File openCryptoki.changes of Package openCryptoki

Overview Repositories Revisions Requests Users Attributes Meta

File openCryptoki.changes of Package openCryptoki (Revision 539b1635c506fe36e343a21470f00e1b)

Currently displaying revision 539b1635c506fe36e343a21470f00e1b , Show latest

-------------------------------------------------------------------
Wed Dec 17 10:42:43 UTC 2014 - p.drouand@gmail.com

- Update to version 3.2
  +New pkcscca tool. Currently it assists in migrating cca private token
   objects from opencryptoki version 2 to the clear key encryption method 
   used in opencryptoki version 3. Includes a manpage for pkcscca tool.
   Changes to README.cca_stdll to assist in using the CCA token and
   migrating the private token objects.
  + Support for CKM_RSA_PKCS_OAEP and CKM_RSA_PKCS_PSS algorithms.
  + Various bugfixes.
  + New testcases for various crypto algorithms.
- Only depend on insserv if builded with sysvinit support
- Remove obsolete patches; merged on upstream release
  + ocki-3.1_01_ep11_makefile.patch
  + ocki-3.1_02_ep11_m_init.patch
  + ocki-3.1_03_ock_obj_mgr.patch
  + ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  + ocki-3.1_05_ep11_readme_update.patch
  + ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  + ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  + ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  + ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  + ocki-3.1_06_0005-Small-reworks.patch
  + ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  + ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  + ocki-3.1_07_0001-Man-page-corrections.patch
  + ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  + ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
  + ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch
  + ocki-3.1_10_0001-ica-sha-update-empty-msg.patch
- Project is now hosted on sourceforge; fix the Url
- Remove cvs related stuff; tarball is produced by upstream
- Use %configure macro instead of manually defined options
- Build with parallel support; use %{?_smp_mflags} macro

-------------------------------------------------------------------
Fri Sep  5 15:30:59 UTC 2014 - jjolly@suse.com

- Fixed ica token's SHA update function when passing zero message
  size (bnc#892644)
- Added patch ocki-3.1_10_0001-ica-sha-update-empty-msg.patch

-------------------------------------------------------------------
Fri Sep  5 04:05:02 UTC 2014 - jjolly@suse.com

- Fixed README.ep11_stdll to have Unix-style EOL characters.
- Added patch ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch

-------------------------------------------------------------------
Thu Sep  4 21:51:32 UTC 2014 - jjolly@suse.com

- Added all files from %src/doc as rpm %doc (bnc#894780)

-------------------------------------------------------------------
Thu Sep  4 21:17:04 UTC 2014 - jjolly@suse.com

- Added pkcscca utility and documentation to convert private
  token objects from v2 to v3. (bnc#893757)
- Added patches:
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch

-------------------------------------------------------------------
Thu Sep  4 20:35:01 UTC 2014 - jjolly@suse.com

- Fixed pkcsslotd and opencryptoki.conf man pages (bnc#889183)
- Added patch ocki-3.1_07_0001-Man-page-corrections.patch

-------------------------------------------------------------------
Fri Aug 15 02:14:21 UTC 2014 - sfalken@opensuse.org

- Specfile Cleanup, Added directory macros in appropriate places

-------------------------------------------------------------------
Thu Jun 26 06:55:03 UTC 2014 - jjolly@suse.com

- Several package changes as per bnc#880217
  - Added openCryptoki-tmp.conf for lock directory management
  - Added 'lite' token support
  - Changed from init.d daemon to systemd service
    - Updated macros in %pre %post %preun and %postun sections
  - Added missing icsf and ep11tok directories to %files section
    ocki-3.1_01_ep11_makefile.patch
    ocki-3.1_02_ep11_m_init.patch

- Patches added:
  ocki-3.1-fix-libica-link.patch
  ocki-3.1_03_ock_obj_mgr.patch
  ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  ocki-3.1_05_ep11_readme_update.patch
  ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  ocki-3.1_06_0005-Small-reworks.patch
  ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch

-------------------------------------------------------------------
Thu Jun  5 13:28:29 UTC 2014 - jjolly@suse.com

- Moved libpkcs11_icsf 32-bit out of s390-specific files

-------------------------------------------------------------------
Thu Jun  5 13:00:31 UTC 2014 - jjolly@suse.com

- Made ep11tok.conf and pkcsep11_migrate specific to s390/s390x
- Added libpkcs11_ep11.so and libpkcs11_icsf.so to 32-bit s390/s390x

-------------------------------------------------------------------
Thu Jun  5 05:06:34 UTC 2014 - jjolly@suse.com

- EP11 token available in the opencryptoki V3.1 package  (bnc#879303)
  - Specfile changed to include ep11tok.conf
  - Specfile changed to include pkcsep11_migrate and pkcsicsf tools
  - Specfile changed to BuildRequires openldap2-devel
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
    - print_mechanism() ignored bad returncodes from the called
      function token_specific_get_mechanism_list()
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
    - Fix failure when confname is not given, use default
      ep11tok.conf instead
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
    - Removed check for ep11 lib at configure
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
    - Move stdint.h before zcrypt.h to resolve dependencies
  - ocki-3.1_06_0005-Small-reworks.patch
    - testcase fixes and file permission changes
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
    - Fix for s390 31-bit build error
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
    - zcrypt library included in build by default

-------------------------------------------------------------------
Fri Mar  7 19:03:59 UTC 2014 - jjolly@suse.com

- Patches applied (bnc#865549)
  - Fixed Makefile to complement common code dependencies
  - switched to official m_init() function based on library change
  - checking the global token object count
  - catch the return code from object_mgr_find_in_map1
  - some README updates about usage and restrictions

-------------------------------------------------------------------
Wed Mar  5 17:58:21 CET 2014 - ro@suse.de

- fix build on x86 (add CCA and TPM to filelist) 
- fix libica detection on s390/s390x to get ICA module built

-------------------------------------------------------------------
Mon Feb  4 17:16:25 UTC 2014 - jjolly@suse.com

- Updated to openCryptoki v3.1: See ChangeLog for complete details
  (FATE#315426)
  - opencryptoki-3.1
    - New ep11 token to support IBM Crypto Express adpaters
      (starting with Crypto Express 4S adapters) configured with
      Enterprise PKCS#11(EP11) firmware. (FATE#315330)
  - opencryptoki-3.0
    - New opencryptoki.conf file to replace pk_config_data and
      pkcs11_starup.  The opencryptoki.conf contains slot entry
      information for tokens.
    - Removed pkcs_slot and pkcs11_startup shell scripts.
    - ICA token supports CKM_DES_OFB64, CKM_DES_CFB8, CKM_DES_CFB6
      mechanisms using 3DES keys. (FATE#315323)
    - ICA token supports CKM_DES3_MAC and CKM_DES3_MAC_GENERAL
      mechanisms. (FATE#315323)
    - ICA token supports CKM_AES_OFB, CKM_AES_CFB8, CKM_AES_CFB64,
      CKM_AES_CFB128, CKM_AES_MAC, and CKM_AES_MAC_GENERAL
      mechanisms. (FATE#315323)
  - opencryptoki-2.4.1 (21 Feb 2012)
    - SHA256 support added for CCA token (FATE#315289)
- Using insserv macros in %post, %preun and %postun sections
- Cleaned up spec file
- removed patches:
  - ocki-2.2.6-PIN-backspace.patch
- added patches:
  - ocki-3.1-fix-implicit-decl.patch
  - ocki-3.1-remove-make-install-chgrp-chmod.patch
  - ocki-3.1-fix-init_d-path.patch

-------------------------------------------------------------------
Tue Feb  4 13:22:49 CET 2014 - ro@suse.de

- add aarch64 to 64bit archs

-------------------------------------------------------------------
Tue Dec 10 19:25:44 UTC 2013 - dvaleev@suse.com

- enable ppc64le

-------------------------------------------------------------------
Sat Dec  8 18:51:31 UTC 2012 - meissner@suse.com

- remove -o from groupadd
- fixed sed script to not a grouplist with leading ,

-------------------------------------------------------------------
Sun Nov 27 06:59:49 UTC 2011 - coolo@suse.com

- don't package man pages twice

-------------------------------------------------------------------
Sun Nov 27 06:52:25 UTC 2011 - coolo@suse.com

- add libtool as buildrequire to avoid implicit dependency

-------------------------------------------------------------------
Mon Sep 27 08:02:22 CEST 2010 - meissner@suse.de

- enable TPM support (bnc#641919)

-------------------------------------------------------------------
Fri Feb 20 06:01:56 CET 2009 - jjolly@suse.de

- pkcsslotd: Updated to use new pidfile location (bnc#475800)

-------------------------------------------------------------------
Fri Jan 23 23:02:19 CET 2009 - jjolly@suse.de

- Added fix to allow backspacing during PIN entry (bnc#448089)

-------------------------------------------------------------------
Fri Jan 23 07:42:59 CET 2009 - olh@suse.de

- run ldconfig in postinstall [bnc#417925]

-------------------------------------------------------------------
Tue Dec  9 14:16:37 CET 2008 - kukuk@suse.de

- Enable build on x86_64 [bnc#417925]

-------------------------------------------------------------------
Thu Nov  6 06:25:48 CET 2008 - jjolly@suse.de

- Overhaul of the specfile.  All platforms build the base package
  and each architecture builds the appropriate 32 or 64 bit package

-------------------------------------------------------------------
Fri Sep 12 06:55:17 CEST 2008 - jjolly@suse.de

- Updated to openCryptoki v2.2.6

-------------------------------------------------------------------
Thu Aug 28 18:21:26 CEST 2008 - ro@suse.de

- fix init script

-------------------------------------------------------------------
Fri Mar 30 01:29:49 CEST 2007 - ro@suse.de

- added pwdutils to buildreq

-------------------------------------------------------------------
Fri Oct 20 02:25:46 CEST 2006 - ro@suse.de

- fix missing return values from non-void funcs

-------------------------------------------------------------------
Fri Apr 21 13:06:00 CEST 2006 - uli@suse.de

- pkcsslotd: create PID file in the right place, delete it on
  exit (bug #164664)

-------------------------------------------------------------------
Tue Apr 11 13:29:07 CEST 2006 - uli@suse.de

- added 64-bit patches from IBM (bug #145666)

-------------------------------------------------------------------
Mon Apr 10 13:30:50 CEST 2006 - uli@suse.de

- added small change missing from patch for bug #156651

-------------------------------------------------------------------
Mon Apr  3 13:57:52 CEST 2006 - uli@suse.de

- fixed location of pkcs11_startup in init script (bug #162372)

-------------------------------------------------------------------
Mon Mar 13 15:05:17 CET 2006 - uli@suse.de

- fixed proc_t structure mixup (bug #156651)

-------------------------------------------------------------------
Thu Mar  9 17:18:33 CET 2006 - uli@suse.de

- initialize head pointer (bug #156229)

-------------------------------------------------------------------
Mon Mar  6 13:20:21 CET 2006 - uli@suse.de

- %ghost symlinks that are generated in %post (bug #154961)

-------------------------------------------------------------------
Thu Feb  2 13:15:13 CET 2006 - uli@suse.de

- stuffed memleak (patch by IBM, bug #147036)

-------------------------------------------------------------------
Wed Feb  1 13:31:05 CET 2006 - uli@suse.de

- changed RPM layout to meet IBM's demands (based on patch by IBM,
  bug #145666)
- removed mmap, per-user data store support (patch by IBM, bug
  #145666)

-------------------------------------------------------------------
Wed Jan 25 21:38:59 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Thu Jan 12 10:25:37 CET 2006 - hare@suse.de

- Update to 2.2.2-rc2

-------------------------------------------------------------------
Wed Jan 11 17:11:58 CET 2006 - hare@suse.de

- Update to 2.2.1-rc2
- Fixed build errors
- Cleaned up spec file.

-------------------------------------------------------------------
Wed Dec 14 01:32:20 CET 2005 - ro@suse.de

- copy TFAQ to build directory (fix build)

-------------------------------------------------------------------
Mon Dec 12 15:35:22 CET 2005 - hare@suse.de

- Update to 2.1.6-rc5.
- Port fixes from SLES9 SP3.

-------------------------------------------------------------------
Tue Nov 15 18:03:22 CET 2005 - uli@suse.de

- enabled for ARM

-------------------------------------------------------------------
Thu Feb 17 12:58:00 CET 2005 - od@suse.de

- fix #50050:
  - ./configure.in: wrong test against $host makes ppc(64) miss
    -DPKCS64 in CFLAGS
  - corrected: S390 flag was set for ppc in this conditional

-------------------------------------------------------------------
Mon Aug 16 12:52:01 CEST 2004 - ro@suse.de

- run full autoreconf / simplify specfile a little

-------------------------------------------------------------------
Tue Apr 27 08:26:46 CEST 2004 - hare@suse.de

- Print correct error message (#37427 again).

-------------------------------------------------------------------
Fri Apr 23 08:18:14 CEST 2004 - hare@suse.de

- Check for the correct module on startup (#37427)

-------------------------------------------------------------------
Sun Apr 18 17:57:30 CEST 2004 - olh@suse.de

- update to openCryptoki-2.1.5, ppc64 version (#39026)

-------------------------------------------------------------------
Wed Feb 18 01:29:07 CET 2004 - ro@suse.de

- adapt filelist on ppc

-------------------------------------------------------------------
Thu Feb 12 14:27:08 CET 2004 - kukuk@suse.de

- Fix owner/group of files/directories

-------------------------------------------------------------------
Fri Dec  5 12:28:30 CET 2003 - ro@suse.de

- no need to specify "root" as supplementary group for root,
  it's already primary

-------------------------------------------------------------------
Wed Jul 30 18:12:32 CEST 2003 - hare@suse.de

- Update to openCryptoki-2.1.3
- Fixed configure errors.

-------------------------------------------------------------------
Mon Jun 23 02:12:34 CEST 2003 - ro@suse.de

- added directories to filelist

-------------------------------------------------------------------
Wed Jun  4 00:31:28 CEST 2003 - ro@suse.de

- remove CVS subdirs
- remove unpackaged files from buildroot

-------------------------------------------------------------------
Thu Nov 21 01:34:11 CET 2002 - ro@suse.de

- removed duplicates from configure.in

-------------------------------------------------------------------
Tue Oct  1 10:51:18 CEST 2002 - froh@suse.de

- exclude ppc64 from the architectures, the package is built for.
  64bit mode is not supported by IBM yet; dlopen wrappers are also
  missing 64bit filename handling. (#20380)
- actually compress the openCryptoki-1.4*.tar.bz2

-------------------------------------------------------------------
Tue Sep 24 20:18:36 CEST 2002 - ro@suse.de

- make it even build ...

-------------------------------------------------------------------
Tue Sep 24 14:25:51 CEST 2002 - froh@suse.de

- make openCryptoki-XXbit PreReq: openCryptoki to enforce pkcs11 group
  creation before package installation (#20079)
- correct version number (the patch actiually lifts openCryptoki to 1.5)
- fix groupadd call to no longer silently ignore errors in all cases
  using (hopefully) posix exit codes.  alternative would be to use
  undocumented '-f' option of groupadd.

-------------------------------------------------------------------
Fri Sep 20 13:37:22 CEST 2002 - froh@suse.de

- add user root to group pkcs11 to enable root to administrate the
  crypto hardware support (#19566)

-------------------------------------------------------------------
Mon Aug 26 17:24:21 CEST 2002 - okir@suse.de

- misc security fixes (#18377)

-------------------------------------------------------------------
Fri Aug 23 17:14:45 CEST 2002 - froh@suse.de

- replaced openCryptoki-tools with openCryptoki-32bit and
  openCryptoki-64bit

-------------------------------------------------------------------
Thu Aug 22 10:45:35 CEST 2002 - froh@suse.de

- moved dlopen objects that are available for non-x86 out of the
  ifarch ix86
- moved postun to tools subpackge (which contains the daemon)
- removed include files.  no development support for now.
- replaced %%ix86, etc by appropriate generic %%openCryptoki_tools_arch
  and %%openCryptoki_no_tools_arch

-------------------------------------------------------------------
Wed Aug 21 12:06:21 CEST 2002 - ro@suse.de

- replaced all i386 occurrences with %ix86 
- changed filelist to what's really built

-------------------------------------------------------------------
Tue Aug 20 12:24:50 CEST 2002 - froh@suse.de

- split package to openCryptoki and openCryptoki-tools to allow
  parallel installation of 32bit tools with 64bit dlopen objects for
  foreign middleware.
- removed automatical insserv on install, because the package needs
  manual configuration (#18031)

-------------------------------------------------------------------
Mon Aug 12 11:01:37 CEST 2002 - froh@suse.de

- added missing %post before insserv (Bug #17600)

-------------------------------------------------------------------
Fri Aug  9 13:03:05 CEST 2002 - kukuk@suse.de

- Fix path in PreReq.

-------------------------------------------------------------------
Wed Aug  7 12:36:09 CEST 2002 - froh@suse.de

- add groupadd pkcs11 in %pre install

-------------------------------------------------------------------
Mon Jul 29 17:21:49 CEST 2002 - froh@suse.de

- updated to current version
- removed old START_ variable

-------------------------------------------------------------------
Fri Jun 14 00:07:03 CEST 2002 - ro@suse.de

- always use macros when calling insserv
 
-------------------------------------------------------------------
Tue Apr  9 21:06:49 CEST 2002 - bk@suse.de

- add lib64 support

-------------------------------------------------------------------
Tue Feb  5 11:01:16 CET 2002 - froh@suse.de

- Added openssl to #neededforbuild, which is needed in addition to
  openssl-devel

-------------------------------------------------------------------
Wed Jan 30 16:20:48 CET 2002 - froh@suse.de

- initial version

-------------------------------------------------------------------

Places

File openCryptoki.changes of Package openCryptoki (Revision 539b1635c506fe36e343a21470f00e1b)

Places