|
|
b1b554 |
%global _hardened_build 1
|
|
|
b1b554 |
|
|
|
b1b554 |
Name: opencryptoki
|
|
|
b1b554 |
Summary: Implementation of the PKCS#11 (Cryptoki) specification v2.11
|
|
|
2e98af |
Version: 3.10.0
|
|
|
2e98af |
Release: 2%{?dist}
|
|
|
b1b554 |
License: CPL
|
|
|
b1b554 |
Group: System Environment/Base
|
|
|
b1b554 |
URL: https://github.com/opencryptoki/opencryptoki
|
|
|
b1b554 |
Source0: https://github.com/opencryptoki/%{name}/archive/v%{version}.tar.gz
|
|
|
b1b554 |
Source1: %{name}-tmpfiles.conf
|
|
|
2e98af |
|
|
|
2e98af |
Patch0: opencryptoki-3.10-ica-token.patch
|
|
|
b1b554 |
|
|
|
b1b554 |
Requires(pre): shadow-utils coreutils sed
|
|
|
b1b554 |
BuildRequires: openssl-devel
|
|
|
b1b554 |
BuildRequires: trousers-devel
|
|
|
b1b554 |
BuildRequires: openldap-devel
|
|
|
b1b554 |
BuildRequires: autoconf automake libtool
|
|
|
b1b554 |
BuildRequires: bison flex
|
|
|
b1b554 |
BuildRequires: systemd
|
|
|
b1b554 |
BuildRequires: libitm-devel
|
|
|
b1b554 |
%ifarch s390 s390x
|
|
|
b1b554 |
BuildRequires: libica-devel >= 2.5
|
|
|
b1b554 |
%endif
|
|
|
b1b554 |
Requires(pre): %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Requires: %{name}(token)
|
|
|
b1b554 |
Requires(post): systemd
|
|
|
b1b554 |
Requires(preun): systemd
|
|
|
b1b554 |
Requires(postun): systemd
|
|
|
b1b554 |
conflicts: selinux-policy < 3.13.1-84
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%description
|
|
|
b1b554 |
Opencryptoki implements the PKCS#11 specification v2.11 for a set of
|
|
|
b1b554 |
cryptographic hardware, such as IBM 4764 and 4765 crypto cards, and the
|
|
|
b1b554 |
Trusted Platform Module (TPM) chip. Opencryptoki also brings a software
|
|
|
b1b554 |
token implementation that can be used without any cryptographic
|
|
|
b1b554 |
hardware.
|
|
|
b1b554 |
This package contains the Slot Daemon (pkcsslotd) and general utilities.
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%package libs
|
|
|
b1b554 |
Group: System Environment/Libraries
|
|
|
b1b554 |
Summary: The run-time libraries for opencryptoki package
|
|
|
b1b554 |
Requires(pre): shadow-utils
|
|
|
b1b554 |
|
|
|
b1b554 |
%description libs
|
|
|
b1b554 |
Opencryptoki implements the PKCS#11 specification v2.11 for a set of
|
|
|
b1b554 |
cryptographic hardware, such as IBM 4764 and 4765 crypto cards, and the
|
|
|
b1b554 |
Trusted Platform Module (TPM) chip. Opencryptoki also brings a software
|
|
|
b1b554 |
token implementation that can be used without any cryptographic
|
|
|
b1b554 |
hardware.
|
|
|
b1b554 |
This package contains the PKCS#11 library implementation, and requires
|
|
|
b1b554 |
at least one token implementation (packaged separately) to be fully
|
|
|
b1b554 |
functional.
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%package devel
|
|
|
b1b554 |
Group: Development/Libraries
|
|
|
b1b554 |
Summary: Development files for openCryptoki
|
|
|
b1b554 |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
|
|
|
b1b554 |
%description devel
|
|
|
b1b554 |
This package contains the development header files for building
|
|
|
b1b554 |
opencryptoki and PKCS#11 based applications
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%package swtok
|
|
|
b1b554 |
Group: System Environment/Libraries
|
|
|
b1b554 |
Summary: The software token implementation for opencryptoki
|
|
|
b1b554 |
Requires(pre): %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Provides: %{name}(token)
|
|
|
b1b554 |
|
|
|
b1b554 |
%description swtok
|
|
|
b1b554 |
Opencryptoki implements the PKCS#11 specification v2.11 for a set of
|
|
|
b1b554 |
cryptographic hardware, such as IBM 4764 and 4765 crypto cards, and the
|
|
|
b1b554 |
Trusted Platform Module (TPM) chip. Opencryptoki also brings a software
|
|
|
b1b554 |
token implementation that can be used without any cryptographic
|
|
|
b1b554 |
hardware.
|
|
|
b1b554 |
This package brings the software token implementation to use opencryptoki
|
|
|
b1b554 |
without any specific cryptographic hardware.
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%package tpmtok
|
|
|
b1b554 |
Group: System Environment/Libraries
|
|
|
b1b554 |
Summary: Trusted Platform Module (TPM) device support for opencryptoki
|
|
|
b1b554 |
Requires(pre): %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Provides: %{name}(token)
|
|
|
b1b554 |
|
|
|
b1b554 |
%description tpmtok
|
|
|
b1b554 |
Opencryptoki implements the PKCS#11 specification v2.11 for a set of
|
|
|
b1b554 |
cryptographic hardware, such as IBM 4764 and 4765 crypto cards, and the
|
|
|
b1b554 |
Trusted Platform Module (TPM) chip. Opencryptoki also brings a software
|
|
|
b1b554 |
token implementation that can be used without any cryptographic
|
|
|
b1b554 |
hardware.
|
|
|
b1b554 |
This package brings the necessary libraries and files to support
|
|
|
b1b554 |
Trusted Platform Module (TPM) devices in the opencryptoki stack.
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%package icsftok
|
|
|
b1b554 |
Group: System Environment/Libraries
|
|
|
b1b554 |
Summary: ICSF token support for opencryptoki
|
|
|
b1b554 |
Requires(pre): %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Provides: %{name}(token)
|
|
|
b1b554 |
|
|
|
b1b554 |
%description icsftok
|
|
|
b1b554 |
Opencryptoki implements the PKCS#11 specification v2.11 for a set of
|
|
|
b1b554 |
cryptographic hardware, such as IBM 4764 and 4765 crypto cards, and the
|
|
|
b1b554 |
Trusted Platform Module (TPM) chip. Opencryptoki also brings a software
|
|
|
b1b554 |
token implementation that can be used without any cryptographic
|
|
|
b1b554 |
hardware.
|
|
|
b1b554 |
This package brings the necessary libraries and files to support
|
|
|
b1b554 |
ICSF token in the opencryptoki stack.
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%ifarch s390 s390x
|
|
|
b1b554 |
%package icatok
|
|
|
b1b554 |
Group: System Environment/Libraries
|
|
|
b1b554 |
Summary: ICA cryptographic devices (clear-key) support for opencryptoki
|
|
|
b1b554 |
Requires(pre): %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Provides: %{name}(token)
|
|
|
b1b554 |
|
|
|
b1b554 |
%description icatok
|
|
|
b1b554 |
Opencryptoki implements the PKCS#11 specification v2.11 for a set of
|
|
|
b1b554 |
cryptographic hardware, such as IBM 4764 and 4765 crypto cards, and the
|
|
|
b1b554 |
Trusted Platform Module (TPM) chip. Opencryptoki also brings a software
|
|
|
b1b554 |
token implementation that can be used without any cryptographic
|
|
|
b1b554 |
hardware.
|
|
|
b1b554 |
This package brings the necessary libraries and files to support ICA
|
|
|
b1b554 |
devices in the opencryptoki stack. ICA is an interface to IBM
|
|
|
b1b554 |
cryptographic hardware such as IBM 4764 or 4765 that uses the
|
|
|
b1b554 |
"accelerator" or "clear-key" path.
|
|
|
b1b554 |
|
|
|
b1b554 |
%package ccatok
|
|
|
b1b554 |
Group: System Environment/Libraries
|
|
|
b1b554 |
Summary: CCA cryptographic devices (secure-key) support for opencryptoki
|
|
|
b1b554 |
Requires(pre): %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Provides: %{name}(token)
|
|
|
b1b554 |
|
|
|
b1b554 |
%description ccatok
|
|
|
b1b554 |
Opencryptoki implements the PKCS#11 specification v2.11 for a set of
|
|
|
b1b554 |
cryptographic hardware, such as IBM 4764 and 4765 crypto cards, and the
|
|
|
b1b554 |
Trusted Platform Module (TPM) chip. Opencryptoki also brings a software
|
|
|
b1b554 |
token implementation that can be used without any cryptographic
|
|
|
b1b554 |
hardware.
|
|
|
b1b554 |
This package brings the necessary libraries and files to support CCA
|
|
|
b1b554 |
devices in the opencryptoki stack. CCA is an interface to IBM
|
|
|
b1b554 |
cryptographic hardware such as IBM 4764 or 4765 that uses the
|
|
|
b1b554 |
"co-processor" or "secure-key" path.
|
|
|
b1b554 |
|
|
|
b1b554 |
%package ep11tok
|
|
|
b1b554 |
Group: System Environment/Libraries
|
|
|
b1b554 |
Summary: CCA cryptographic devices (secure-key) support for opencryptoki
|
|
|
b1b554 |
Requires(pre): %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
b1b554 |
Provides: %{name}(token)
|
|
|
b1b554 |
|
|
|
b1b554 |
%description ep11tok
|
|
|
b1b554 |
Opencryptoki implements the PKCS#11 specification v2.11 for a set of
|
|
|
b1b554 |
cryptographic hardware, such as IBM 4764 and 4765 crypto cards, and the
|
|
|
b1b554 |
Trusted Platform Module (TPM) chip. Opencryptoki also brings a software
|
|
|
b1b554 |
token implementation that can be used without any cryptographic
|
|
|
b1b554 |
hardware.
|
|
|
b1b554 |
This package brings the necessary libraries and files to support EP11
|
|
|
b1b554 |
tokens in the opencryptoki stack. The EP11 token is a token that uses
|
|
|
b1b554 |
the IBM Crypto Express adapters (starting with Crypto Express 4S adapters)
|
|
|
b1b554 |
configured with Enterprise PKCS#11 (EP11) firmware.
|
|
|
b1b554 |
%endif
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%prep
|
|
|
b1b554 |
%setup -q -n %{name}-%{version}
|
|
|
2e98af |
%patch0 -p1 -b .ica
|
|
|
b1b554 |
|
|
|
b1b554 |
# Upstream tarball has unnecessary executable perms set on the sources
|
|
|
b1b554 |
find . -name '*.[ch]' -print0 | xargs -0 chmod -x
|
|
|
b1b554 |
|
|
|
b1b554 |
# append token specific subdirs to tmpfiles.d config
|
|
|
b1b554 |
token_subdirs="icsf swtok tpm"
|
|
|
b1b554 |
%ifarch s390 s390x
|
|
|
b1b554 |
token_subdirs="$token_subdirs lite ccatok ep11tok"
|
|
|
b1b554 |
%endif
|
|
|
b1b554 |
|
|
|
b1b554 |
cp -p %{SOURCE1} %{name}-tmpfiles.conf
|
|
|
b1b554 |
for d in $token_subdirs
|
|
|
b1b554 |
do
|
|
|
b1b554 |
echo "D /var/lock/opencryptoki/$d 0770 root pkcs11 -" >> %{name}-tmpfiles.conf
|
|
|
b1b554 |
done
|
|
|
b1b554 |
|
|
|
b1b554 |
%build
|
|
|
b1b554 |
./bootstrap.sh
|
|
|
b1b554 |
|
|
|
b1b554 |
%configure --with-systemd=%{_unitdir} \
|
|
|
b1b554 |
%ifarch s390 s390x
|
|
|
b1b554 |
--enable-icatok --enable-ccatok --enable-ep11tok --enable-pkcsep11_migrate
|
|
|
b1b554 |
%else
|
|
|
b1b554 |
--disable-icatok --disable-ccatok --disable-ep11tok --disable-pkcsep11_migrate --disable-pkcscca_migrate
|
|
|
b1b554 |
%endif
|
|
|
b1b554 |
|
|
|
b1b554 |
make %{?_smp_mflags} CHGRP=/bin/true
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%install
|
|
|
b1b554 |
make install DESTDIR=$RPM_BUILD_ROOT CHGRP=/bin/true
|
|
|
b1b554 |
|
|
|
b1b554 |
# Remove unwanted cruft
|
|
|
b1b554 |
rm -f $RPM_BUILD_ROOT/%{_libdir}/%{name}/*.la
|
|
|
b1b554 |
rm -f $RPM_BUILD_ROOT/%{_libdir}/%{name}/stdll/*.la
|
|
|
b1b554 |
|
|
|
b1b554 |
# systemd must create /var/lock/opencryptoki
|
|
|
b1b554 |
mkdir -p $RPM_BUILD_ROOT%{_prefix}/lib/tmpfiles.d
|
|
|
b1b554 |
install -m 0644 %{name}-tmpfiles.conf $RPM_BUILD_ROOT%{_tmpfilesdir}/%{name}.conf
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%post libs -p /sbin/ldconfig
|
|
|
b1b554 |
%post swtok -p /sbin/ldconfig
|
|
|
b1b554 |
%post tpmtok -p /sbin/ldconfig
|
|
|
b1b554 |
%post icsftok -p /sbin/ldconfig
|
|
|
b1b554 |
%ifarch s390 s390x
|
|
|
b1b554 |
%post icatok -p /sbin/ldconfig
|
|
|
b1b554 |
%post ccatok -p /sbin/ldconfig
|
|
|
b1b554 |
%post ep11tok -p /sbin/ldconfig
|
|
|
b1b554 |
%endif
|
|
|
b1b554 |
|
|
|
b1b554 |
%postun libs -p /sbin/ldconfig
|
|
|
b1b554 |
%postun swtok -p /sbin/ldconfig
|
|
|
b1b554 |
%postun tpmtok -p /sbin/ldconfig
|
|
|
b1b554 |
%postun icsftok -p /sbin/ldconfig
|
|
|
b1b554 |
%ifarch s390 s390x
|
|
|
b1b554 |
%postun icatok -p /sbin/ldconfig
|
|
|
b1b554 |
%postun ccatok -p /sbin/ldconfig
|
|
|
b1b554 |
%postun ep11tok -p /sbin/ldconfig
|
|
|
b1b554 |
%endif
|
|
|
b1b554 |
|
|
|
b1b554 |
%pre libs
|
|
|
b1b554 |
getent group pkcs11 >/dev/null || groupadd -r pkcs11
|
|
|
b1b554 |
exit 0
|
|
|
b1b554 |
|
|
|
b1b554 |
%post
|
|
|
b1b554 |
%systemd_post pkcsslotd.service
|
|
|
b1b554 |
|
|
|
b1b554 |
%preun
|
|
|
b1b554 |
%systemd_preun pkcsslotd.service
|
|
|
b1b554 |
|
|
|
b1b554 |
%postun
|
|
|
b1b554 |
%systemd_postun_with_restart pkcsslotd.service
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%files
|
|
|
2e98af |
%doc ChangeLog FAQ README.md
|
|
|
2e98af |
%doc doc/opencryptoki-howto.md
|
|
|
b1b554 |
%doc doc/README.token_data
|
|
|
b1b554 |
%dir %{_sysconfdir}/%{name}
|
|
|
b1b554 |
%config(noreplace) %{_sysconfdir}/%{name}/%{name}.conf
|
|
|
b1b554 |
%{_tmpfilesdir}/%{name}.conf
|
|
|
b1b554 |
%{_unitdir}/pkcsslotd.service
|
|
|
b1b554 |
%{_sbindir}/pkcsconf
|
|
|
b1b554 |
%{_sbindir}/pkcsslotd
|
|
|
b1b554 |
%{_mandir}/man1/pkcsconf.1*
|
|
|
b1b554 |
%{_mandir}/man5/%{name}.conf.5*
|
|
|
b1b554 |
%{_mandir}/man7/%{name}.7*
|
|
|
b1b554 |
%{_mandir}/man8/pkcsslotd.8*
|
|
|
b1b554 |
%{_libdir}/opencryptoki/methods
|
|
|
b1b554 |
%{_libdir}/pkcs11/methods
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_sharedstatedir}/%{name}
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_localstatedir}/lock/%{name}
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_localstatedir}/lock/%{name}/*
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_localstatedir}/log/opencryptoki
|
|
|
b1b554 |
|
|
|
b1b554 |
%files libs
|
|
|
b1b554 |
%doc LICENSE
|
|
|
b1b554 |
%{_sysconfdir}/ld.so.conf.d/*
|
|
|
b1b554 |
# Unversioned .so symlinks usually belong to -devel packages, but opencryptoki
|
|
|
b1b554 |
# needs them in the main package, because:
|
|
|
b1b554 |
# documentation suggests that programs should dlopen "PKCS11_API.so".
|
|
|
b1b554 |
%dir %{_libdir}/opencryptoki
|
|
|
b1b554 |
%{_libdir}/opencryptoki/libopencryptoki.*
|
|
|
b1b554 |
%{_libdir}/opencryptoki/PKCS11_API.so
|
|
|
b1b554 |
%dir %{_libdir}/opencryptoki/stdll
|
|
|
b1b554 |
%dir %{_libdir}/pkcs11
|
|
|
b1b554 |
%{_libdir}/pkcs11/libopencryptoki.so
|
|
|
b1b554 |
%{_libdir}/pkcs11/PKCS11_API.so
|
|
|
b1b554 |
%{_libdir}/pkcs11/stdll
|
|
|
b1b554 |
|
|
|
b1b554 |
%files devel
|
|
|
b1b554 |
%{_includedir}/%{name}/
|
|
|
b1b554 |
|
|
|
b1b554 |
%files swtok
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/libpkcs11_sw.*
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/PKCS11_SW.so
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_sharedstatedir}/%{name}/swtok/
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_sharedstatedir}/%{name}/swtok/TOK_OBJ/
|
|
|
b1b554 |
|
|
|
b1b554 |
%files tpmtok
|
|
|
b1b554 |
%doc doc/README.tpm_stdll
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/libpkcs11_tpm.*
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/PKCS11_TPM.so
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_sharedstatedir}/%{name}/tpm/
|
|
|
b1b554 |
|
|
|
b1b554 |
%files icsftok
|
|
|
b1b554 |
%doc doc/README.icsf_stdll
|
|
|
b1b554 |
%{_sbindir}/pkcsicsf
|
|
|
b1b554 |
%{_mandir}/man1/pkcsicsf.1*
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/libpkcs11_icsf.*
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/PKCS11_ICSF.so
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_sharedstatedir}/%{name}/icsf/
|
|
|
b1b554 |
|
|
|
b1b554 |
%ifarch s390 s390x
|
|
|
b1b554 |
%files icatok
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/libpkcs11_ica.*
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/PKCS11_ICA.so
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_sharedstatedir}/%{name}/lite/
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_sharedstatedir}/%{name}/lite/TOK_OBJ/
|
|
|
b1b554 |
|
|
|
b1b554 |
%files ccatok
|
|
|
b1b554 |
%doc doc/README.cca_stdll
|
|
|
b1b554 |
%{_sbindir}/pkcscca
|
|
|
b1b554 |
%{_mandir}/man1/pkcscca.1*
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/libpkcs11_cca.*
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/PKCS11_CCA.so
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_sharedstatedir}/%{name}/ccatok/
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_sharedstatedir}/%{name}/ccatok/TOK_OBJ/
|
|
|
b1b554 |
|
|
|
b1b554 |
%files ep11tok
|
|
|
b1b554 |
%doc doc/README.ep11_stdll
|
|
|
b1b554 |
%config(noreplace) %{_sysconfdir}/%{name}/ep11tok.conf
|
|
|
2e98af |
%config(noreplace) %{_sysconfdir}/%{name}/ep11cpfilter.conf
|
|
|
b1b554 |
%{_sbindir}/pkcsep11_migrate
|
|
|
2e98af |
%{_sbindir}/pkcsep11_session
|
|
|
b1b554 |
%{_mandir}/man1/pkcsep11_migrate.1.*
|
|
|
2e98af |
%{_mandir}/man1/pkcsep11_session.1*
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/libpkcs11_ep11.*
|
|
|
b1b554 |
%{_libdir}/opencryptoki/stdll/PKCS11_EP11.so
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_sharedstatedir}/%{name}/ep11tok/
|
|
|
b1b554 |
%dir %attr(770,root,pkcs11) %{_sharedstatedir}/%{name}/ep11tok/TOK_OBJ/
|
|
|
b1b554 |
%endif
|
|
|
b1b554 |
|
|
|
b1b554 |
|
|
|
b1b554 |
%changelog
|
|
|
2e98af |
* Thu Aug 23 2018 Sinny Kumari <skumari@redhat.com> - 3.10.0-2
|
|
|
2e98af |
- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available
|
|
|
2e98af |
|
|
|
2e98af |
* Fri Jun 22 2018 Sinny Kumari <skumari@redhat.com> - 3.10.0-1
|
|
|
2e98af |
- Rebase to 3.10.0
|
|
|
2e98af |
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
|
|
|
2e98af |
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
|
|
|
2e98af |
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0
|
|
|
2e98af |
|
|
|
b1b554 |
* Tue Oct 03 2017 Sinny Kumari <skumari@redhat.com> - 3.7.0-1
|
|
|
b1b554 |
- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
|
|
|
b1b554 |
- Include libitm-devel as BuildRequires
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Feb 20 2017 Sinny Kumari <skumari@redhat.com> - 3.6.2-1
|
|
|
b1b554 |
- Rebase opencryptoki to 3.6.2
|
|
|
b1b554 |
- Remove patches from spec file applied during 3.5 release
|
|
|
b1b554 |
- Resolves: #1391559, #1380784, #1417905
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Sep 19 2016 Sinny Kumari <skumari@redhat.com> - 3.5-7
|
|
|
b1b554 |
- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Sep 02 2016 Sinny Kumari <skumari@redhat.com> - 3.5-6
|
|
|
b1b554 |
- RHBZ#1371095: coverity scan fixes - memory leak and variable initialization
|
|
|
b1b554 |
- RHBZ#1372188: fix illegal instruction on pkcscca tool
|
|
|
b1b554 |
|
|
|
b1b554 |
* Wed Jul 20 2016 Jakub Jelen <jjelen@redhat.com> - 3.5-5
|
|
|
b1b554 |
- Create missing tpm lock directory from tpm stdll (#1343671)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Thu Jul 14 2016 Jakub Jelen <jjelen@redhat.com> - 3.5-4
|
|
|
b1b554 |
- Require selinux-policy with changes related to #1343671
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Jun 28 2016 Jakub Jelen <jjelen@redhat.com> - 3.5-3
|
|
|
b1b554 |
- Downgraded a syslog dlopen error to warning (#1059821)
|
|
|
b1b554 |
- Coverity: NULL_RETURNS fixes
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Jun 28 2016 Jakub Jelen <jjelen@redhat.com> - 3.5-2
|
|
|
b1b554 |
- icsf token does not validate data length for verify operation for ECDSA (#1344383)
|
|
|
b1b554 |
- Create lock and log directories from opencryptoki (#1343671)
|
|
|
b1b554 |
- Create log directory with appropriate permissions (#1185421)
|
|
|
b1b554 |
- Added support for rc=8, reasoncode=2028 in icsf token (#1348803)
|
|
|
b1b554 |
- Fix for session handle not set in session issue (#1348804)
|
|
|
b1b554 |
- Fix memory leak in icsf specific code
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri May 13 2016 Jakub Jelen <jjelen@redhat.com> - 3.5-1
|
|
|
b1b554 |
- New upstream relase (#1185421)
|
|
|
b1b554 |
- Implicit dependence on libica >= 2.5
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Apr 29 2016 Jakub Jelen <jjelen@redhat.com> - 3.4.1-4
|
|
|
b1b554 |
- Added support for icsf reason code 11028 (#1325827)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Thu Mar 31 2016 Jakub Jelen <jjelen@redhat.com> 3.4.1-3
|
|
|
b1b554 |
- Few more issues reported by Coverity
|
|
|
b1b554 |
- Fix Segfault when trace in enabled in api_interface.c
|
|
|
b1b554 |
- Fix the misleading indentation
|
|
|
b1b554 |
- Fix memory leak by closing the lock file descriptor in C_Final
|
|
|
b1b554 |
|
|
|
b1b554 |
* Thu Mar 24 2016 Jakub Jelen <jjelen@redhat.com> 3.4.1-2
|
|
|
b1b554 |
- Fix problems reported by Coverity scan
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Feb 12 2016 Jakub Jelen <jjelen@redhat.com> 3.4.1-1
|
|
|
b1b554 |
- New upstream release (#1185421)
|
|
|
b1b554 |
- Fix translating ICSF return code (#1306654)
|
|
|
b1b554 |
- Fix getObjectsize call for opencryptoki ICSF token (#1303839)
|
|
|
b1b554 |
- Fix for openCryptoki ICSF token failure (#1300194)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Thu Jan 28 2016 Jakub Jelen <jjelen@redhat.com> 3.2-5
|
|
|
b1b554 |
- Fix obj class for ep11 token (#1263179)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Wed Dec 03 2014 Petr Lautrbach <plautrba@redhat.com> 3.2-4.1
|
|
|
b1b554 |
- don't check if root is in pkcs11 group
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Nov 10 2014 Petr Lautrbach <plautrba@redhat.com> 3.2-3
|
|
|
b1b554 |
- Correctly declare OAEP parameter in RSA Wrap tests to prevent a possible
|
|
|
b1b554 |
scope issue (#1088512)
|
|
|
b1b554 |
- several fixes for pkcsep11_migrate
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Oct 20 2014 Petr Lautrbach <plautrba@redhat.com> 3.2-2
|
|
|
b1b554 |
- opencryptoki-libs needs shadow-utils to be installed (#1154647)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Wed Sep 10 2014 Petr Lautrbach <plautrba@redhat.com> 3.2-1
|
|
|
b1b554 |
- new upstream release 3.2 (#1088512)
|
|
|
b1b554 |
- add new sub-package opencryptoki-ep11tok on s390x
|
|
|
b1b554 |
|
|
|
b1b554 |
* Thu Feb 06 2014 Petr Lautrbach <plautrba@redhat.com> 3.0-11
|
|
|
b1b554 |
- create the right lock directory for cca tokens (#1054442)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Feb 03 2014 Petr Lautrbach <plautrba@redhat.com> 3.0-10
|
|
|
b1b554 |
- use Requires(pre): opencryptoki-libs for subpackages (#1058814)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 3.0-9
|
|
|
b1b554 |
- Mass rebuild 2014-01-24
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Jan 20 2014 Dan Horák <dan[at]danny.cz> - 3.0-8
|
|
|
b1b554 |
- include token specific directories (#1013017, #1045775, #1054442)
|
|
|
b1b554 |
- fix pkcsconf crash for non-root users (#1054661)
|
|
|
b1b554 |
- the libs subpackage must care of creating the pkcs11 group, it's the first to be installed
|
|
|
b1b554 |
- fix build with -Werror=format-security (#1037228)
|
|
|
b1b554 |
- Resolves: #1054442, #1054661
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 3.0-7
|
|
|
b1b554 |
- Mass rebuild 2013-12-27
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Nov 22 2013 Dan Horák <dan[at]danny.cz> - 3.0-6
|
|
|
b1b554 |
- apply post-3.0 fixes (#1033284)
|
|
|
b1b554 |
- Resolves: #1033284
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Nov 19 2013 Dan Horák <dan[at]danny.cz> - 3.0-5
|
|
|
b1b554 |
- update opencryptoki man page (#1001729)
|
|
|
b1b554 |
- Resolves: #1001729
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Aug 23 2013 Dan Horák <dan[at]danny.cz> - 3.0-4
|
|
|
b1b554 |
- update unit file (#995002)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Jul 23 2013 Dan Horák <dan[at]danny.cz> - 3.0-2
|
|
|
b1b554 |
- update pkcsconf man page (#948460)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Jul 22 2013 Dan Horák <dan[at]danny.cz> - 3.0-1
|
|
|
b1b554 |
- new upstream release 3.0
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Jun 25 2013 Dan Horák <dan[at]danny.cz> - 2.4.3.1-1
|
|
|
b1b554 |
- new upstream release 2.4.3.1
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri May 03 2013 Dan Horák <dan[at]danny.cz> - 2.4.3-1
|
|
|
b1b554 |
- new upstream release 2.4.3
|
|
|
b1b554 |
|
|
|
b1b554 |
* Thu Apr 04 2013 Dan Horák <dan[at]danny.cz> - 2.4.2-4
|
|
|
b1b554 |
- enable hardened build
|
|
|
b1b554 |
- switch to systemd macros in scriptlets (#850240)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Jan 28 2013 Dan Horák <dan[at]danny.cz> - 2.4.2-3
|
|
|
b1b554 |
- add virtual opencryptoki(token) Provides to token modules and as Requires
|
|
|
b1b554 |
to main package (#904986)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-2
|
|
|
b1b554 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
b1b554 |
|
|
|
b1b554 |
* Thu Jun 21 2012 Dan Horák <dan[at]danny.cz> - 2.4.2-1
|
|
|
b1b554 |
- new upstream release 2.4.2
|
|
|
b1b554 |
- add pkcs_slot man page
|
|
|
b1b554 |
- don't add root to the pkcs11 group
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Jun 11 2012 Dan Horák <dan[at]danny.cz> - 2.4.1-2
|
|
|
b1b554 |
- fix unresolved symbols in TPM module (#830129)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Sat Feb 25 2012 Dan Horák <dan[at]danny.cz> - 2.4.1-1
|
|
|
b1b554 |
- new upstream release 2.4.1
|
|
|
b1b554 |
- convert from initscript to systemd unit
|
|
|
b1b554 |
- import fixes from RHEL-6 about root's group membership (#732756, #730903)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4-2
|
|
|
b1b554 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
b1b554 |
|
|
|
b1b554 |
* Thu Jul 07 2011 Dan Horák <dan[at]danny.cz> - 2.4-1
|
|
|
b1b554 |
- new upstream release 2.4
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.3-2
|
|
|
b1b554 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Jan 17 2011 Dan Horák <dan[at]danny.cz> 2.3.3-1
|
|
|
b1b554 |
- new upstream release 2.3.3
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Nov 09 2010 Michal Schmidt <mschmidt@redhat.com> 2.3.2-2
|
|
|
b1b554 |
- Apply Obsoletes to package names, not provides.
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Sep 14 2010 Dan Horák <dan[at]danny.cz> 2.3.2-1
|
|
|
b1b554 |
- new upstream release 2.3.2
|
|
|
b1b554 |
- put STDLLs in separate packages to match upstream package design
|
|
|
b1b554 |
|
|
|
b1b554 |
* Thu Jul 08 2010 Michal Schmidt <mschmidt@redhat.com> 2.3.1-7
|
|
|
b1b554 |
- Move the LICENSE file to the -libs subpackage.
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Jun 29 2010 Dan Horák <dan[at]danny.cz> 2.3.1-6
|
|
|
b1b554 |
- rebuilt with CCA enabled (#604287)
|
|
|
b1b554 |
- fixed issues from #546274
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Apr 30 2010 Dan Horák <dan[at]danny.cz> 2.3.1-5
|
|
|
b1b554 |
- fixed one more issue in the initscript (#547324)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Apr 26 2010 Dan Horák <dan[at]danny.cz> 2.3.1-4
|
|
|
b1b554 |
- fixed pidfile creating and usage (#547324)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Feb 08 2010 Michal Schmidt <mschmidt@redhat.com> 2.3.1-3
|
|
|
b1b554 |
- Also list 'reload' and 'force-reload' in "Usage: ...".
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Feb 08 2010 Michal Schmidt <mschmidt@redhat.com> 2.3.1-2
|
|
|
b1b554 |
- Support 'force-reload' in the initscript.
|
|
|
b1b554 |
|
|
|
b1b554 |
* Wed Jan 27 2010 Michal Schmidt <mschmidt@redhat.com> 2.3.1-1
|
|
|
b1b554 |
- New upstream release 2.3.1.
|
|
|
b1b554 |
- opencryptoki-2.3.0-fix-nss-breakage.patch was merged.
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Jan 22 2010 Dan Horák <dan[at]danny.cz> 2.3.0-5
|
|
|
b1b554 |
- made pkcsslotd initscript LSB compliant (#522149)
|
|
|
b1b554 |
|
|
|
b1b554 |
* Mon Sep 07 2009 Michal Schmidt <mschmidt@redhat.com> 2.3.0-4
|
|
|
b1b554 |
- Added opencryptoki-2.3.0-fix-nss-breakage.patch on upstream request.
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 2.3.0-3
|
|
|
b1b554 |
- rebuilt with new openssl
|
|
|
b1b554 |
|
|
|
b1b554 |
* Sun Aug 16 2009 Michal Schmidt <mschmidt@redhat.com> 2.3.0-2
|
|
|
b1b554 |
- Require libica-2.0.
|
|
|
b1b554 |
|
|
|
b1b554 |
* Fri Aug 07 2009 Michal Schmidt <mschmidt@redhat.com> 2.3.0-1
|
|
|
b1b554 |
- New upstream release 2.3.0:
|
|
|
b1b554 |
- adds support for RSA 4096 bit keys in the ICA token.
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Jul 21 2009 Michal Schmidt <mschmidt@redhat.com> - 2.2.8-5
|
|
|
b1b554 |
- Require arch-specific dependency on -libs.
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Jul 21 2009 Michal Schmidt <mschmidt@redhat.com> - 2.2.8-4
|
|
|
b1b554 |
- Return support for crypto hw on s390.
|
|
|
b1b554 |
- Renamed to opencryptoki.
|
|
|
b1b554 |
- Simplified multilib by putting libs in subpackage as suggested by Dan Horák.
|
|
|
b1b554 |
|
|
|
b1b554 |
* Tue Jul 21 2009 Michal Schmidt <mschmidt@redhat.com> - 2.2.8-2
|
|
|
b1b554 |
- Fedora package based on RHEL-5 package.
|