequires: cppunit-devel @@ -68,6 +69,7 @@ %patch1 -p1 %patch2 -p1 %patch3 -p1 +%patch4 -p1 # remove softhsm/ subdir auto-added to --libdir sed -i "s:full_libdir/softhsm:full_libdir:g" configure ++ softhsm-newcppunit.patch ++ Index: softhsm-2.0.0b1/src/lib/crypto/test/Makefile.am === --- softhsm-2.0.0b1.orig/src/lib/crypto/test/Makefile.am +++ softhsm-2.0.0b1/src/lib/crypto/test/Makefile.am @@ -8,7 +8,7 @@ AM_CPPFLAGS = -I$(srcdir)/.. \ -I$(srcdir)/../../object_store \ -I$(srcdir)/../../session_mgr \ -I$(srcdir)/../../slot_mgr \ - `cppunit-config --cflags` + `pkg-config --cflags cppunit` check_PROGRAMS = cryptotest @@ -31,7 +31,7 @@ cryptotest_SOURCES = cryptotest.cpp \ cryptotest_LDADD = ../../libsofthsm_convarch.la -cryptotest_LDFLAGS = @CRYPTO_LIBS@ -no-install `cppunit-config --libs` +cryptotest_LDFLAGS = @CRYPTO_LIBS@ -no-install `pkg-config --libs cppunit` TESTS =cryptotest Index: softhsm-2.0.0b1/src/lib/data_mgr/test/Makefile.am === --- softhsm-2.0.0b1.orig/src/lib/data_mgr/test/Makefile.am +++ softhsm-2.0.0b1/src/lib/data_mgr/test/Makefile.am @@ -8,7 +8,7 @@ AM_CPPFLAGS = -I$(srcdir)/.. \ -I$(srcdir)/../../object_store \ -I$(srcdir)/../../session_mgr \ -I$(srcdir)/../../slot_mgr \ - `cppunit-config --cflags` + `pkg-config --cflags cppunit` check_PROGRAMS = datamgrtest @@ -19,7 +19,7 @@ datamgrtest_SOURCES = datamgrtest.cpp \ datamgrtest_LDADD =../../libsofthsm_convarch.la -datamgrtest_LDFLAGS = @CRYPTO_LIBS@ -no-install `cppunit-config --libs` +datamgrtest_LDFLAGS = @CRYPTO_LIBS@ -no-install `pkg-config --libs cppunit` TESTS =datamgrtest Index: softhsm-2.0.0b1/src/lib/handle_mgr/test/Makefile.am === --- softhsm-2.0.0b1.orig/src/lib/handle_mgr/test/Makefile.am +++ softhsm-2.0.0b1/src/lib/handle_mgr/test/Makefile.am @@ -9,7 +9,7 @@ AM_CPPFLAGS = -I$(srcdir)/.. \ -I$(srcdir)/../../session_mgr \ -I$(srcdir)/../../slot_mgr \ -I$(srcdir)/../../data_mgr \ - `cppunit-config --cflags` + `pkg-config --cflags cppunit` check_PROGRAMS = handlemgrtest @@ -18,7 +18,7 @@ handlemgrtest_SOURCES = handlemgrtest.c handlemgrtest_LDADD = ../../libsofthsm_convarch.la -handlemgrtest_LDFLAGS =@CRYPTO_LIBS@ -no-install `cppunit-config --libs` +handlemgrtest_LDFLAGS =@CRYPTO_LIBS@ -no-instal
commit softhsm for openSUSE:Factory
Hello community, here is the log from the commit of package softhsm for openSUSE:Factory checked in at 2015-10-14 16:44:40 Comparing /work/SRC/openSUSE:Factory/softhsm (Old) and /work/SRC/openSUSE:Factory/.softhsm.new (New) Package is "softhsm" Changes: --- /work/SRC/openSUSE:Factory/softhsm/softhsm.changes 2015-05-15 07:43:16.0 +0200 +++ /work/SRC/openSUSE:Factory/.softhsm.new/softhsm.changes 2015-10-14 16:44:41.0 +0200 @@ -1,0 +2,7 @@ +Thu Oct 8 14:00:49 UTC 2015 - meiss...@suse.com + +- softhsm-rsakeys.patch: do not test odd bit RSA keys, this breaks + with the FIPS enabled openssl from leap/sle12, as thats rounds + up the keylength to the next even number. bsc#949492 + +--- New: softhsm-rsakeys.patch Other differences: -- ++ softhsm.spec ++ --- /var/tmp/diff_new_pack.zpYQbg/_old 2015-10-14 16:44:42.0 +0200 +++ /var/tmp/diff_new_pack.zpYQbg/_new 2015-10-14 16:44:42.0 +0200 @@ -29,6 +29,7 @@ Source2:softhsm2-pk11install.c Patch1: softhsm-v2.0.0b1-aes-key-wrap.patch Patch2: softhsm-v2.0.0b1-ckm-rsa-pkcs-oaep-key-wrap.patch +Patch3: softhsm-rsakeys.patch BuildRequires: automake BuildRequires: cppunit-devel @@ -66,6 +67,7 @@ %setup -q %patch1 -p1 %patch2 -p1 +%patch3 -p1 # remove softhsm/ subdir auto-added to --libdir sed -i "s:full_libdir/softhsm:full_libdir:g" configure ++ softhsm-rsakeys.patch ++ Index: softhsm-2.0.0b1/src/lib/crypto/test/RSATests.cpp === --- softhsm-2.0.0b1.orig/src/lib/crypto/test/RSATests.cpp +++ softhsm-2.0.0b1/src/lib/crypto/test/RSATests.cpp @@ -79,9 +79,10 @@ void RSATests::testKeyGeneration() // Key sizes to test std::vector keySizes; keySizes.push_back(1024); - keySizes.push_back(1025); + //keySizes.push_back(1025); keySizes.push_back(1280); keySizes.push_back(2048); + keySizes.push_back(3072); //keySizes.push_back(4096); for (std::vector::iterator e = exponents.begin(); e != exponents.end(); e++)