commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2020-10-08 13:10:30 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new.4249 (New) Package is "p11-kit" Thu Oct 8 13:10:30 2020 rev:36 rq:839597 version:0.23.20 Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2020-04-16 22:58:13.107445246 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new.4249/p11-kit.changes 2020-10-08 13:11:32.603137624 +0200 @@ -1,0 +2,5 @@ +Mon Oct 5 13:19:09 UTC 2020 - Ludwig Nussel + +- avoid bareword to fix build failure + +--- Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.UcYeFy/_old 2020-10-08 13:11:33.955138848 +0200 +++ /var/tmp/diff_new_pack.UcYeFy/_new 2020-10-08 13:11:33.955138848 +0200 @@ -74,7 +74,7 @@ Group: Productivity/Networking/Security Requires: p11-kit = %{version} Conflicts: mozilla-nss-certs -%if %{_lib} == lib64 +%if "%{_lib}" == "lib64" Provides: libnssckbi.so()(64bit) %else Provides: libnssckbi.so
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2020-04-16 22:58:08 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new.2738 (New) Package is "p11-kit" Thu Apr 16 22:58:08 2020 rev:35 rq:794045 version:0.23.20 Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2019-12-25 10:55:06.205634982 +0100 +++ /work/SRC/openSUSE:Factory/.p11-kit.new.2738/p11-kit.changes 2020-04-16 22:58:13.107445246 +0200 @@ -1,0 +2,52 @@ +Wed Apr 15 07:01:38 UTC 2020 - Martin Pluskal + +- Update to version 0.23.20: + * Revert "Fix RPC when length-s are 0" changes [PR#276] +- Changes for version 0.23.19: + * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255] + * Add simple bash completion for provided commands [PR#258] + * Unbreak list matching in enable-in and disable-in [PR#262] + * Fix RPC when length-s are 0 [PR#259] + * rpc: Add vsock transport support [PR#270] + * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265] + * Build fixes [PR#271, PR#272, PR#273, ...] +- Changes for version 0.23.18: + * rpc: Allow empty CK_DATE value [PR#253] + * build: Meson fixes [PR#245] + * build: Adjust feature parity between meson and autotools [PR#247] +- Changes for version 0.23.17: + * common: Fix uClibc-ng compilation [PR#237] + * trust: do not allow daylight to invalidate date validation [PR#236] + * build: Port to meson build system [PR#231, PR#234] + * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232] + * doc: Add 'server' command in help [PR#229] + * Build and test fixes [PR#230] +- Changes for version 0.23.16: + * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225] + * conf: Ignore user configuration if the program is running as root [PR#226] + * proxy: Refresh slot list on every C_GetSlotList call [PR#224] + * modules: Fix index used in call to p11_dict_remove() [PR#219] + * Fix Win32 p11_dl_error crash [PR#218] + * modules: check gl.modules before iterates on it when freeing [PR#217] + * trust: Ignore unreadable content in anchors [PR#215] + * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213] +- Changes for version 0.23.15: + * trust: Improve error handling if backed trust file is corrupted [PR#206] + * url: Prefer upper-case letters in hex characters when encoding [PR#193] + * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202] + * virtual: Prefer fixed closures to libffi closures [PR#196] + * Fix issues spotted by coverity and cppcheck [PR#194, PR#204] + * Build and test fixes [PR#164, PR#191, PR#199, PR#201] +- Changes for version 0.23.14: + * proxy: Avoid invalid memory access when unloading proxy module [PR#180] + * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181] + * build: Restore libpthread dependency [PR#183] + * Build fixes [PR#188] +- Changes for version 0.23.13: + * server: Enable socket activation through systemd [PR#173] + * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules [PR#174] + * proxy: Fail early if there is no slot mapping [PR#175] + * Remove hard dependency on libpthread [PR#177] + * Build fixes [PR#170, PR#176] + +--- Old: p11-kit-0.23.12.tar.gz p11-kit-0.23.12.tar.gz.sig New: p11-kit-0.23.20.tar.xz p11-kit-0.23.20.tar.xz.sig Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.hGUD1N/_old 2020-04-16 22:58:14.943446630 +0200 +++ /var/tmp/diff_new_pack.hGUD1N/_new 2020-04-16 22:58:14.947446632 +0200 @@ -1,7 +1,7 @@ # # spec file for package p11-kit # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -20,23 +20,21 @@ %define pkidir_static%{_datadir}/pki %define trustdir_cfg %{pkidir_cfg}/trust %define trustdir_static %{pkidir_static}/trust - Name: p11-kit -Version:0.23.12 +Version:0.23.20 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause Group: Development/Libraries/C and C++ -Url:http://p11-glue.freedesktop.org/p11-kit.html -Source0: https://github.com/p11-glue/p11-kit/releases/download/%{version}/%{name}-%{version}.tar.gz -Source1: https://github.com/p11-glue/p11-kit/releases/download/%{version}/%{name}-%{version}.tar.gz.sig +URL:https://p11-glue.freedesktop.org/p11-kit.html +Source0:
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2019-12-25 10:54:35 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new.6675 (New) Package is "p11-kit" Wed Dec 25 10:54:35 2019 rev:34 rq:758967 version:0.23.12 Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2019-05-16 22:01:32.650726183 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new.6675/p11-kit.changes 2019-12-25 10:55:06.205634982 +0100 @@ -1,0 +2,5 @@ +Mon Dec 23 11:00:15 UTC 2019 - Ludwig Nussel + +- Also build documentation (boo#1013125) + +--- Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.G2G3Xg/_old 2019-12-25 10:55:06.877635193 +0100 +++ /var/tmp/diff_new_pack.G2G3Xg/_new 2019-12-25 10:55:06.881635193 +0100 @@ -1,7 +1,7 @@ # # spec file for package p11-kit # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -99,7 +99,9 @@ %setup -q %build -%configure --with-trust-paths=%{trustdir_cfg}:%{trustdir_static} +%configure \ + --with-trust-paths=%{trustdir_cfg}:%{trustdir_static} \ + --enable-doc make %{?_smp_mflags} V=1 %install @@ -175,6 +177,9 @@ %defattr(-,root,root) %{_bindir}/p11-kit %{_bindir}/trust +%{_mandir}/man1/trust.1.gz +%{_mandir}/man5/pkcs11.conf.5.gz +%{_mandir}/man8/p11-kit.8.gz %files devel %defattr(-,root,root)
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2019-05-16 22:01:31 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new.5148 (New) Package is "p11-kit" Thu May 16 22:01:31 2019 rev:33 rq:703089 version:0.23.12 Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2018-07-02 23:27:48.777668015 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new.5148/p11-kit.changes 2019-05-16 22:01:32.650726183 +0200 @@ -1,0 +2,5 @@ +Fri May 10 09:28:21 UTC 2019 - Dominique Leuenberger + +- Move RPM macros to %_rpmmacrodir. + +--- Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.MgKIGK/_old 2019-05-16 22:01:33.402725711 +0200 +++ /var/tmp/diff_new_pack.MgKIGK/_new 2019-05-16 22:01:33.402725711 +0200 @@ -116,8 +116,8 @@ rm %{buildroot}%{_sysconfdir}/pkcs11/pkcs11.conf.example find %{buildroot} -type f -name "*.la" -delete -print # -install -d -m 755 %{buildroot}%{_sysconfdir}/rpm/ -cat <<'FIN' >%{buildroot}%{_sysconfdir}/rpm/macros.%{name} +install -d -m 755 %{buildroot}%{_rpmmacrodir} +cat <<'FIN' >%{buildroot}%{_rpmmacrodir}/macros.%{name} # Macros from p11-kit package %%pkidir_cfg %{pkidir_cfg} %%pkidir_static %{pkidir_static} @@ -178,7 +178,7 @@ %files devel %defattr(-,root,root) -%config %{_sysconfdir}/rpm/macros.%{name} +%{_rpmmacrodir}/macros.%{name} %{_includedir}/p11-kit-1/ %{_libdir}/libp11-kit.so %{_libdir}/pkgconfig/p11-kit-1.pc
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2018-07-02 23:27:47 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is "p11-kit" Mon Jul 2 23:27:47 2018 rev:32 rq:617754 version:0.23.12 Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2018-03-24 16:12:09.706458415 +0100 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2018-07-02 23:27:48.777668015 +0200 @@ -1,0 +2,29 @@ +Fri Jun 15 04:09:24 UTC 2018 - fezh...@suse.com + +- New version 0.23.12 + * Fix compile error when PKCS#11 GNU calling convention enabled +- Changelog from version 0.23.11 + * trust: Add extractor for edk2/cacerts.bin + * modules: Add option to control module visibility from proxy + * trust: Prevent trust module being loaded by proxy module + * library: Use dedicated locale object for printing error + * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly + * Improve const correctness for P11KitUri + * PKCS#11 URI scheme comparison is now case insensitive +- Drop p11-kit-biarch.patch: Obsolete since 0.23.10 + +--- +Tue Mar 27 08:33:43 UTC 2018 - lnus...@suse.de + +- New version 0.23.10 + * New p11-kit server command + * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY attribute + * New trust dump command + * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user configurations + * trust: Respect anyExtendedKeyUsage in CA certificates + * Support x-init-reserved argument of C_Initialize() in remote modules + * install private executables in libexecdir, obsoletes p11-kit-biarch.patch +- new server subpackage +- change keyring to new maintainer Daiki Ueno + +--- Old: p11-kit-0.23.2.tar.gz p11-kit-0.23.2.tar.gz.sig p11-kit-biarch.patch New: p11-kit-0.23.12.tar.gz p11-kit-0.23.12.tar.gz.sig Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.vnExdD/_old 2018-07-02 23:27:49.393667257 +0200 +++ /var/tmp/diff_new_pack.vnExdD/_new 2018-07-02 23:27:49.397667252 +0200 @@ -22,25 +22,20 @@ %define trustdir_static %{pkidir_static}/trust Name: p11-kit -Version:0.23.2 +Version:0.23.12 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause Group: Development/Libraries/C and C++ Url:http://p11-glue.freedesktop.org/p11-kit.html -Source0: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz -Source1: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz.sig +Source0: https://github.com/p11-glue/p11-kit/releases/download/%{version}/%{name}-%{version}.tar.gz +Source1: https://github.com/p11-glue/p11-kit/releases/download/%{version}/%{name}-%{version}.tar.gz.sig Source98: p11-kit.keyring Source99: baselibs.conf -Patch: p11-kit-biarch.patch BuildRequires: gtk-doc BuildRequires: pkg-config BuildRequires: pkgconfig(libffi) >= 3.0.0 BuildRequires: pkgconfig(libtasn1) >= 2.3 -# autotools are needed for p11-kit-biarch.patch -BuildRequires: autoconf -BuildRequires: automake -BuildRequires: libtool BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -91,13 +86,19 @@ Adaptor library to make NSS read the p11-kit trust store. It has to be installed intead of mozilla-nss-certs. +%package server +Summary:Server and client commands for p11-kit +Group: Development/Libraries/C and C++ +Requires: %{name}%{?_isa} = %{version}-%{release} + +%description server +Command line tools that enable to export PKCS#11 modules through a +Unix domain socket. Note that this feature is still experimental. + %prep %setup -q -%patch -p1 %build -# autoreconf needed for p11-kit-biarch.patch -autoreconf -f -i %configure --with-trust-paths=%{trustdir_cfg}:%{trustdir_static} make %{?_smp_mflags} V=1 @@ -189,4 +190,8 @@ %defattr(-,root,root) %{_libdir}/libnssckbi.so +%files server +%{_libdir}/pkcs11/p11-kit-client.so +%{_libexecdir}/p11-kit/p11-kit-server + %changelog ++ p11-kit-0.23.2.tar.gz -> p11-kit-0.23.12.tar.gz ++ 76511 lines of diff (skipped) ++ p11-kit.keyring ++ --- /var/tmp/diff_new_pack.vnExdD/_old 2018-07-02 23:27:49.769666794 +0200 +++ /var/tmp/diff_new_pack.vnExdD/_new 2018-07-02 23:27:49.769666794 +0200 @@ -1,113 +1,63 @@ -BEGIN PGP PUBLIC KEY BLOCK- -Version: GnuPG v2 -mQGiBDxPToARBADW0viIt9FJH4yaS1YSUm/Mfpx7R+eNfufr11xB8Tg1CkG4Uze2
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2018-03-24 16:12:07 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is "p11-kit" Sat Mar 24 16:12:07 2018 rev:31 rq:589234 version:0.23.2 Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2016-12-01 10:20:20.0 +0100 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2018-03-24 16:12:09.706458415 +0100 @@ -1,0 +2,5 @@ +Tue Mar 20 13:26:02 CET 2018 - ku...@suse.de + +- Use %license instead of %doc [bsc#1082318] + +--- Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.6DqapZ/_old 2018-03-24 16:12:10.402433326 +0100 +++ /var/tmp/diff_new_pack.6DqapZ/_new 2018-03-24 16:12:10.406433181 +0100 @@ -1,7 +1,7 @@ # # spec file for package p11-kit # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -160,10 +160,11 @@ %files -n libp11-kit0 %defattr(-,root,root) +%license COPYING # Package the example conf file as documentation. Like this we're sure that we will # not introduce conflicts with this version of the library and future ones. %doc p11-kit/pkcs11.conf.example -%doc AUTHORS ChangeLog COPYING NEWS README +%doc AUTHORS ChangeLog NEWS README %dir %{_sysconfdir}/pkcs11 %dir %{_sysconfdir}/pkcs11/modules/ %{_libdir}/libp11-kit.so.*
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2016-12-01 10:20:19 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is "p11-kit" Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2016-02-17 12:17:13.0 +0100 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2016-12-01 10:20:20.0 +0100 @@ -1,0 +2,9 @@ +Tue Nov 22 14:57:50 CET 2016 - sbra...@suse.com + +- 32-bit compatibility fixes: + * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39) + * Add p11-kit-nss-trust-32bit NSS module + * Fix potential bi-arch issue with private binaries +(fdo#98817, p11-kit-biarch.patch) + +--- New: p11-kit-biarch.patch Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.8D044T/_old 2016-12-01 10:20:21.0 +0100 +++ /var/tmp/diff_new_pack.8D044T/_new 2016-12-01 10:20:21.0 +0100 @@ -32,10 +32,15 @@ Source1: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz.sig Source98: p11-kit.keyring Source99: baselibs.conf +Patch: p11-kit-biarch.patch BuildRequires: gtk-doc BuildRequires: pkg-config BuildRequires: pkgconfig(libffi) >= 3.0.0 BuildRequires: pkgconfig(libtasn1) >= 2.3 +# autotools are needed for p11-kit-biarch.patch +BuildRequires: autoconf +BuildRequires: automake +BuildRequires: libtool BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -88,8 +93,11 @@ %prep %setup -q +%patch -p1 %build +# autoreconf needed for p11-kit-biarch.patch +autoreconf -f -i %configure --with-trust-paths=%{trustdir_cfg}:%{trustdir_static} make %{?_smp_mflags} V=1 @@ -120,8 +128,8 @@ ln -s %{_libdir}/pkcs11/p11-kit-trust.so %{buildroot}%{_libdir}/libnssckbi.so # # call update-ca-certificates when trust changes -rm %{buildroot}%{_libdir}/%{name}/trust-extract-compat -ln -s ../../sbin/update-ca-certificates %{buildroot}%{_libdir}/%{name}/p11-kit-extract-trust +rm %{buildroot}%{_libexecdir}/%{name}/trust-extract-compat +ln -s ../../sbin/update-ca-certificates %{buildroot}%{_libexecdir}/%{name}/p11-kit-extract-trust export NO_BRP_STALE_LINK_ERROR=yes # *grr* %check @@ -146,9 +154,9 @@ %dir %{trustdir_static}/blacklist %{_datadir}/%{name}/modules/p11-kit-trust.module %{_libdir}/pkcs11/p11-kit-trust.so -%dir %{_libdir}/%{name} -%{_libdir}/%{name}/p11-kit-remote -%{_libdir}/%{name}/p11-kit-extract-trust +%dir %{_libexecdir}/%{name} +%{_libexecdir}/%{name}/p11-kit-remote +%{_libexecdir}/%{name}/p11-kit-extract-trust %files -n libp11-kit0 %defattr(-,root,root) ++ baselibs.conf ++ --- /var/tmp/diff_new_pack.8D044T/_old 2016-12-01 10:20:21.0 +0100 +++ /var/tmp/diff_new_pack.8D044T/_new 2016-12-01 10:20:21.0 +0100 @@ -1,2 +1,9 @@ libp11-kit0 p11-kit ++/usr/lib(64)?/pkcs11/*.so +requires "p11-kit = " +p11-kit-nss-trust ++/usr/lib(64)?/*.so +requires "p11-kit = " +conflicts "mozilla-nss-certs-" +provides "libnssckbi.so" ++ p11-kit-biarch.patch ++ >From c1b85c3a59ab7b809e9531e1fb4bf38d9476fefc Mon Sep 17 00:00:00 2001 From: Stanislav BrabecDate: Tue, 22 Nov 2016 14:44:21 +0100 Subject: [PATCH] move privatedir from libdir to libexecdir According to the GNU Coding Standards[1], private executables should be installed to libexecdir, not libdir. Move privatedir to libexecdir. [1] https://www.gnu.org/prep/standards/ https://bugs.freedesktop.org/show_bug.cgi?id=98817 --- configure.ac | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac index 64f0b5a..5cb1f17 100644 --- a/configure.ac +++ b/configure.ac @@ -498,7 +498,7 @@ esac AC_DEFINE_UNQUOTED(SHLEXT, ["$SHLEXT"], [File extension for shared libraries]) AC_SUBST(SHLEXT) -privatedir='${libdir}/p11-kit' +privatedir='${libexecdir}/p11-kit' AC_SUBST(privatedir) AC_CONFIG_FILES([Makefile -- 2.10.2
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2016-02-17 10:29:28 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is "p11-kit" Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2015-03-23 12:14:15.0 +0100 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2016-02-17 12:17:13.0 +0100 @@ -1,0 +2,12 @@ +Mon Feb 8 21:25:45 UTC 2016 - mplus...@suse.com + +- Update to 0.23.2 + * Fix forking issues with libffi + * Fix various crashes in corner cases + * Updated translations + * Build fixes +- Make building more verbose +- Enable tests +- Small spec file cleanup with spec-cleaner + +--- Old: p11-kit-0.23.1.tar.gz p11-kit-0.23.1.tar.gz.sig New: p11-kit-0.23.2.tar.gz p11-kit-0.23.2.tar.gz.sig Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.Hk2VzG/_old 2016-02-17 12:17:14.0 +0100 +++ /var/tmp/diff_new_pack.Hk2VzG/_new 2016-02-17 12:17:14.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package p11-kit # -# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ %define trustdir_static %{pkidir_static}/trust Name: p11-kit -Version:0.23.1 +Version:0.23.2 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause @@ -87,11 +87,11 @@ to be installed intead of mozilla-nss-certs. %prep -%autosetup -p1 +%setup -q %build %configure --with-trust-paths=%{trustdir_cfg}:%{trustdir_static} -make %{?_smp_mflags} +make %{?_smp_mflags} V=1 %install %make_install @@ -105,11 +105,11 @@ # with future versions of the library on file level. As replacement, we package # the file as documentation file. rm %{buildroot}%{_sysconfdir}/pkcs11/pkcs11.conf.example -find %{buildroot}%{_libdir} -name '*.la' -type f -delete -print +find %{buildroot} -type f -name "*.la" -delete -print # -install -d -m 755 %{buildroot}/etc/rpm/ -cat <<'FIN' >%{buildroot}/etc/rpm/macros.%{name} -# Macros from %{name} package +install -d -m 755 %{buildroot}%{_sysconfdir}/rpm/ +cat <<'FIN' >%{buildroot}%{_sysconfdir}/rpm/macros.%{name} +# Macros from p11-kit package %%pkidir_cfg %{pkidir_cfg} %%pkidir_static %{pkidir_static} %%trustdir_cfg %{trustdir_cfg} @@ -124,6 +124,9 @@ ln -s ../../sbin/update-ca-certificates %{buildroot}%{_libdir}/%{name}/p11-kit-extract-trust export NO_BRP_STALE_LINK_ERROR=yes # *grr* +%check +make %{?_smp_mflags} check + %post -n libp11-kit0 -p /sbin/ldconfig %postun -n libp11-kit0 -p /sbin/ldconfig @@ -165,7 +168,7 @@ %files devel %defattr(-,root,root) -%config /etc/rpm/macros.%{name} +%config %{_sysconfdir}/rpm/macros.%{name} %{_includedir}/p11-kit-1/ %{_libdir}/libp11-kit.so %{_libdir}/pkgconfig/p11-kit-1.pc ++ p11-kit-0.23.1.tar.gz -> p11-kit-0.23.2.tar.gz ++ 10514 lines of diff (skipped)
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2015-03-23 12:14:14 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2014-10-15 16:26:34.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2015-03-23 12:14:15.0 +0100 @@ -1,0 +2,13 @@ +Sun Mar 8 18:56:55 UTC 2015 - p.drou...@gmail.com + +- Update to version 0.23.1 (stable) + * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582] + * Add pem-directory-hash extract format + * Build fixes +- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff; + fixed on upstream release +- Remove autoconf, automake and libtool require; unneeded dependencies +- Add gtk-doc require; needed to build html documentation +- Remove redundant %clean section + +--- Old: 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff p11-kit-0.20.7.tar.gz p11-kit-0.20.7.tar.gz.sig New: p11-kit-0.23.1.tar.gz p11-kit-0.23.1.tar.gz.sig Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.IaGnC3/_old 2015-03-23 12:14:16.0 +0100 +++ /var/tmp/diff_new_pack.IaGnC3/_new 2015-03-23 12:14:16.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package p11-kit # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ %define trustdir_static %{pkidir_static}/trust Name: p11-kit -Version:0.20.7 +Version:0.23.1 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause @@ -32,12 +32,7 @@ Source1: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz.sig Source98: p11-kit.keyring Source99: baselibs.conf -# patch proposed upstream. If it gets rejected, need to implement -# this in ca-certificates. -Patch0: 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff -BuildRequires: autoconf -BuildRequires: automake -BuildRequires: libtool +BuildRequires: gtk-doc BuildRequires: pkg-config BuildRequires: pkgconfig(libffi) = 3.0.0 BuildRequires: pkgconfig(libtasn1) = 2.3 @@ -95,10 +90,7 @@ %autosetup -p1 %build -# just because of patch0 -autoreconf -f -i -%configure %--with-trust-paths=%{trustdir_cfg}:%{trustdir_static} -make %{?_smp_mflags} -C trust asn +%configure --with-trust-paths=%{trustdir_cfg}:%{trustdir_static} make %{?_smp_mflags} %install @@ -132,9 +124,6 @@ ln -s ../../sbin/update-ca-certificates %{buildroot}%{_libdir}/%{name}/p11-kit-extract-trust export NO_BRP_STALE_LINK_ERROR=yes # *grr* -%clean -rm -rf %{buildroot} - %post -n libp11-kit0 -p /sbin/ldconfig %postun -n libp11-kit0 -p /sbin/ldconfig @@ -155,6 +144,7 @@ %{_datadir}/%{name}/modules/p11-kit-trust.module %{_libdir}/pkcs11/p11-kit-trust.so %dir %{_libdir}/%{name} +%{_libdir}/%{name}/p11-kit-remote %{_libdir}/%{name}/p11-kit-extract-trust %files -n libp11-kit0 ++ p11-kit-0.20.7.tar.gz - p11-kit-0.23.1.tar.gz ++ 83741 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2014-10-15 16:26:32 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2014-09-03 20:29:40.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2014-10-15 16:26:34.0 +0200 @@ -1,0 +2,27 @@ +Mon Oct 13 16:09:09 UTC 2014 - lnus...@suse.de + +- remove patches: + * trust-Print-label-of-certificate-when-complaining-.patch + * trust-Dont-use-invalid-public-keys-for-looking-up-.patch + +- new version 0.20.7 (stable) + * New public pkcs11x.h header containing extensions [fdo#83495] + * Export necessary defines to lookup attached extensions [fdo#83495] + * Build fixes + +- new version 0.20.6 (stable) + * Make the p11-kit-proxy.so module respect critical = no [fdo#83651] + * Build fix for FreeBSD [fdo#75674] + +- new version 0.20.5 (stable) + * Don't use invalid keys for looking up stapled extensions [fdo#82328] + * Better error messages when invalid certificate extensions + * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files + * Fix some leaks, and memory issues + * Silence some clang scanner warnings + +- new version 0.20.4 (stable) + * Don't complain about C_Finalize after a fork + * Fix typo + +--- Old: p11-kit-0.20.3.tar.gz p11-kit-0.20.3.tar.gz.sig trust-Dont-use-invalid-public-keys-for-looking-up-.patch trust-Print-label-of-certificate-when-complaining-.patch New: p11-kit-0.20.7.tar.gz p11-kit-0.20.7.tar.gz.sig Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.KfLHfB/_old 2014-10-15 16:26:35.0 +0200 +++ /var/tmp/diff_new_pack.KfLHfB/_new 2014-10-15 16:26:35.0 +0200 @@ -22,7 +22,7 @@ %define trustdir_static %{pkidir_static}/trust Name: p11-kit -Version:0.20.3 +Version:0.20.7 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause @@ -35,12 +35,6 @@ # patch proposed upstream. If it gets rejected, need to implement # this in ca-certificates. Patch0: 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff -# PATCH-FIX-OPENSUSE -# trust-Print-label-of-certificate-when-complaining-.patch bnc#890908 lnus...@suse.de -Patch1: trust-Print-label-of-certificate-when-complaining-.patch -# PATCH-FIX-OPENSUSE -# trust-Dont-use-invalid-public-keys-for-looking-up-.patch bnc#890908 lnus...@suse.de -Patch2: trust-Dont-use-invalid-public-keys-for-looking-up-.patch BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool @@ -98,10 +92,7 @@ to be installed intead of mozilla-nss-certs. %prep -%setup -q -%patch0 -p1 -%patch1 -p1 -%patch2 -p1 +%autosetup -p1 %build # just because of patch0 ++ p11-kit-0.20.3.tar.gz - p11-kit-0.20.7.tar.gz ++ 37276 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2014-09-03 18:21:22 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2014-05-27 07:09:37.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2014-09-03 20:29:40.0 +0200 @@ -1,0 +2,17 @@ +Fri Aug 29 06:47:50 UTC 2014 - lnus...@suse.de + +- new version 0.20.3 + * Fix problems reinitializing managed modules after fork + * Fix bad bookeeping when fail initializing one of the modules + * Fix case where module would be unloaded while in use [#74919] + * Remove assertions when module used before initialized [#74919] + * Fix handling of mmap failure and mapping empty files [#74773] + * Stable p11_kit_be_quiet() and p11_kit_be_loud() functions + * Require automake 1.12 or later + * Build fixes for Windows [#76594 #74149] +- apply patches to avoid errors from certificates with invalid public key + (fdo#82328, bnc#890908, + trust-Dont-use-invalid-public-keys-for-looking-up-.patch, + trust-Print-label-of-certificate-when-complaining-.patch) + +--- Old: p11-kit-0.20.2.tar.gz p11-kit-0.20.2.tar.gz.sig New: p11-kit-0.20.3.tar.gz p11-kit-0.20.3.tar.gz.sig p11-kit.keyring trust-Dont-use-invalid-public-keys-for-looking-up-.patch trust-Print-label-of-certificate-when-complaining-.patch Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.tUs1UI/_old 2014-09-03 20:29:42.0 +0200 +++ /var/tmp/diff_new_pack.tUs1UI/_new 2014-09-03 20:29:42.0 +0200 @@ -22,7 +22,7 @@ %define trustdir_static %{pkidir_static}/trust Name: p11-kit -Version:0.20.2 +Version:0.20.3 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause @@ -30,10 +30,17 @@ Url:http://p11-glue.freedesktop.org/p11-kit.html Source0: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz Source1: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz.sig +Source98: p11-kit.keyring Source99: baselibs.conf # patch proposed upstream. If it gets rejected, need to implement # this in ca-certificates. Patch0: 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff +# PATCH-FIX-OPENSUSE +# trust-Print-label-of-certificate-when-complaining-.patch bnc#890908 lnus...@suse.de +Patch1: trust-Print-label-of-certificate-when-complaining-.patch +# PATCH-FIX-OPENSUSE +# trust-Dont-use-invalid-public-keys-for-looking-up-.patch bnc#890908 lnus...@suse.de +Patch2: trust-Dont-use-invalid-public-keys-for-looking-up-.patch BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool @@ -93,6 +100,8 @@ %prep %setup -q %patch0 -p1 +%patch1 -p1 +%patch2 -p1 %build # just because of patch0 ++ p11-kit-0.20.2.tar.gz - p11-kit-0.20.3.tar.gz ++ 66676 lines of diff (skipped) ++ trust-Dont-use-invalid-public-keys-for-looking-up-.patch ++ From 244e885d3e9aae7f7b286f1115a220eb16fa0530 Mon Sep 17 00:00:00 2001 From: Stef Walter st...@redhat.com Date: Fri, 8 Aug 2014 08:47:54 +0200 Subject: [PATCH] trust: Don't use invalid public keys for looking up stapled extensions https://bugs.freedesktop.org/show_bug.cgi?id=82328 --- trust/builder.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/trust/builder.c b/trust/builder.c index f7ea86a..fd7a662 100644 --- a/trust/builder.c +++ b/trust/builder.c @@ -125,7 +125,7 @@ lookup_extension (p11_builder *builder, { CKA_INVALID }, }; - if (public_key == NULL) + if (public_key == NULL || public_key-type == CKA_INVALID) public_key = p11_attrs_find_valid (cert, CKA_X_PUBLIC_KEY_INFO); /* Look for a stapled certificate extension */ -- 1.9.3++ trust-Print-label-of-certificate-when-complaining-.patch ++ From 70228770eb96e7121e12632a85e603727ed42431 Mon Sep 17 00:00:00 2001 From: Stef Walter st...@redhat.com Date: Fri, 8 Aug 2014 08:47:23 +0200 Subject: [PATCH] trust: Print label of certificate when complaining about basic constraints https://bugs.freedesktop.org/show_bug.cgi?id=82328 --- trust/builder.c | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/trust/builder.c b/trust/builder.c index 18c09ad..f7ea86a 100644 --- a/trust/builder.c +++ b/trust/builder.c @@ -551,6 +551,7 @@ calc_certificate_category (p11_builder *builder, CK_ATTRIBUTE
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2014-05-27 07:09:35 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2014-02-19 11:39:14.0 +0100 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2014-05-27 07:09:37.0 +0200 @@ -1,0 +2,9 @@ +Mon May 19 07:04:38 UTC 2014 - lnus...@suse.de + +- New version 0.20.2 + * Fix bug where blacklist didn't affect extracted ca-anchors if the anchor +and blacklist were not in the same trust path (regression) [fdo#73558] + * Check for race in BasicConstraints stapled extension [fdo#69314] + * Build fixes and cleanup + +--- Old: p11-kit-0.20.1.tar.gz p11-kit-0.20.1.tar.gz.sig New: p11-kit-0.20.2.tar.gz p11-kit-0.20.2.tar.gz.sig Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.mZUutp/_old 2014-05-27 07:09:39.0 +0200 +++ /var/tmp/diff_new_pack.mZUutp/_new 2014-05-27 07:09:39.0 +0200 @@ -22,7 +22,7 @@ %define trustdir_static %{pkidir_static}/trust Name: p11-kit -Version:0.20.1 +Version:0.20.2 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause ++ p11-kit-0.20.1.tar.gz - p11-kit-0.20.2.tar.gz ++ 41246 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2014-02-19 11:39:13 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2013-12-22 19:37:30.0 +0100 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2014-02-19 11:39:14.0 +0100 @@ -1,0 +2,5 @@ +Tue Feb 11 12:53:06 UTC 2014 - meiss...@suse.com + +- added .sig file. trying to locate source of the keyring. + +--- New: p11-kit-0.20.1.tar.gz.sig Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.3olVVV/_old 2014-02-19 11:39:15.0 +0100 +++ /var/tmp/diff_new_pack.3olVVV/_new 2014-02-19 11:39:15.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package p11-kit # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -29,6 +29,7 @@ Group: Development/Libraries/C and C++ Url:http://p11-glue.freedesktop.org/p11-kit.html Source0: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz +Source1: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz.sig Source99: baselibs.conf # patch proposed upstream. If it gets rejected, need to implement # this in ca-certificates. -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2013-12-22 19:37:29 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2013-09-11 13:02:18.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2013-12-22 19:37:30.0 +0100 @@ -1,0 +2,6 @@ +Fri Dec 6 09:31:32 UTC 2013 - lnus...@suse.de + +- trust: allow to also add openssl style hashes to pem-directory + 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff + +--- New: 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.y6LVb3/_old 2013-12-22 19:37:30.0 +0100 +++ /var/tmp/diff_new_pack.y6LVb3/_new 2013-12-22 19:37:30.0 +0100 @@ -30,6 +30,12 @@ Url:http://p11-glue.freedesktop.org/p11-kit.html Source0: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz Source99: baselibs.conf +# patch proposed upstream. If it gets rejected, need to implement +# this in ca-certificates. +Patch0: 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff +BuildRequires: autoconf +BuildRequires: automake +BuildRequires: libtool BuildRequires: pkg-config BuildRequires: pkgconfig(libffi) = 3.0.0 BuildRequires: pkgconfig(libtasn1) = 2.3 @@ -85,8 +91,11 @@ %prep %setup -q +%patch0 -p1 %build +# just because of patch0 +autoreconf -f -i %configure %--with-trust-paths=%{trustdir_cfg}:%{trustdir_static} make %{?_smp_mflags} -C trust asn make %{?_smp_mflags} ++ 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff ++ From a7f02ca0a88019da353381a25d2e7c42150abb39 Mon Sep 17 00:00:00 2001 From: Ludwig Nussel ludwig.nus...@suse.de Date: Fri, 6 Dec 2013 10:00:32 +0100 Subject: [PATCH] trust: allow to also add openssl style hashes to pem-directory For backward compatibility with older openssl and other libs like gnutls /etc/ssl/certs needs to be created as pem-directory rather than openssl-directory on openSUSE. Therefore also allow to install openssl style hashes there to avoid having to call c_rehash with a script. --- trust/extract-openssl.c | 76 ++--- trust/extract-pem.c | 26 + trust/extract.c | 1 + trust/extract.h | 5 trust/tests/Makefile.am | 1 + 5 files changed, 69 insertions(+), 40 deletions(-) diff --git a/trust/extract-openssl.c b/trust/extract-openssl.c index 912c90d..16e12fd 100644 --- a/trust/extract-openssl.c +++ b/trust/extract-openssl.c @@ -587,6 +587,46 @@ symlink_for_subject_old_hash (p11_enumerate *ex) #endif /* OS_UNIX */ + +/* + * The OpenSSL style c_rehash stuff + * + * Different versions of openssl build these hashes differently + * so output both of them. Shouldn't cause confusion, because + * multiple certificates can hash to the same link anyway, + * and this is the reason for the trailing number after the dot. + * + * The trailing number is incremented p11_save_symlink_in() if it + * conflicts with something we've already written out. + * + * On Windows no symlinks. + */ +bool +p11_openssl_symlink (p11_enumerate *ex, + p11_save_dir *dir, + const char *filename) +{ + bool ret = true; +#ifdef OS_UNIX + char *linkname; + + linkname = symlink_for_subject_hash (ex); + if (linkname) { + ret = p11_save_symlink_in (dir, linkname, .0, filename); + free (linkname); + } + + if (ret) { + linkname = symlink_for_subject_old_hash (ex); + if (linkname) { + ret = p11_save_symlink_in (dir, linkname, .0, filename); + free (linkname); + } + } +#endif /* OS_UNIX */ + return ret; +} + bool p11_extract_openssl_directory (p11_enumerate *ex, const char *destination) @@ -601,10 +641,6 @@ p11_extract_openssl_directory (p11_enumerate *ex, char *name; CK_RV rv; -#ifdef OS_UNIX - char *linkname; -#endif - dir = p11_save_open_directory (destination, ex-flags); if (dir == NULL) return false; @@ -638,37 +674,7 @@ p11_extract_openssl_directory (p11_enumerate *ex, filename = p11_path_base (path); } - /* -* The OpenSSL style c_rehash stuff -
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2013-09-11 13:02:14 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2013-08-23 14:00:15.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2013-09-11 13:02:18.0 +0200 @@ -1,0 +2,20 @@ +Tue Sep 10 09:02:33 UTC 2013 - lnus...@suse.de + +- upgrade to 0.20.1 which is 0.19 declared stable + * Extract compat trust data after we've changes + * Skip compat extraction if running as non-root + * Better failure messages when removing anchors + +--- +Fri Aug 30 12:33:32 UTC 2013 - lnus...@suse.de + +- new version 0.19.4 + * 'trust anchor' now adds/removes certificate anchors + * 'trust list' lists trust policy stuff + * 'p11-kit extract' is now 'trust extract' + * 'p11-kit extract-trust' is now 'trust extract-compat' + * Workarounds for working on broken zfsonlinux.org [#68525] + * Add --with-module-config parameter to the configure script [#68122] + * Add support for removing stored PKCS#11 objects in trust module + +--- Old: p11-kit-0.19.3.tar.gz New: p11-kit-0.20.1.tar.gz Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.PMl265/_old 2013-09-11 13:02:19.0 +0200 +++ /var/tmp/diff_new_pack.PMl265/_new 2013-09-11 13:02:19.0 +0200 @@ -22,7 +22,7 @@ %define trustdir_static %{pkidir_static}/trust Name: p11-kit -Version:0.19.3 +Version:0.20.1 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause @@ -88,6 +88,7 @@ %build %configure %--with-trust-paths=%{trustdir_cfg}:%{trustdir_static} +make %{?_smp_mflags} -C trust asn make %{?_smp_mflags} %install @@ -117,7 +118,7 @@ ln -s %{_libdir}/pkcs11/p11-kit-trust.so %{buildroot}%{_libdir}/libnssckbi.so # # call update-ca-certificates when trust changes -rm %{buildroot}%{_libdir}/%{name}/p11-kit-extract-trust +rm %{buildroot}%{_libdir}/%{name}/trust-extract-compat ln -s ../../sbin/update-ca-certificates %{buildroot}%{_libdir}/%{name}/p11-kit-extract-trust export NO_BRP_STALE_LINK_ERROR=yes # *grr* @@ -173,6 +174,7 @@ %doc %{_datadir}/gtk-doc/html/p11-kit/ %files nss-trust +%defattr(-,root,root) %{_libdir}/libnssckbi.so %changelog ++ p11-kit-0.19.3.tar.gz - p11-kit-0.20.1.tar.gz ++ 13679 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2013-08-23 14:00:13 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2013-07-05 15:08:49.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2013-08-23 14:00:15.0 +0200 @@ -1,0 +2,23 @@ +Thu Jul 25 09:06:51 UTC 2013 - lnus...@suse.de + +- new version 0.19.3 + * Fix up problems with automake testing + * Fix a bunch of memory leaks in newly refactored code + * Don't use _GNU_SOURCE and the unportability it brings + * Add basic 'trust anchor' command to store a new anchor + * Support for writing out trust token objects + * Port to use CKA_PUBLIC_KEY_INFO and updated trust store spec + * Add option to use freebl for hashing + * Implement reloading of token data + * Fix warnings and possible minor bugs higlighted by code scanners + * Don't load configs in home directories when running setuid or setgid + * Support treating ~/.config as $XDG_CONFIG_HOME + * Use $XDG_DATA_HOME/pkcs11 as default user config directory + * Use $TMPDIR instead of $TEMP while testing + * Open files and fds with O_CLOEXEC + * Abort initialization if a critical module fails to load + * Don't use thread-unsafe functions: strerror, getpwuid + * Fix p11_kit_space_strlen() result when empty string + * Refactoring of where various components live + +--- Old: p11-kit-0.19.1.tar.gz New: p11-kit-0.19.3.tar.gz Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.YwIwDg/_old 2013-08-23 14:00:16.0 +0200 +++ /var/tmp/diff_new_pack.YwIwDg/_new 2013-08-23 14:00:16.0 +0200 @@ -22,7 +22,7 @@ %define trustdir_static %{pkidir_static}/trust Name: p11-kit -Version:0.19.1 +Version:0.19.3 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause @@ -87,7 +87,7 @@ %setup -q %build -%configure %--with-trust-paths=%{trustdir_static}:%{trustdir_cfg} +%configure %--with-trust-paths=%{trustdir_cfg}:%{trustdir_static} make %{?_smp_mflags} %install @@ -160,6 +160,7 @@ %files tools %defattr(-,root,root) %{_bindir}/p11-kit +%{_bindir}/trust %files devel %defattr(-,root,root) ++ p11-kit-0.19.1.tar.gz - p11-kit-0.19.3.tar.gz ++ 74625 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2013-07-05 15:08:48 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2013-07-04 10:13:08.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2013-07-05 15:08:49.0 +0200 @@ -1,0 +2,6 @@ +Fri Jul 5 08:09:46 UTC 2013 - lnus...@suse.de + +- fix 32bit provides of libnssckbi.so +- repace p11-kit-extract-trust with update-ca-certificates + +--- Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.HrysI7/_old 2013-07-05 15:08:49.0 +0200 +++ /var/tmp/diff_new_pack.HrysI7/_new 2013-07-05 15:08:49.0 +0200 @@ -76,7 +76,7 @@ %if %{_lib} == lib64 Provides: libnssckbi.so()(64bit) %else -Provides: libnssckbi.so() +Provides: libnssckbi.so %endif %description nss-trust @@ -113,7 +113,13 @@ %%trustdir_static%{trustdir_static} FIN # +# nss compat lib ln -s %{_libdir}/pkcs11/p11-kit-trust.so %{buildroot}%{_libdir}/libnssckbi.so +# +# call update-ca-certificates when trust changes +rm %{buildroot}%{_libdir}/%{name}/p11-kit-extract-trust +ln -s ../../sbin/update-ca-certificates %{buildroot}%{_libdir}/%{name}/p11-kit-extract-trust +export NO_BRP_STALE_LINK_ERROR=yes # *grr* %clean rm -rf %{buildroot} -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2013-07-04 10:13:07 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2013-06-25 14:43:20.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2013-07-04 10:13:08.0 +0200 @@ -1,0 +2,11 @@ +Fri Jun 28 09:30:03 UTC 2013 - lnus...@suse.de + +- provide libnssckbi.so to replace mozilla-nss-certs + +--- +Mon Jun 24 13:08:21 UTC 2013 - lnus...@suse.de + +- add p11-kit-nss-trust subpackage that serves as drop-in + replacement for mozilla-nss-certs + +--- Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.Yk6QFs/_old 2013-07-04 10:13:09.0 +0200 +++ /var/tmp/diff_new_pack.Yk6QFs/_new 2013-07-04 10:13:09.0 +0200 @@ -68,6 +68,21 @@ as a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable. +%package nss-trust +Summary:Adaptor to make NSS read the p11-kit trust store +Group: Productivity/Networking/Security +Requires: p11-kit = %{version} +Conflicts: mozilla-nss-certs +%if %{_lib} == lib64 +Provides: libnssckbi.so()(64bit) +%else +Provides: libnssckbi.so() +%endif + +%description nss-trust +Adaptor library to make NSS read the p11-kit trust store. It has +to be installed intead of mozilla-nss-certs. + %prep %setup -q @@ -97,6 +112,8 @@ %%trustdir_cfg %{trustdir_cfg} %%trustdir_static%{trustdir_static} FIN +# +ln -s %{_libdir}/pkcs11/p11-kit-trust.so %{buildroot}%{_libdir}/libnssckbi.so %clean rm -rf %{buildroot} @@ -148,4 +165,7 @@ %doc %dir %{_datadir}/gtk-doc/html %doc %{_datadir}/gtk-doc/html/p11-kit/ +%files nss-trust +%{_libdir}/libnssckbi.so + %changelog -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2013-06-25 09:36:47 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2013-05-16 11:19:15.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2013-06-25 14:43:20.0 +0200 @@ -1,0 +2,21 @@ +Wed Jun 19 09:24:45 UTC 2013 - lnus...@suse.de + +- use /etc/pki/trust and /usr/share/pki/trust as system CA + certificate store + +--- +Mon May 27 14:40:57 UTC 2013 - dims...@opensuse.org + +- Update to version 0.19.1: + + Refactor API to be able to handle managed modules. + + Deprecate much of old p11-kit API. + + Implement concept of managed modules. + + Make C_CloseAllSessions function work for multiple callers. + + New dependency on libffi. + + Fix possible threading problems reported by hellgrind. + + Add log-calls option. + + Mark p11_kit_message() as a stable function. + + Use our own unit testing framework. +- Add pkgconfig(libffi) BuildRequires: new dependency. + +--- Old: p11-kit-0.18.2.tar.gz New: p11-kit-0.19.1.tar.gz Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.7GNfms/_old 2013-06-25 14:43:20.0 +0200 +++ /var/tmp/diff_new_pack.7GNfms/_new 2013-06-25 14:43:20.0 +0200 @@ -16,8 +16,13 @@ # +%define pkidir_cfg %{_sysconfdir}/pki +%define pkidir_static %{_datadir}/pki +%define trustdir_cfg %{pkidir_cfg}/trust +%define trustdir_static %{pkidir_static}/trust + Name: p11-kit -Version:0.18.2 +Version:0.19.1 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause @@ -25,8 +30,8 @@ Url:http://p11-glue.freedesktop.org/p11-kit.html Source0: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz Source99: baselibs.conf -BuildRequires: ca-certificates BuildRequires: pkg-config +BuildRequires: pkgconfig(libffi) = 3.0.0 BuildRequires: pkgconfig(libtasn1) = 2.3 BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -67,11 +72,14 @@ %setup -q %build -%configure --with-system-anchors=/etc/ca-certificates +%configure %--with-trust-paths=%{trustdir_static}:%{trustdir_cfg} make %{?_smp_mflags} %install %make_install +# +install -d m 755 %{buildroot}%{trustdir_cfg}/{anchors,blacklist} +install -d m 755 %{buildroot}%{trustdir_static}/{anchors,blacklist} # Create pkcs11 config directory test ! -e %{buildroot}%{_sysconfdir}/pkcs11/modules install -d %{buildroot}%{_sysconfdir}/pkcs11/modules @@ -80,6 +88,15 @@ # the file as documentation file. rm %{buildroot}%{_sysconfdir}/pkcs11/pkcs11.conf.example find %{buildroot}%{_libdir} -name '*.la' -type f -delete -print +# +install -d -m 755 %{buildroot}/etc/rpm/ +cat 'FIN' %{buildroot}/etc/rpm/macros.%{name} +# Macros from %{name} package +%%pkidir_cfg %{pkidir_cfg} +%%pkidir_static %{pkidir_static} +%%trustdir_cfg %{trustdir_cfg} +%%trustdir_static%{trustdir_static} +FIN %clean rm -rf %{buildroot} @@ -93,6 +110,14 @@ %dir %{_libdir}/pkcs11 %dir %{_datadir}/%{name} %dir %{_datadir}/%{name}/modules +%dir %{pkidir_cfg} +%dir %{trustdir_cfg} +%dir %{trustdir_cfg}/anchors +%dir %{trustdir_cfg}/blacklist +%dir %{pkidir_static} +%dir %{trustdir_static} +%dir %{trustdir_static}/anchors +%dir %{trustdir_static}/blacklist %{_datadir}/%{name}/modules/p11-kit-trust.module %{_libdir}/pkcs11/p11-kit-trust.so %dir %{_libdir}/%{name} @@ -115,6 +140,7 @@ %files devel %defattr(-,root,root) +%config /etc/rpm/macros.%{name} %{_includedir}/p11-kit-1/ %{_libdir}/libp11-kit.so %{_libdir}/pkgconfig/p11-kit-1.pc ++ p11-kit-0.18.2.tar.gz - p11-kit-0.19.1.tar.gz ++ 42103 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2013-05-16 11:19:13 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2013-04-26 15:53:08.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2013-05-16 11:19:15.0 +0200 @@ -1,0 +2,12 @@ +Tue May 14 18:27:52 UTC 2013 - dims...@opensuse.org + +- Update to version 0.18.2: + + Build fixes (fdo#64378) + +--- +Mon May 13 21:13:20 UTC 2013 - dims...@opensuse.org + +- Also provide p11-kit-32bit (in fact, the pkcs#11 modules) + (bnc#819246). + +--- Old: p11-kit-0.18.1.tar.gz New: p11-kit-0.18.2.tar.gz Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.G37wy3/_old 2013-05-16 11:19:16.0 +0200 +++ /var/tmp/diff_new_pack.G37wy3/_new 2013-05-16 11:19:16.0 +0200 @@ -17,7 +17,7 @@ Name: p11-kit -Version:0.18.1 +Version:0.18.2 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause @@ -27,7 +27,7 @@ Source99: baselibs.conf BuildRequires: ca-certificates BuildRequires: pkg-config -BuildRequires: pkgconfig(libtasn1) = 2.14 +BuildRequires: pkgconfig(libtasn1) = 2.3 BuildRoot: %{_tmppath}/%{name}-%{version}-build %description ++ baselibs.conf ++ --- /var/tmp/diff_new_pack.G37wy3/_old 2013-05-16 11:19:16.0 +0200 +++ /var/tmp/diff_new_pack.G37wy3/_new 2013-05-16 11:19:16.0 +0200 @@ -1 +1,2 @@ libp11-kit0 +p11-kit ++ p11-kit-0.18.1.tar.gz - p11-kit-0.18.2.tar.gz ++ 9578 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2013-04-26 15:53:05 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit, Maintainer is Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2013-04-14 10:36:31.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2013-04-26 15:53:08.0 +0200 @@ -1,0 +2,7 @@ +Mon Apr 15 18:46:10 UTC 2013 - dims...@opensuse.org + +- Update to version 0.18.1: + + Put the external tools in $libdir/p11-kit. + + Documentation build fixes. + +--- Old: p11-kit-0.18.0.tar.gz New: p11-kit-0.18.1.tar.gz Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.ydGjPe/_old 2013-04-26 15:53:09.0 +0200 +++ /var/tmp/diff_new_pack.ydGjPe/_new 2013-04-26 15:53:09.0 +0200 @@ -17,7 +17,7 @@ Name: p11-kit -Version:0.18.0 +Version:0.18.1 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause @@ -93,9 +93,10 @@ %dir %{_libdir}/pkcs11 %dir %{_datadir}/%{name} %dir %{_datadir}/%{name}/modules -%{_libdir}/pkcs11/p11-kit-trust.so %{_datadir}/%{name}/modules/p11-kit-trust.module -%{_datadir}/%{name}/p11-kit-extract-trust +%{_libdir}/pkcs11/p11-kit-trust.so +%dir %{_libdir}/%{name} +%{_libdir}/%{name}/p11-kit-extract-trust %files -n libp11-kit0 %defattr(-,root,root) ++ p11-kit-0.18.0.tar.gz - p11-kit-0.18.1.tar.gz ++ 3258 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2013-04-14 10:36:30 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit, Maintainer is Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2013-04-02 12:33:58.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2013-04-14 10:36:31.0 +0200 @@ -1,0 +2,11 @@ +Thu Apr 4 13:34:40 UTC 2013 - dims...@opensuse.org + +- Update to version 0.18.0: + + Fix use of trust module with gcr and empathy (fdo#62896). + + Further tweaks to trust module date parsing. + + Fix unaligned memory reads (fdo#62819). + + Win32 fixes (fdo#63062, fdo#63046). + + Debug and logging tweaks (fdo#62874). + + Other build fixes. + +--- @@ -6,2 +17,2 @@ -systems (bgo#62825). - + Test fixes (bgo#927394). +systems (fdo#62825). + + Test fixes (fdo#927394). @@ -14 +25 @@ -(bgo#62548). +(fdo#62548). @@ -21 +32 @@ - + Use descriptive labels for the trust module tokens (bgo#62534). + + Use descriptive labels for the trust module tokens (fdo#62534). @@ -24 +35 @@ -(bgo#61898). +(fdo#61898). @@ -26 +37 @@ - + Build fixes (bgo#62479). + + Build fixes (fdo#62479). @@ -36 +47 @@ -(bgo#62156). +(fdo#62156). @@ -38 +49 @@ -default (bgo#62329). +default (fdo#62329). @@ -40,2 +51,2 @@ -data (bgo#62329). - + Combine trust policy when extracting certificates (bgo#61497). +data (fdo#62329). + + Combine trust policy when extracting certificates (fdo#61497). @@ -43 +54 @@ -(bgo#62029). +(fdo#62029). @@ -45 +56 @@ -(bgo#61978). +(fdo#61978). @@ -47,2 +58,2 @@ -(bgo#61499). - + Use --with-trust-paths to configure trust module (bgo#62327). +(fdo#61499). + + Use --with-trust-paths to configure trust module (fdo#62327). Old: p11-kit-0.17.5.tar.gz New: p11-kit-0.18.0.tar.gz Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.PD8PSj/_old 2013-04-14 10:36:32.0 +0200 +++ /var/tmp/diff_new_pack.PD8PSj/_new 2013-04-14 10:36:32.0 +0200 @@ -17,7 +17,7 @@ Name: p11-kit -Version:0.17.5 +Version:0.18.0 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause ++ p11-kit-0.17.5.tar.gz - p11-kit-0.18.0.tar.gz ++ 7142 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2013-04-02 12:33:56 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit, Maintainer is Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2012-10-03 10:37:19.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2013-04-02 12:33:58.0 +0200 @@ -1,0 +2,109 @@ +Thu Mar 28 21:42:55 UTC 2013 - zai...@opensuse.org + +- Update to version 0.17.5: + + Don't try to guess at overflowing time values on 32-bit +systems (bgo#62825). + + Test fixes (bgo#927394). + +--- +Thu Mar 21 08:10:37 UTC 2013 - dims...@opensuse.org + +- Update to version 0.17.4: + + Check for duplicate certificates in a token, warn and discard +(bgo#62548). + + Implement a proper index so we have decent load performance. + +--- +Wed Mar 20 19:09:13 UTC 2013 - dims...@opensuse.org + +- Update to version 0.17.3: + + Use descriptive labels for the trust module tokens (bgo#62534). + + Remove the temporary built in distrust objects. + + Make extracted output directories and files read-only +(bgo#61898). + + Don't export unneccessary ABI. + + Build fixes (bgo#62479). + +--- +Tue Mar 19 20:39:24 UTC 2013 - dims...@opensuse.org + +- Update to version 0.17.2: + + Fix build on 32-bit linux. + + Fix several crashers. +- Changes from version 0.17.1: + + Support a p11-kit specific PKCS#11 attribute persistance format +(bgo#62156). + + Use the SHA1 hash of SPKI as the CKA_ID in the trust module by +default (bgo#62329). + + Refactor a trust builder which builds objects out of parsed +data (bgo#62329). + + Combine trust policy when extracting certificates (bgo#61497). + + The extract --comment option adds comments to PEM bundles +(bgo#62029). + + A new 'priority' config option for ordering modules +(bgo#61978). + + Make each configured path its own trust module token +(bgo#61499). + + Use --with-trust-paths to configure trust module (bgo#62327). + + Fix bug decoding some PEM files. + + Better debug output for trust module lookups. + + Work around bug in NSS when doing serial number lookups. + + Work around broken strndup() function in firefox. + + Fix the nickname for the distrusted attribute. + + Build fixes. +- Add ca-certificates BuildRequires: needed to find the location of + the root certificates. + +--- +Thu Mar 14 12:26:18 UTC 2013 - dims...@opensuse.org + +- Update to version 0.16.4: + + Display per command help again (fdo#62153). + + Don't always print tools debug output (fdo#62152). +- Changes from version 0.16.3: + + When iterating don't skip tokens without the +CKF_TOKEN_INITIALIZED flag. + + Hardcode some distrust records for NSS temporarily. + + Parse global options better in the p11-kit command. + + Better debugging. +- Changes from version 0.16.2: + + Fix regression in 'p11-kit extract --purpose' option +(fdo#62009) + + Documentation updates + + Build fixes (fdo#62001). +- Changes from version 0.16.1: + + Don't break when cA field of BasicConstraints is missing +(fdo#61975). + + Documentation fixes and updates. + + p11-kit extract-trust is a placeholder script now. + +--- +Tue Mar 5 13:36:20 UTC 2013 - dims...@opensuse.org + +- Update to version 0.16.0: + + Update the pkcs11.h header for new mechanisms + + Fix build and tests on mingw64 (ie: win32) + + Relicense LGPL code to BSD license + + Documentation tweaks + + Bugs fixed: fdo#61739, fdo#60894, fdo#61740, fdo#60792 + + Updated translations. +- Changes from version 0.15.2: + + Better define the libtasn1 dependency. + + Crasher and bug fixes. + + Build fixes. + + Updated translations. +- Changes from version 0.15.1: + + Fix some memory leaks. + + Add a location for packages to drop module configs. + + Documentation updates and fixes. + + Add command line tool manual page. + + Remove unused err() function and friends. + + Move more code into common/ directory and refactor. + + Add a system trust policy module. + + Refactor how the p11-kit command line tool works. + + Add p11-kit extract and extract-trust commands. + + Don't complain if we cannot access ~/.pkcs11/pkcs11.conf. + + Refuse to load the p11-kit-proxy.so as a registered module. + + Don't fail initialization if last initialized module fails. + +--- Old:
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2012-10-03 10:37:16 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit, Maintainer is Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2012-03-19 09:58:57.0 +0100 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2012-10-03 10:37:19.0 +0200 @@ -1,0 +2,28 @@ +Fri Sep 7 11:04:40 UTC 2012 - dims...@opensuse.org + +- Update to version 0.14: + + Change default for user-config to merge + + Always URI-encode the 'id' attribute in PKCS#11 URIs + + Expect a .module extension on module configs + + Windows compatibility fixes + + Testing fixes + + Build fixes + +--- +Mon Jul 23 06:26:02 UTC 2012 - zai...@opensuse.org + +- Update to version 0.13: + + Don't allow reading of PIN files larger than 4096 bytes + + If a module is not marked as critical then ignore init failure + + Use preconditions to check for input problems and out of memory + + Add enable-in and disable-in options to module config + + Fix the flags in pin.h + + Use gcc extensions to check varargs during compile + + Fix crasher when a duplicate module is present + + Fix broken hashmap behavior + + Testing fixes + + Win32 build fixes + + 'p11-kit -h' now works + + Documentation fixes + +--- Old: p11-kit-0.12.tar.gz New: p11-kit-0.14.tar.gz Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.fITFbx/_old 2012-10-03 10:37:20.0 +0200 +++ /var/tmp/diff_new_pack.fITFbx/_new 2012-10-03 10:37:20.0 +0200 @@ -17,7 +17,7 @@ Name: p11-kit -Version:0.12 +Version:0.14 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause ++ p11-kit-0.12.tar.gz - p11-kit-0.14.tar.gz ++ 14199 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2012-03-19 09:58:56 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit, Maintainer is Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2012-02-16 16:21:23.0 +0100 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2012-03-19 09:58:57.0 +0100 @@ -1,0 +2,6 @@ +Fri Mar 9 19:37:44 UTC 2012 - dims...@opensuse.org + +- Update to version 0.12: + + Build fix. + +--- Old: p11-kit-0.11.tar.gz New: p11-kit-0.12.tar.gz Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.uN2jgM/_old 2012-03-19 09:58:59.0 +0100 +++ /var/tmp/diff_new_pack.uN2jgM/_new 2012-03-19 09:58:59.0 +0100 @@ -17,7 +17,7 @@ Name: p11-kit -Version:0.11 +Version:0.12 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause ++ p11-kit-0.11.tar.gz - p11-kit-0.12.tar.gz ++ 5923 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2012-02-16 16:20:41 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit, Maintainer is Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2012-01-06 11:46:19.0 +0100 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2012-02-16 16:21:23.0 +0100 @@ -1,0 +2,6 @@ +Fri Feb 10 08:05:27 UTC 2012 - vu...@opensuse.org + +- Update to version 0.11: + + Remove automatic reinitialization of PKCS#11 after fork + +--- Old: p11-kit-0.10.tar.gz New: p11-kit-0.11.tar.gz Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.x8i6PU/_old 2012-02-16 16:21:24.0 +0100 +++ /var/tmp/diff_new_pack.x8i6PU/_new 2012-02-16 16:21:24.0 +0100 @@ -15,8 +15,9 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # + Name: p11-kit -Version:0.10 +Version:0.11 Release:0 Summary:Library to work with PKCS#11 modules License:BSD-3-Clause ++ p11-kit-0.10.tar.gz - p11-kit-0.11.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/p11-kit-0.10/ChangeLog new/p11-kit-0.11/ChangeLog --- old/p11-kit-0.10/ChangeLog 2012-01-03 17:02:09.0 +0100 +++ new/p11-kit-0.11/ChangeLog 2012-02-09 21:27:45.0 +0100 @@ -1,5 +1,37 @@ # Generate automatically. Do not edit. +commit 632e268fa86ad8ba55d34044ccc325c20c8fc0c7 +Author: Stef Walter st...@collabora.co.uk +Date: 2012-02-07 + +Release 0.11 + + NEWS |3 +++ + configure.ac |2 +- + po/p11-kit.pot |4 ++-- + 3 files changed, 6 insertions(+), 3 deletions(-) + +commit 53c34e8ff80500d6ef9366453e88c27a3a52ee46 +Author: Stef Walter st...@gnome.org +Date: 2012-01-23 + +Remove automatic reinitialization of PKCS#11 after fork + + * First of all one should only call async-signal-safe functions + from the callbacks of pthread_atfork(), and so we cannot + reinitialize directly. + * Some modules use pthread_atfork() to detect forking and setup + their internal state. If we call into them in our pthread_atfork() + callback then this is inherently racy. + * There was danger of endless loops and deadlocks which are caused + by handlers which fork in their C_Initialize + * Many processes do fork/exec, reinitializing PKCS#11 for these + forks is quite resourc intensive when the child process won't use + PKCS#11 at all. + + p11-kit/modules.c | 11 ++- + 1 files changed, 2 insertions(+), 9 deletions(-) + commit 001d59596a37369d094edcace455f611d9f55908 Author: Stef Walter st...@collabora.co.uk Date: 2012-01-03 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/p11-kit-0.10/NEWS new/p11-kit-0.11/NEWS --- old/p11-kit-0.10/NEWS 2012-01-03 17:00:13.0 +0100 +++ new/p11-kit-0.11/NEWS 2012-02-09 21:25:39.0 +0100 @@ -1,3 +1,6 @@ +0.11 + * Remove automatic reinitialization of PKCS#11 after fork + 0.10 * Build fixes, for windows, gcc 4.6.1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/p11-kit-0.10/configure new/p11-kit-0.11/configure --- old/p11-kit-0.10/configure 2012-01-03 17:01:00.0 +0100 +++ new/p11-kit-0.11/configure 2012-02-09 21:25:44.0 +0100 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.68 for p11-kit 0.10. +# Generated by GNU Autoconf 2.68 for p11-kit 0.11. # # Report bugs to https://bugs.freedesktop.org/enter_bug.cgi?product=p11-glue. # @@ -571,8 +571,8 @@ # Identity of this package. PACKAGE_NAME='p11-kit' PACKAGE_TARNAME='p11-kit' -PACKAGE_VERSION='0.10' -PACKAGE_STRING='p11-kit 0.10' +PACKAGE_VERSION='0.11' +PACKAGE_STRING='p11-kit 0.11' PACKAGE_BUGREPORT='https://bugs.freedesktop.org/enter_bug.cgi?product=p11-glue' PACKAGE_URL='http://p11-glue.freedesktop.org/p11-kit.html' @@ -1354,7 +1354,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat _ACEOF -\`configure' configures p11-kit 0.10 to adapt to many kinds of systems. +\`configure' configures p11-kit 0.11 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1424,7 +1424,7 @@ if test -n $ac_init_help; then case $ac_init_help in - short | recursive ) echo Configuration of
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at 2012-01-06 11:46:18 Comparing /work/SRC/openSUSE:Factory/p11-kit (Old) and /work/SRC/openSUSE:Factory/.p11-kit.new (New) Package is p11-kit, Maintainer is Changes: --- /work/SRC/openSUSE:Factory/p11-kit/p11-kit.changes 2011-10-02 10:22:44.0 +0200 +++ /work/SRC/openSUSE:Factory/.p11-kit.new/p11-kit.changes 2012-01-06 11:46:19.0 +0100 @@ -1,0 +2,25 @@ +Wed Jan 4 09:08:59 UTC 2012 - vu...@opensuse.org + +- Update to version 0.10: + + Build fixes, for windows, gcc 4.6.1. + +--- +Tue Nov 15 10:18:49 UTC 2011 - dims...@opensuse.org + +- Update to version 0.9: + + p11-kit can't be used as a static library. + + Fix problems crashing when freeing TLS on windows. + + Add debug output to windows init and uninit of library. + +.Build fixes, especially for windows + +--- +Thu Oct 27 21:53:33 UTC 2011 - dims...@opensuse.org + +- Update to version 0.8: + + Rename non-static functions to have a _p11_xxx prefix + + No concurrent calling of C_Initialize and C_Finalize + + Print more information in 'p11-kit -l' + + Initial port to win32 + + Build and testing fixes. + +--- Old: p11-kit-0.7.tar.gz New: p11-kit-0.10.tar.gz Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.737R22/_old 2012-01-06 11:46:20.0 +0100 +++ /var/tmp/diff_new_pack.737R22/_new 2012-01-06 11:46:20.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package p11-kit # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -15,13 +15,11 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # - - Name: p11-kit -Version:0.7 -Release:1 +Version:0.10 +Release:0 Summary:Library to work with PKCS#11 modules -License:BSD3c +License:BSD-3-Clause Group: Development/Libraries/C and C++ Url:http://p11-glue.freedesktop.org/p11-kit.html Source0: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz @@ -35,7 +33,6 @@ such a way that they're discoverable. %package -n libp11-kit0 -License:BSD3c Summary:Library to work with PKCS#11 modules Group: System/Libraries @@ -45,7 +42,6 @@ such a way that they're discoverable. %package tools -License:BSD3c Summary:Library to work with PKCS#11 modules -- Tools Group: Development/Libraries/C and C++ @@ -55,7 +51,6 @@ such a way that they're discoverable. %package devel -License:BSD3c Summary:Library to work with PKCS#11 modules -- Development Files Group: Development/Libraries/C and C++ Requires: libp11-kit0 = %{version} ++ p11-kit-0.7.tar.gz - p11-kit-0.10.tar.gz ++ 12696 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at Fri Sep 9 11:49:54 CEST 2011. --- p11-kit/p11-kit.changes 2011-07-30 15:06:48.0 +0200 +++ /mounts/work_src_done/STABLE/p11-kit/p11-kit.changes2011-09-02 10:21:25.0 +0200 @@ -1,0 +2,20 @@ +Fri Sep 2 08:20:47 UTC 2011 - vu...@opensuse.org + +- Update to version 0.5: + + Fix crasher in p11_kit_registered_modules() + + Add 'critical' setting for modules, which defaults to 'no' + + Fix initialization issues in the proxy module + +--- +Fri Aug 19 19:37:44 CEST 2011 - dims...@opensuse.org + +- Update to version 0.4: + + Fix endless loop if module forks during initialization + + Update PKCS#11 URI code for new draft of spec + + Don't fail when duplicate modules are configured + + Better debug output + + Add example configuration documentation + + Support whitespace in PKCS#11 URIs +- Move the p11-kit.conf.example to the doc folder. + +--- calling whatdependson for head-i586 Old: p11-kit-0.3.tar.gz New: p11-kit-0.5.tar.gz Other differences: -- ++ p11-kit.spec ++ --- /var/tmp/diff_new_pack.6tmBXI/_old 2011-09-09 11:49:49.0 +0200 +++ /var/tmp/diff_new_pack.6tmBXI/_new 2011-09-09 11:49:49.0 +0200 @@ -18,7 +18,7 @@ Name: p11-kit -Version:0.3 +Version:0.5 Release:1 Summary:Library to work with PKCS#11 modules License:BSD3c @@ -77,6 +77,10 @@ # Create pkcs11 config directory test ! -e %{buildroot}%{_sysconfdir}/pkcs11/modules install -d %{buildroot}%{_sysconfdir}/pkcs11/modules +# Remove sample config away to doc folder. Having the sample there would conflict +# with future versions of the library on file level. As replacement, we package +# the file as documentation file. +rm %{buildroot}%{_sysconfdir}/pkcs11/pkcs11.conf.example find %{buildroot}%{_libdir} -name '*.la' -type f -delete -print %clean @@ -88,8 +92,11 @@ %files -n libp11-kit0 %defattr(-,root,root) +# Package the example conf file as documentation. Like this we're sure that we will +# not introduce conflicts with this version of the library and future ones. +%doc p11-kit/pkcs11.conf.example %doc AUTHORS ChangeLog COPYING NEWS README -%dir %{_sysconfdir}/pkcs11/ +%dir %{_sysconfdir}/pkcs11 %dir %{_sysconfdir}/pkcs11/modules/ %{_libdir}/libp11-kit.so.* %{_libdir}/p11-kit-proxy.so ++ p11-kit-0.3.tar.gz - p11-kit-0.5.tar.gz ++ 4521 lines of diff (skipped) Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit p11-kit for openSUSE:Factory
Hello community, here is the log from the commit of package p11-kit for openSUSE:Factory checked in at Thu Aug 4 11:25:53 CEST 2011. New Changes file: --- /dev/null 2010-08-26 16:28:41.0 +0200 +++ /mounts/work_src_done/STABLE/p11-kit/p11-kit.changes2011-07-30 15:06:48.0 +0200 @@ -0,0 +1,14 @@ +--- +Sat Jul 30 15:04:36 CEST 2011 - vu...@opensuse.org + +- Update to version 0.3: + + Rewrite hash table, and simplify licensing. + + Correct paths for p11-kit config files. + + Many build fixes and tweaks. +- Remove Apache-2 part from License tag, as the code was rewritten. + +--- +Mon Jul 25 15:35:57 CEST 2011 - vu...@opensuse.org + +- Initial package (version 0.2). + calling whatdependson for head-i586 New: baselibs.conf p11-kit-0.3.tar.gz p11-kit.changes p11-kit.spec Other differences: -- ++ p11-kit.spec ++ # # spec file for package p11-kit # # Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An Open Source License is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: p11-kit Version:0.3 Release:1 Summary:Library to work with PKCS#11 modules License:BSD3c Group: Development/Libraries/C and C++ Url:http://p11-glue.freedesktop.org/p11-kit.html Source0: http://p11-glue.freedesktop.org/releases/%{name}-%{version}.tar.gz Source99: baselibs.conf BuildRequires: pkg-config BuildRoot: %{_tmppath}/%{name}-%{version}-build %description p11-kit provides a way to load and enumerate PKCS#11 modules, as well as a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable. %package -n libp11-kit0 License:BSD3c Summary:Library to work with PKCS#11 modules Group: System/Libraries %description -n libp11-kit0 p11-kit provides a way to load and enumerate PKCS#11 modules, as well as a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable. %package tools License:BSD3c Summary:Library to work with PKCS#11 modules -- Tools Group: Development/Libraries/C and C++ %description tools p11-kit provides a way to load and enumerate PKCS#11 modules, as well as a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable. %package devel License:BSD3c Summary:Library to work with PKCS#11 modules -- Development Files Group: Development/Libraries/C and C++ Requires: libp11-kit0 = %{version} %description devel p11-kit provides a way to load and enumerate PKCS#11 modules, as well as a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable. %prep %setup -q %build %configure make %{?_smp_mflags} %install %make_install # Create pkcs11 config directory test ! -e %{buildroot}%{_sysconfdir}/pkcs11/modules install -d %{buildroot}%{_sysconfdir}/pkcs11/modules find %{buildroot}%{_libdir} -name '*.la' -type f -delete -print %clean rm -rf %{buildroot} %post -n libp11-kit0 -p /sbin/ldconfig %postun -n libp11-kit0 -p /sbin/ldconfig %files -n libp11-kit0 %defattr(-,root,root) %doc AUTHORS ChangeLog COPYING NEWS README %dir %{_sysconfdir}/pkcs11/ %dir %{_sysconfdir}/pkcs11/modules/ %{_libdir}/libp11-kit.so.* %{_libdir}/p11-kit-proxy.so %files tools %defattr(-,root,root) %{_bindir}/p11-kit %files devel %defattr(-,root,root) %{_includedir}/p11-kit-1/ %{_libdir}/libp11-kit.so %{_libdir}/pkgconfig/p11-kit-1.pc %doc %dir %{_datadir}/gtk-doc %doc %dir %{_datadir}/gtk-doc/html %doc %{_datadir}/gtk-doc/html/p11-kit/ %changelog ++ baselibs.conf ++ libp11-kit0 Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org