2515 lines
96 KiB
Plaintext
2515 lines
96 KiB
Plaintext
-------------------------------------------------------------------
|
|
Fri May 23 12:06:42 UTC 2025 - Bjørn Lie <bjorn.lie@gmail.com>
|
|
|
|
- Drop obsolete update-desktop-files BuildRequires and macro.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 3 13:02:14 UTC 2025 - Frederic Crozat <fcrozat@suse.com>
|
|
|
|
- Add gnome-keyring-register-login-keyring.patch: ensure login
|
|
keyring is properly registered (glgo#GNOME/gnome-keyring!78).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 20 10:17:13 UTC 2025 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Re-enable ssh-agent for now: the switch to gcr-ssh-agent seems
|
|
not to work without further work from the users. This needs to be
|
|
analyzed more before disabling this agent here (boo#1239816).
|
|
+ Pass -Dssh-agent=true to meson
|
|
+ Add openssh BuildRequires.
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 18 09:50:49 UTC 2025 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Update to version 48.0:
|
|
+ build: Disable ssh-agent by default (and related fixes).
|
|
+ Updated translations.
|
|
- Drop openssh BuildRequires: no longer needed, as the ssh-agent
|
|
comes from gcr-ssh-agent.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 3 15:07:59 UTC 2025 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Rebase gnome-keyring-bsc1039461-pam-man-page.patch.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Feb 14 08:46:58 UTC 2025 - Bjørn Lie <bjorn.lie@gmail.com>
|
|
|
|
- Update to version 48.beta:
|
|
+ secret-portal:
|
|
- Set a label for an application key
|
|
- Set xdg:schema for secrets
|
|
+ egg-secure-memory: Allocate enough space for the guard pointers
|
|
+ Fix several leaks found by asan
|
|
+ daemon: Randomize control directory in tests
|
|
+ meson:
|
|
- Bump minimal meson version to 1.0
|
|
- Bump minimal GLib version to 2.80
|
|
- Remove dependency on gcr-ui-3
|
|
+ build: Fix several deprecations
|
|
+ Updated translations
|
|
- Replace pkgconfig(gcr-3) with pkgconfig(gcr-base-3)
|
|
BuildRequires: following upstream changes.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jan 10 19:10:02 UTC 2025 - Bjørn Lie <bjorn.lie@gmail.com>
|
|
|
|
- Update to version 48.alpha:
|
|
+ build: Switch from autootools to Meson
|
|
+ pam: add check for stash password
|
|
+ ssh-agent: Don't ship autostart desktop if disabled
|
|
- Add meson BuildRequires and macros following upstreams port.
|
|
- Drop autotools and libtool BuildRequires, no longer needed.
|
|
- Disable gnome-keyring-bsc1039461-pam-man-page.patch, needs rebase
|
|
or dropping.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jul 12 17:06:25 UTC 2024 - Bjørn Lie <bjorn.lie@gmail.com>
|
|
|
|
- Update to version 46.2:
|
|
+ Don't use `bool` as variable name
|
|
+ autogoo: replace AC_HELP_STRING with AS_HELP_STRING
|
|
+ Default "automatically unlock" checkbox to false
|
|
+ build: Fix distcheck with systemd unit
|
|
+ rpc-layer: Fix undefined reference to g_strlcpy
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 15 08:14:42 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Pass --enable-ssh-agent to configure: the switch to gcr-ssh-agent
|
|
is not yet complete (glgo#GNOME/gnome-keyring#140).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 13 16:06:31 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Update to version 46.1:
|
|
+ ssh-agent: avoid deadlock when agent process dies before we
|
|
connect to it.
|
|
+ gkm: fix test-sexp with GCC 14.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 12 15:40:48 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Update to version 46.0:
|
|
+ build: Remove build with ssh component from default build
|
|
instructions.
|
|
+ main: Reduce scope of ssh_started variable.
|
|
+ desktop: Expand variables.
|
|
+ desktop: Remove obsolete Bugzilla entries.
|
|
+ configure.ac: Stop using deprecated pkgconfig variable in
|
|
p11-kit.
|
|
+ pkcs11: Don't use strncpy when copying paths.
|
|
+ daemon: Add socket files to EXTRA_DIST.
|
|
+ Updated translations.
|
|
- Switch to _service for easier upgrades.
|
|
- Add libtool BuildRequires: git checkout needs a proper bootstrao.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 28 12:08:36 UTC 2023 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Use %patch -p N instead of deprecated %patchN.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 25 12:47:47 UTC 2022 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Use %_pam_moduledir instead of %{_lib}/security (boo#1191034).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon May 23 15:02:17 UTC 2022 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Update to version 42.1:
|
|
+ daemon: Add files to EXTRA_DIST to fix distcheck.
|
|
- Changes from version 42.0:
|
|
+ secret-portal: Properly check the default keyring.
|
|
+ Build fixes.
|
|
+ ssh-agent: Fix crash by uninitialized GMutex.
|
|
+ fix looping off the end of the operations array.
|
|
+ readme: Mention libsecret instead of deprecated
|
|
libgnome-keyring.
|
|
+ daemon: Make it systemd-activatable through the control socket.
|
|
+ Updated translations.
|
|
- Add pkgcondfig(systemd) and pkgconfig(libsystemd) BuildRequires:
|
|
new dependencies.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 19 12:45:32 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Build without libcap-ng support (boo#1098245):
|
|
+ Pass --without-libcap-ng to configure.
|
|
+ Drop libcap-ng-devel BuildRequires.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 16 01:38:57 UTC 2021 - Stanislav Brabec <sbrabec@suse.com>
|
|
|
|
- Remove obsolete translation-update-upstream support
|
|
(jsc#SLE-21105).
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Apr 17 12:59:00 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Update to version 40.0:
|
|
+ Update libcap-ng capability handling.
|
|
+ UPdated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Apr 29 20:37:49 UTC 2020 - Michael Gorse <mgorse@suse.com>
|
|
|
|
- Enable FIPS patches on Leap (jsc#SLE-11880).
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 28 03:36:00 UTC 2020 - bjorn.lie@gmail.com
|
|
|
|
- Update to version 3.36.0:
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 28 03:35:50 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Update to version 3.35.90:
|
|
+ Use shorter strings for prompt titles.
|
|
+ pam: Provide more insight from pam_gnome_keyring about
|
|
unlocking.
|
|
+ Don't use GTimeVal/g_get_current_time().
|
|
+ Don't use g_type_class_add_private().
|
|
+ Build fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 28 03:35:01 CET 2020 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Update to version 3.35.1:
|
|
+ dbus: Implement secret portal backend.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 24 20:17:50 UTC 2020 - Cor Blom <cornelis@solcon.nl>
|
|
|
|
- According to the warning in the spec file baselibs.conf should be
|
|
updated when the scriptlet for pam-config is changed. This was
|
|
not done when the change was made to open the keyring also with
|
|
sddm (see boo#1167321).
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Jan 25 14:10:30 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- No longer recommend -lang: supplements are in use
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 30 09:50:54 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
|
|
|
|
- Update to version 3.34.0:
|
|
+ dbus-environment: Race fix in Setenv request to gnome-session.
|
|
+ egg: Request that secure memory not be dumped to disk.
|
|
+ Build and test fixes.
|
|
+ Updated translations.
|
|
- Refresh gnome-keyring-pam-auth-prompt-password.patch with quilt.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 2 12:31:09 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
|
|
|
|
- Update to version 3.31.91:
|
|
+ pam: fix daemon control file detection.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 21 10:46:15 UTC 2019 - bjorn.lie@gmail.com
|
|
|
|
- Update to version 3.31.90:
|
|
+ pam: lookup XDG_RUNTIME_DIR using get_any_env.
|
|
+ Reinstate pkcs11 module for specific programs.
|
|
+ Build fixes.
|
|
+ Updated translations.
|
|
- Rebase patches via refresh_patches service.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 11 20:46:00 UTC 2018 - Luiz Angelo Daros de Luca <luizluca@gmail.com>
|
|
|
|
- Allow pam to open keyring when using sddm
|
|
|
|
-------------------------------------------------------------------
|
|
Mon May 7 09:50:52 UTC 2018 - bjorn.lie@gmail.com
|
|
|
|
- Update to version 3.28.2:
|
|
+ Fix glitches in ssh-agent (bgo#795699).
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 23 22:28:49 UTC 2018 - hpj@suse.com
|
|
|
|
- Update gnome-keyring-bsc932232-use-libgcrypt-allocators.patch
|
|
to allow using more memory than the maximum lockable amount
|
|
(bsc#1085983).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 26 02:58:56 UTC 2018 - luc14n0@linuxmail.org
|
|
|
|
- Update to version 3.28.0.2:
|
|
+ Fix glitches in ssh-agent (bgo#794361, bgo#794368, bgo#794369,
|
|
bgo#794500, bgo#794631).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 20 17:24:03 UTC 2018 - dimstar@opensuse.org
|
|
|
|
- Unconditionally enable translation-update-upstream: on
|
|
Tumbleweed, this results in a NOP and for Leap in SLE paid
|
|
translations being used (boo#1086036).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 13 08:36:39 UTC 2018 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.28.0.1:
|
|
+ Fix linking with "-z defs" (bgo#794274).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 12 15:22:40 UTC 2018 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.28.0:
|
|
+ Fix TAP test driver.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 5 19:11:25 UTC 2018 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.27.92:
|
|
+ Wrap stock ssh-agent from OpenSSH (bgo#775981).
|
|
+ Stop installing p11-kit configuration file for the PKCS#11
|
|
module (bgo#791401).
|
|
+ Updated translations.
|
|
- Add openssh BuildRequires: needed for ssh-agent wrapper.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Feb 28 16:28:28 UTC 2018 - dimstar@opensuse.org
|
|
|
|
- Modernize spec-file by calling spec-cleaner
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jan 12 03:15:36 UTC 2018 - luc14n0@linuxmail.org
|
|
|
|
- Update to version 3.27.4:
|
|
+ Add support for SHA2 extension for RSA signatures in ssh-agent
|
|
(bgo#790910).
|
|
+ Build fixes (bgo#792278, bgo#787387).
|
|
+ Updated translations.
|
|
- Rebase gnome-keyring-pam-auth-prompt-password.patch.
|
|
- Adopt the use of %make_build macro rather than raw make command,
|
|
following the best practices.
|
|
- Drop intltool BuildRequires: after upstream porting to Gettext,
|
|
this is no longer needed.
|
|
- Point fdupes to the data directory instead of the build root,
|
|
which is a practice that must be avoided.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Nov 10 18:03:36 UTC 2017 - luc14n0@linuxmail.org
|
|
|
|
- Update to version 3.27.2:
|
|
+ Add support for ECDSA in ssh-agent (bgo#641082).
|
|
+ Wipe passwords stored by the PAM module (bgo#781486).
|
|
+ Fix:
|
|
- Shared key derivation between libsecret and gnome-keyring
|
|
(bgo#778357).
|
|
- Erroneous handling of partial writes in write_sync_close
|
|
(bgo#778269).
|
|
+ Set CKF_LOGIN_REQUIRED flag in ssh-module.
|
|
+ Build and testing fixes (bgo#774312, bgo#781785).
|
|
+ Updated translations.
|
|
- Update Url to https://wiki.gnome.org/Projects/GnomeKeyring:
|
|
current GNOME Keyring's project web page.
|
|
- Add conditional use to translation-update-upstream: SLE-only
|
|
requirement.
|
|
- Drop gnome-keyring-secret-size.patch: fixed upstream.
|
|
- Drop pristine macros for choosing number of jobs in %build
|
|
section and adopting %{?_smp_mflags} instead.
|
|
- Drop %glib2_gsettings_schema_*, %desktop_database_* post/postun
|
|
scriptlets and %glib2_gsettings_schema_requires macro: the
|
|
functionality is covered by file triggers now.
|
|
- Drop %clean section since its use is deprecated now.
|
|
- Separate SLE-only patches from the others. Now they start at the
|
|
number 1000.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jul 20 19:43:27 UTC 2017 - mgorse@suse.com
|
|
|
|
- Drop unneeded part of
|
|
gnome-keyring-bsc932232-use-non-fips-md5.patch, to match what we
|
|
have in SLE.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 17 15:28:16 UTC 2017 - dimstar@opensuse.org
|
|
|
|
- Add gnome-keyring-secret-size.patch: Ensure that generated secret
|
|
occupies the same number of bytes as prime. Eliminates random
|
|
errors while libsecret tries to talk to gnome-keyring
|
|
(bgo#778357, bsc#1043861).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 4 10:35:51 UTC 2017 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.20.1:
|
|
+ Fix boolean logic error in ssh-agent.
|
|
+ Pass the correct argc to gkr_pam_client_run_operation
|
|
(bgo#766222).
|
|
+ Look for both dlopen and dlsym when configuring (bgo#766221).
|
|
+ Fix .so link in gnome-keyring-3 man page (bgo#767095).
|
|
+ Die if the XDG session we were started under goes away
|
|
(bgo#768943).
|
|
+ Shorten unlock keyring dialog title (bgo#770170).
|
|
+ Updated translations.
|
|
- Drop gnome-keyring-896818-reduce-head-msg-length.patch: Fixed
|
|
upstream.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 21 18:46:54 CEST 2017 - hpj@suse.com
|
|
|
|
- Add gnome-keyring-bsc1039461-pam-man-page.patch (bsc#1039461,
|
|
bgo#784051), which adds a man page for the PAM module. In order
|
|
for a new Makefile.in to be generated from the patched
|
|
Makefile.am, automake was added to BuildRequires, and autoreconf
|
|
will now be run prior to configure.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 6 14:52:32 CEST 2016 - hpj@suse.com
|
|
|
|
- Update gnome-keyring-bsc932232-use-non-fips-md5.patch to fix
|
|
issue that was reintroduced (bsc#966229, bsc#966225, bsc#994988).
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Aug 20 14:32:13 UTC 2016 - fezhang@suse.com
|
|
|
|
- Merge
|
|
bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
|
|
into gnome-keyring-896818-reduce-head-msg-length.patch:
|
|
bsc#903966 is just a regression caused by bsc#896818 anyway
|
|
(bsc#896818, bsc#903966, bgo#770170).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu May 5 01:43:01 CEST 2016 - hpj@suse.com
|
|
|
|
- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
|
|
version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
|
|
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
|
|
upstream).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Mar 25 13:14:28 UTC 2016 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.20.0:
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 3 01:35:32 CET 2016 - hpj@suse.com
|
|
|
|
- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
|
|
(bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
|
|
keys and corruption in stored keyrings. Fix by Michal Koutny
|
|
<michal.koutny@suse.com>.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Feb 17 14:43:23 UTC 2016 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.19.90:
|
|
+ Accept empty passwords for --unlock (bgo#762095).
|
|
+ srcdir != builddir fixes.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 19 12:59:21 UTC 2016 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.19.4:
|
|
+ Fix up startup and initialization (bgo#756324).
|
|
+ Fix DBus "Type" property of org.freedesktop.Secret.Item
|
|
(bgo#759399).
|
|
+ Build fixes (bgo#753698).
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 19 12:01:06 UTC 2016 - dimstar@opensuse.org
|
|
|
|
- boo#962480: Add mdm as valid display manager to unlock gkr.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 12 23:24:31 CET 2016 - hpj@suse.com
|
|
|
|
- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
|
|
This fixes a crash caused by mixed calls to egg_secure_free()
|
|
and gcry_free().
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 26 02:57:11 CET 2015 - hpj@suse.com
|
|
|
|
- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
|
|
gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Oct 31 00:09:15 UTC 2015 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.18.3:
|
|
+ Fix regression looking up secrets in non-default keyring
|
|
(bgo#756865).
|
|
+ Fix manpage typos (bgo#756812).
|
|
+ Updated translations.
|
|
- Drop
|
|
gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
|
|
Fixed upstream.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Oct 26 00:01:46 UTC 2015 - zaitor@opensuse.org
|
|
|
|
- Add
|
|
gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
|
|
Fix firefox passwordmanager coupled with non-default keyring,
|
|
also silence a bit of logspam (bgo#756865).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 20 15:36:20 UTC 2015 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.18.2:
|
|
+ Fix regression in ported GDBus prompting (bgo#756032).
|
|
+ Other minor fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Oct 17 06:05:33 UTC 2015 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.18.1:
|
|
+ Fix regression initializing gnome-keyring-daemon (bgo#756059).
|
|
+ Fix regression racing for DBus name during startup
|
|
(bgo#756006).
|
|
+ Build and testing fixes (bgo#755873).
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 29 10:05:37 UTC 2015 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.18.0:
|
|
+ Fix test crash (bgo#731802).
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Sep 5 11:40:45 UTC 2015 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.17.91:
|
|
+ More fixes for GDBus migration (bgo#622905).
|
|
+ Fix a memory leak (bgo#752919).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 12 18:12:14 UTC 2015 - zaitor@opensuse.org
|
|
|
|
- Remove postun handling from baselibs.conf. If one uninstalls
|
|
gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
|
|
gets unregistered (boo#941736).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 4 09:54:07 UTC 2015 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.17.4:
|
|
+ Remove temporary files on failure (bgo#746334).
|
|
+ Migrate DBus code to GVariant and GDBus (bgo#622905).
|
|
+ Remove the GnuPG agent (bgo#750514).
|
|
+ Updated translations.
|
|
- Remove %bcond_with gpgagent and all related macros, it has been
|
|
dropped upstream.
|
|
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
|
|
upstream has migrated it away.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Apr 8 18:28:46 UTC 2015 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.16.0:
|
|
+ Fix build issues highlighted by GCC 5.x.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 19 11:52:34 UTC 2015 - dimstar@opensuse.org
|
|
|
|
- Disable gpgagent integration, as gnupg 2.1 introduced code to
|
|
explicitly sabotage gnome-keyring.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Mar 18 08:25:49 UTC 2015 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.15.92:
|
|
+ pam: Make sure to never block SIGCHLD (bgo#745673).
|
|
+ Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Feb 25 22:21:31 UTC 2015 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.15.90:
|
|
+ Fix leaks (bgo#7385080).
|
|
+ Refactoring.
|
|
+ Build fixes (bgo#740190).
|
|
+ Updated translations.
|
|
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
|
|
these libs have been split off back in 2011.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Nov 09 03:51:00 UTC 2014 - Led <ledest@gmail.com>
|
|
|
|
- fix bashism in postun script
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Nov 7 09:30:13 UTC 2014 - rlmu@suse.com
|
|
|
|
- Add
|
|
bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
|
|
Fixed SEGV in gnome-keyring-daemon caused by calling free() on
|
|
static string (bnc#903966).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 23 10:09:20 UTC 2014 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.14.0:
|
|
+ Remove residual GTK+ usage.
|
|
+ Build fixes.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 22 18:51:55 UTC 2014 - dliang@suse.com
|
|
|
|
- Add gnome-keyring-896818-reduce-head-msg-length.patch:
|
|
Make the head message shorter. The patch makes sense but no need
|
|
to be upstream (bnc#896818).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 9 18:44:45 UTC 2014 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.13.91:
|
|
+ Initialize correctly with empty passwords during login
|
|
(bgo#736085).
|
|
+ Don't use geteuid() to get UID for user in PAM module
|
|
(bgo#733418).
|
|
+ Fix for libgcrypt 1.6+.
|
|
+ Build fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat May 17 08:26:55 UTC 2014 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.12.2:
|
|
+ Build fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Mar 23 15:20:48 UTC 2014 - zaitor@opensuse.org
|
|
|
|
- Update to version 3.12.0:
|
|
+ Build and testing fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 17 08:22:43 UTC 2014 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.11.92:
|
|
+ Use $XDG_RUNTIME_DIR to create keyring socket directory
|
|
(bgo#725801).
|
|
+ Stop exporting the $GNOME_KEYRING_CONTROL env variable
|
|
(bgo#725801).
|
|
+ Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
|
|
+ Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
|
|
(bgo#726196).
|
|
+ Fix issue with changed password not unlocking keyring
|
|
(bgo#726196).
|
|
+ Add new --unlock option to prompt for login password
|
|
(bgo#710187).
|
|
+ When in foreground mode, close stdout when done initializing.
|
|
+ Exit gnome-keyring-daemon when the DBus connection closes
|
|
(bgo#708765).
|
|
+ Don't initialize in an idle handler, this is racy.
|
|
+ Don't log debug messages to syslog (bgo#711537).
|
|
+ Documentation fixes (bgo#711581).
|
|
+ License fixes (bgo#721549).
|
|
+ Modernize autotools setup and other build fixes.
|
|
+ Parallel testing and add new tests.
|
|
+ Updated translations.
|
|
- Drop gnome-keyring-check-session.patch: no longer required; the
|
|
start of the daemon is controlled by pam (OnlyIf=).
|
|
- Rebase gnome-keyring-pam-auth-prompt-password.patch.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Feb 8 07:27:00 UTC 2014 - jdelvare@suse.com
|
|
|
|
- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
|
|
the list of handled desktop session types (bnc#862775).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 17 06:51:36 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.10.1:
|
|
+ Build fix on OpenBSD (bgo#706405).
|
|
+ Add manual page.
|
|
+ Minor error message fixes.
|
|
+ Updated translations.
|
|
- Add gtk-doc BuildRequires: needed to build the man page.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Sep 28 17:04:06 UTC 2013 - meissner@suse.com
|
|
|
|
- If libp11-kit0-XXbit and gnome-keyring are installed, also
|
|
suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
|
|
both 32bit and 64bit modules (fixes a Wine 32bit issue during
|
|
gnutls init).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 23 20:13:08 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.10.0:
|
|
+ Minor logic fix (bgo#708483).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 11 17:54:19 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
|
|
provides (part of bnc#828387).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 26 17:05:24 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.9.90:
|
|
+ Fix running gnome-keyring-daemon under test harness.
|
|
+ Test fixes (bgo#702367).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 19 20:04:38 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Introduce %bcond_without gpgagent: allow to disable gpg agent
|
|
during build to easily test issues like bnc#829844.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon May 13 21:15:13 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
|
|
(bnc#819246).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 1 08:16:40 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.9.1:
|
|
+ Fix implementation of LockService dbus method (bgo#690466).
|
|
+ Build fixes.
|
|
+ Updated translations.
|
|
- Drop pkgconfig(libtasn1) BuildRequires: no longer needed.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Apr 16 08:49:13 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.8.1:
|
|
+ Updated trasnlations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 25 11:41:03 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.8.0:
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 18 08:37:21 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.7.92:
|
|
+ Update introspection data of Collection.SearchItems()
|
|
(bgo#695115).
|
|
+ Update the Item.Created and Item.Modified properties correctly
|
|
(bgo#695052).
|
|
+ Build fixes.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 4 20:10:33 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.7.91:
|
|
+ Remove the roots-store module replaced by p11-kit 0.16+ trust
|
|
module.
|
|
+ Only return one object path list from Collection.SearchItems()
|
|
(bgo#695115).
|
|
+ Fix order of items returned from SearchItems() (bgo#693884).
|
|
+ Build fixes.
|
|
- No longer pass --with-ca-certificates to configure: it's been
|
|
obsoleted in favor of the p11-kit trust module.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 2 10:32:00 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.7.5:
|
|
+ Set correct type for Collection's "Locked" property.
|
|
+ Don't warn if the GNOME session manager is not available.
|
|
+ Fix crasher in armor code.
|
|
+ Build fixes.
|
|
+ Upadted translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 2 10:31:00 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.7.2:
|
|
+ Bring over DER parsing fixes from GCR library.
|
|
+ Fix corner case where long DER length overflows.
|
|
+ Fix crash when parsing invalid DER files.
|
|
+ Handle empty secrets correctly.
|
|
+ Only print debug message if no pkcs11 socket.
|
|
+ Other minor fixes.
|
|
+ More complete test coverage.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 2 10:30:00 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.7.1:
|
|
+ Remove dependency on GTK+.
|
|
+ Build fixes.
|
|
- Drop pkgconfig(gtk+-3.0) BuildRequires: no longer needed.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 2 10:27:47 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.6.3:
|
|
+ Don't reverse the order of items returned from SearchItems().
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 13 12:46:32 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.6.2:
|
|
+ Accept XDG_DATA_HOME environment variable during initialization
|
|
+ Handle empty secrets correctly.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 16 07:12:49 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.6.1:
|
|
+ Fix regressions with keyring master password changing
|
|
+ Load schema for secret items correctly, prevents storing
|
|
multiple times for items stored via libsecret
|
|
+ Setup translations properly when daemon starts
|
|
+ Fix memory leak in PKCS#11 module
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Sep 29 23:37:43 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Drop set_permission and verify_permissions scripts:
|
|
gnome-keyring-daemon is not installed with special permissions
|
|
and does not need special handling (bnc#781891).
|
|
- Drop permissions PreReq: we don't need to handle any special
|
|
permissions on files.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 25 15:40:30 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.6.0:
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 18 15:08:59 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.5.92:
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 3 09:32:26 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.5.91:
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 22 22:37:11 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.5.90:
|
|
+ Use the XDG directories for storing keys
|
|
+ Better handling of the --replace argument to
|
|
gnome-keyring-daemon
|
|
+ Fix ability to store keyring files without using hardlinks
|
|
+ Make the GPG agent password caching options work correctly
|
|
+ Updated translations.
|
|
- Drop gnome-keyring-bnc775235-passphrase-cache.patch: fixed
|
|
upstream.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 22 22:36:26 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.5.5:
|
|
+ Initialize PKCS#11 correctly in gnome-keyring tool.
|
|
+ Rename the p11-kit module file.
|
|
+ Use setsid() to become a process leader when daemonizing.
|
|
+ Build fixes.
|
|
- Changes from version 3.5.4:
|
|
+ Support the xdg:schema attribute on secret items.
|
|
+ Update to newer glib dependency and remove redundant code.
|
|
+ Encode passwords correctly for gpg2 in the gpg-agent.
|
|
+ Fix types of the DBus Created and Modified properties.
|
|
+ Expose the 'session' and 'login' keyrings as aliases.
|
|
+ Emit Secret Service signals when collections/items change.
|
|
+ Fix some spurious warnings.
|
|
+ Testing fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 22 22:35:03 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.5.3:
|
|
+ Return correct introspect data for Secret Service
|
|
+ Fix the gnome2-store for gcr importer, and test
|
|
+ Debug and logging fixes
|
|
+ Build fixes
|
|
+ Updated translations.
|
|
- Drop xz BuildRequires as it now comes for free in the build
|
|
system.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 22 22:25:40 UTC 2012 - sreeves@suse.com
|
|
|
|
- Add gnome-keyring-bnc775235-passphrase-cache.patch:
|
|
+ Fix gnome-keyring:Passwords cached indefinitely (bnc#775235,
|
|
CVE-2012-3466).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Apr 17 06:34:07 UTC 2012 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.4.1:
|
|
+ Set 'text/plain' content type on secrets returned from daemon
|
|
+ Use correct XDG_RUNTIME_DIR when started from PAM
|
|
+ License fix
|
|
+ More tests
|
|
+ Build fixes
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 26 13:50:13 UTC 2012 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.4.0:
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 20 16:45:53 UTC 2012 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.3.92:
|
|
+ Use runtime dir instead of /tmp for sockets.
|
|
+ Fix copyright headers.
|
|
+ Build fixes.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 12 09:15:24 UTC 2012 - vuntz@opensuse.org
|
|
|
|
- Pass --with-ca-certificates=%{_sysconfdir}/ssl/ca-bundle.pem
|
|
instead of --with-root-certs=%{_sysconfdir}/ssl/certs to
|
|
configure: it's better to use the single ca certificates file
|
|
than the directory with all certificates, as it's what upstream
|
|
prefers.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Mar 9 19:08:31 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.3.91:
|
|
+ Fix regression in changing a keyring master password
|
|
+ Set better button labels for the prompts
|
|
+ Fix assertion when cancelling a unlock prompt
|
|
+ Use a single CA certificates file by default
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Feb 5 21:17:55 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.3.5:
|
|
+ Fix introspection data for SearchItems()
|
|
+ Fix regression when an invalid password used to unlock keyring
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 16 16:52:29 UTC 2012 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.3.4:
|
|
+ Build fixes
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 21 13:52:43 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.3.3.1:
|
|
+ No message in gnome-keyring-pkcs11.so module, when no daemon
|
|
running
|
|
+ Build fixes
|
|
+ Updated translations.
|
|
- Drop gnome-keyring-fix-build.patch: fixed upstream.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Dec 19 12:39:04 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.3.3:
|
|
+ Distribute correct desktop autostart files
|
|
+ Use GcrPrompt and GcrSystemPrompt for prompting
|
|
+ Do not crash when reading a truncated keyring file
|
|
+ Add test tool for dumping the keyring format
|
|
+ Update for GckBuilder changes in libgck
|
|
+ Fix for deprecations in glib 2.31.x
|
|
+ Fix ReadAlias() returning null when 'login' keyring exists
|
|
+ Build fixes, bug fixes
|
|
- Add xz BuildRequires because we can't build a package for a
|
|
xz-compressed tarball without explicitly specifying that... See
|
|
bnc#697467 for more details.
|
|
- Add gnome-keyring-fix-build.patch: add some libraries during
|
|
linkage, to fix build; taken from git.
|
|
- Change libgck Requires in libgck-modules-gnome-keyring to gck:
|
|
this is a new Provides in libgck to help us for this Requires, so
|
|
we don't have a Requires on a shared library package, whose name
|
|
can change. Note that we don't version the Requires: there's no
|
|
reason for this.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Nov 28 16:41:37 UTC 2011 - dimstar@opensuse.org
|
|
|
|
- Fix libgck Requires in libgck-modules-gnome-keyring: as libgck
|
|
got split out, we can't assume any longer that the version will
|
|
always be the same as the one of the main package. For now at
|
|
least we assume that we can maintain the library name.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Nov 21 13:46:07 UTC 2011 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.3.2:
|
|
+ Do not make label selectionnable in prompt dialog
|
|
+ Fix deadlock in the 'unsafe storage' prompt
|
|
+ Better locking for the old gnome2-store
|
|
+ Build fixes
|
|
+ Updated translations.
|
|
- Drop gnome-keyring-remove-xfce-lxde-autostart.patch: fixed
|
|
upstream.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 8 20:38:22 UTC 2011 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.3.1.1:
|
|
+ Build correctly against glib 2.31
|
|
- Changes from version 3.3.1:
|
|
+ Return most recent secret first when searching
|
|
+ Split the Gcr and Gck libraries out of gnome-keyring
|
|
+ Build fixes
|
|
+ Updated translations.
|
|
- Rebase gnome-keyring-remove-xfce-lxde-autostart.patch.
|
|
- Remove BuildRequires that have moved to the new gcr source
|
|
package: shared-mime-info, pkgconfig(p11-kit-1).
|
|
- Add pkgconfig(gck-1) and pkgconfig(gcr-3) BuildRequires: newly
|
|
depend on the split out library,
|
|
- Drop libgcr-3-1, libgcr-devel, libgck-1-0 and libgck-devel
|
|
subpackages: upstream split the libraries out.
|
|
- Rename libgck-modules to libgck-modules-gnome-keyring: since
|
|
libgck is split away from gnome-keyring, we cannot use a generic
|
|
package name like this anymore. Add appropriate Obsoletes, but
|
|
no Provides as there could be another libgck-modules package
|
|
appearing in the future.
|
|
- Stop calling %mime_database_post(un) in %post/%postun and stop
|
|
passing --disable-update-mime to configure: the mime definition
|
|
moved to the gcr source package.
|
|
- Add missing calls to %desktop_database_post(un) in %post/%postun.
|
|
- Use grep -F instead of deprecated fgrep in %post of pam
|
|
subpackage.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 8 09:08:49 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Add pam-config calls in %post/%postun for gnome-keyring-pam in
|
|
baselibs.conf: when pam-32bit is installed, pam-config checks if
|
|
the 32bit version of the module is installed before enabling it,
|
|
and if we install from scratch, this is not necessarily true when
|
|
gnome-keyring-pam is installed. Fix bnc#728586.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Oct 23 11:03:09 UTC 2011 - gber@opensuse.org
|
|
|
|
- Fixed gnome-keyring-remove-xfce-lxde-autostart.patch which was
|
|
ineffective since it modified the .in rather than the .in.in
|
|
files
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Oct 17 21:36:21 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.2.1:
|
|
+ Fix debugging output, and erroneous warnings
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Oct 3 07:10:08 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Add explicit shared-mime-info BuildRequires since we use the
|
|
%mime_database_* macros.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 26 07:45:14 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.2.0:
|
|
+ Don't install setuid when filesystem capabilities not available
|
|
+ Updated translations.
|
|
- Update summary to not talk about password manager: this is really
|
|
the keyring, which is more than just a password manager.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 20 12:21:21 UTC 2011 - gber@opensuse.org
|
|
|
|
- Do not start the gnome-keyring daemon for LXDE or Xfce via XDG
|
|
autostart, that only works with gnome-session.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Sep 18 08:16:25 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.1.92:
|
|
+ Add back the file format "documentation".
|
|
+ Make .desktop file match prompt process so icon and title are
|
|
shown.
|
|
+ Fix packaging issues installing the pkcs11 module.
|
|
+ Return correct error code in gpg-agent for unimplemented stuff.
|
|
+ Fixes for parsing/viewing various (sometimes slightly invalid)
|
|
PKCS#12 files.
|
|
+ Allow daemon to access secrets of internal PKCS#11 modules, so
|
|
that we can do things like hash NTLM and Kerberos secrets in
|
|
the future.
|
|
+ Build and documentation fixes.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Sep 9 08:22:04 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Update pam module and pam module configuration for the new gdm
|
|
(>= 3.1.90), which uses both gdm and gdm-password pam services:
|
|
+ Update gnome-keyring-check-session.patch: check if the service
|
|
is called gdm-password too.
|
|
+ Change pam-config call in %post to add gdm-password in
|
|
--gnome_keyring-only_if option.
|
|
- gnome-keyring-check-session.patch: also remove support for the
|
|
smeegol session, since Smeegol is dead.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 5 06:28:10 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.1.91:
|
|
+ gcr-viewer will now display errors when failing to load a file.
|
|
+ gcr-viewer can now prompt for passwords to unlock files.
|
|
+ Add support for getting the current data block being parsed in
|
|
GcrParser.
|
|
+ Add debug output to various points in the GCR and GCK
|
|
libraries.
|
|
+ When replacing another gnome-keyring-daemon, wait a moment
|
|
before initializing.
|
|
+ Fix GCR library initialization bugs loading PKCS#11 modules.
|
|
+ Fine tuning of GcrParser when parsing PKCS#12 files.
|
|
+ Build and packaging fixes.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 1 13:31:59 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.1.90:
|
|
+ Install better xdg-mime files for identifying crypto related
|
|
file types
|
|
+ New gcr-viewer for viewing certificates and keys, hooked up to
|
|
file types
|
|
+ Display tweaks for the certificate and key widgets
|
|
+ Don't initialize PKCS#11 modules automatically in gcr library
|
|
unless needed.
|
|
+ Cleanup the libgck API since we're bumping the major version.
|
|
+ ABI fixes for the GCR library for changes in the 3.1.x release
|
|
cycle
|
|
+ New automatic checks for symbols that have changed in the ABI
|
|
+ Add async PKCS#11 initialization functions to libgck
|
|
+ Display Certificate otherName subject-alt-name for xmppAddr and
|
|
DNS SRV
|
|
+ Documentation, testing, translation and build fixes.
|
|
- Pass --disable-update-mime to configure and add
|
|
%mime_database_post/%mime_database_postun to %post/%postun
|
|
scriptlets for the new gcr-crypto-types.xml MIME file.
|
|
- Rename libgcr-3-0 to libgcr-3-1 after library version change.
|
|
- Remove gtk-doc BuildRequires and call to libtoolize and
|
|
autoreconf: there is no patch needing that.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 26 08:01:30 UTC 2011 - gber@opensuse.org
|
|
|
|
- Add LightDM support for the pam module:
|
|
+ Update gnome-keyring-check-session.patch: add support for
|
|
LightDM.
|
|
+ Change pam-config call in %post to add lightdm in
|
|
--gnome_keyring-only_if option.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 25 14:54:39 CEST 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 3.1.4:
|
|
+ New GcrListSelector class for selecting multiple keys.
|
|
+ Add icons for key and key pair.
|
|
+ Gcr now has support for loading of GnuPG keys from gpg,
|
|
including photos.
|
|
+ New gcr dependency on p11-kit for loading PKCS#11 modules.
|
|
+ Remove support for GTK+ 2.x.
|
|
+ Implement calculation of fingerprints in gcr for keys.
|
|
+ Fix problems in daemon if IPC lock or FS capabilities are not
|
|
available.
|
|
+ Bug fixes and build fixes.
|
|
+ Code cleanup and refactoring.
|
|
- Drop gnome-keyring-keep-only-ipc_lock.patch and
|
|
gnome-keyring-accept-no-ipc_lock.patch: fixed upstream.
|
|
- Add pkgconfig(p11-kit-1) BuildRequires, for new dependency.
|
|
- Add libselinux-devel BuildRequires, to build SELinux support.
|
|
- Remove --with-gtk=3.0 from configure, as GTK+ 2.x support was
|
|
removed.
|
|
- Rename libgck0 to libgck-1-0, following soname change.
|
|
- Rename libgcr-3-1 back to libgcr-3-0, following soversion revert.
|
|
- Call %icon_theme_cache_post/%icon_theme_cache_postun in
|
|
libgcr-3-0 scriptlets, since the package now comes with icons.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu May 26 23:44:45 CEST 2011 - vuntz@opensuse.org
|
|
|
|
- Update baselibs.conf with package names after 3.0 update.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue May 17 18:30:10 CEST 2011 - dimstar@opensuse.org
|
|
|
|
- Update to version 3.1.1:
|
|
+ Add 'Export Certificate' option to right click of certificate
|
|
widget.
|
|
+ Use file system linux capabilities for memory locking.
|
|
+ Set correct daemon SELinux context when started from PAM module
|
|
+ Fix assertions in parser.
|
|
+ Add GcrCollection interface to represent collections of objects
|
|
+ Add GcrGnupgCollection to libgcr.
|
|
+ Implement functionality in renderers to populate GtkTreeModel
|
|
+ Add a GcrSelector widget.
|
|
+ Cleanup unregistering from session.
|
|
+ Build fixes.
|
|
+ Updated translations.
|
|
- Drop gnome-keyring-fix-parallel-build.patch and
|
|
gnome-keyring-file-capabilities.patch: fixed upstream.
|
|
- Rename libgcr-3-0 subpackage to libgcr-3-1 following soversion
|
|
change.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu May 5 19:57:53 CEST 2011 - vuntz@opensuse.org
|
|
|
|
- Handle specific permissions for %{_bindir}/gnome-keyring-daemon:
|
|
+ Add permissions PreReq.
|
|
+ Add %set_permissions %{_bindir}/gnome-keyring-daemon to %post.
|
|
+ Add a %verifyscript scriptlet calling %verify_permissions.
|
|
- Do not package %{_bindir}/gnome-keyring-daemon with filesystem
|
|
capabilities: the security team will add what is needed via
|
|
%set_permissions after a review of the code.
|
|
- Drop rpmlintrc file as we don't need it anymore, since we have no
|
|
setuid binary nor capabilities.
|
|
- Add gnome-keyring-keep-only-ipc_lock.patch: when filesystem
|
|
capabilities are used, make sure that we do have ipc_lock and
|
|
keep only this one.
|
|
- Add gnome-keyring-accept-no-ipc_lock.patch: accept to run without
|
|
ipc_lock capability, just print a warning instead of aborting.
|
|
- This is part of bnc#682244.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon May 2 14:01:10 UTC 2011 - fcrozat@novell.com
|
|
|
|
- Add gnome-keyring-file-capabilities.patch: Use libcap-ng for file
|
|
capabilities (from git, see rh#668831).
|
|
- Use libcap-ng-devel BuildRequires instead of libcap-devel
|
|
- Add gtk-doc BuildRequires, only needed because of the new patch.
|
|
- gnome-keyring-daemon is now using cap_ipc_lock=ep instead of
|
|
setuid.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Apr 27 09:42:44 UTC 2011 - fcrozat@novell.com
|
|
|
|
- Update to version 3.0.1:
|
|
+ Fix clicking buttons in 'unsafe storage' dialog on GTK+3.
|
|
+ Build with GTK+3 by default.
|
|
+ More tests and test fine tuning: --enable-tests=yes/no/full.
|
|
+ Expand path in gnome-keyring-prompt.desktop properly.
|
|
+ Implement debug tracing in parts of gcr library.
|
|
+ Complete documentation in gcr and gck libraries.
|
|
+ Fix assertions in gcr library during parsing of a stream.
|
|
+ Build fixes.
|
|
- Add gnome-keyring-fix-parallel-build.patch to fix parallel build
|
|
(from git).
|
|
- Remove libmock-test-module.so in %install, as this is only useful
|
|
for tests.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 25 13:06:18 CEST 2011 - vuntz@opensuse.org
|
|
|
|
- Add the rpmlintrc that was added as workaround until bnc#682244
|
|
is fixed (security review) as a source.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 4 13:23:15 UTC 2011 - fcrozat@novell.com
|
|
|
|
- Update to version 3.0.0:
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 22 10:12:34 UTC 2011 - fcrozat@novell.com
|
|
|
|
- Update to version 2.91.93:
|
|
+ Use full interface.Property form for CreateCollection and
|
|
CreateItem in the DBus API.
|
|
+ Add deprecated functions for libgcr symbols lost since 2.32.x
|
|
+ Don't crash when the GPG agent is asked for a passhprase
|
|
without a key id.
|
|
- Changes from version 2.91.92:
|
|
+ Don't leak login name from PAM when logging error.
|
|
+ Also start daemon in XFCE
|
|
+ Fix inability to save password for other keyrings.
|
|
+ Build and test fixes.
|
|
+ Support removal of aliases via the secret service API
|
|
+ Fix race condition when multiple applications create the
|
|
default keyring at the same time.
|
|
+ Add a desktop file for gnome-keyring-prompt, so the icon shows
|
|
up properly in gnome-shell.
|
|
+ Implement HKDF for transport encryption security.
|
|
- Changes from version 2.91.91:
|
|
+ Fix the certificate details expander when used with GTK+3
|
|
+ Calculate the minimum/natural size of the certificate widget
|
|
better.
|
|
+ Fix gnome-keyring-prompt for GTK+3 release.
|
|
+ Fix problems with the URIs used for trust lookup and storage.
|
|
+ Pass around a content-type for secrets in the DBus Secret
|
|
Service API.
|
|
+ If DBus couldn't be initialized when starting up the daemon,
|
|
try again at a later point.
|
|
+ Build and testing fixes.
|
|
+ Remove support for the pkcs11-options file, and wait for a
|
|
proper configuration file setup being worked on in p11-kit.
|
|
+ Add support for --version argument to gnome-keyring-daemon and
|
|
gnome-keyring.
|
|
+ Create necessary directory when storing trust assertion
|
|
objects.
|
|
- Changes from version 2.91.4:
|
|
+ gck library loads PKCS#11 modules from /usr/lib/pkcs11
|
|
+ PKCS#11 config file in /etc/xdg/pkcs11.conf[.defaults]
|
|
+ Many ASN.1 encoding fixes.
|
|
+ Refactor how tests work.
|
|
+ Install standalone PKCS#11 modules to a consistent location.
|
|
+ Memory leaks and other bug fixes.
|
|
+ Allow enumeration of objects in specific PKCS#11 slots as well
|
|
as modules.
|
|
+ Add GcrCertificateChain for building certificate chains.
|
|
+ Implementation of the initial PKCS#11 Trust Assertions spec.
|
|
+ Add GcrPkcs11Certificate for looking up certificates in PKCS#11
|
|
modules by issuer.
|
|
+ Expose gcr functionality for setting which PKCS#11 modules to
|
|
use.
|
|
+ Find the root certificates by default.
|
|
+ Move to a single header model for libgcr.
|
|
+ Don't load *.la files when looking for PKCS#11 modules.
|
|
+ Fixes for GTK+3.0
|
|
+ New xdg-store PKCS#11 module with support for storing trust
|
|
assertions.
|
|
+ Rename old user-store to gnome2-store since it stores its data
|
|
in old formats in the old .gnome2 location.
|
|
- Replace gnome-keyring-autostart-in-xfce.patch with
|
|
desktop-file-install calls. Add desktop-file-utils BuildRequires
|
|
for this.
|
|
- Add support for source service checkout, with %BUILD_FROM_VCS:
|
|
+ Add gnome-common and gtk-doc BuildRequires.
|
|
+ Add call to ./autogen.sh.
|
|
+ Enforce gtk-doc html generation by passing --enable-gtk-doc to
|
|
configure.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 29 14:54:55 UTC 2010 - gber@opensuse.org
|
|
|
|
- Update gnome-keyring-check-session.patch to add support for Xfce
|
|
sessions.
|
|
- Add gnome-keyring-autostart-in-xfce.patch to autostart
|
|
gnome-keyring in XFCE sessions.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Dec 17 12:06:16 CET 2010 - vuntz@opensuse.org
|
|
|
|
- Update to version 2.91.3:
|
|
+ Shutdown module timer when holding proper mutex.
|
|
+ Linux capabilities to overcome limits on locked memory.
|
|
+ Update HACKING with coding style
|
|
+ Build fixes.
|
|
- Changes from version 2.91.2:
|
|
+ Add timeout if PAM startup doesn't complete shortly.
|
|
+ Fix login keyring password when it doesn't match unix login.
|
|
+ Replace gp11-0 with gck in pkgconfig file
|
|
+ Fix broken dispose of GcrCertificateWidget
|
|
+ Remove gp11 library.
|
|
- Changes from version 2.91.1:
|
|
+ Fix build problem in gpg-agent.
|
|
+ Properly distribute pkgconfig file for gck library.
|
|
+ Better certificate widget in gcr library.
|
|
+ Add extra debug guard around printing of prompt io.
|
|
+ Rework how the gcr parser and importer work together.
|
|
+ More GTK+ 3.0 fixes.
|
|
- Changes from version 2.91.0:
|
|
+ String and punctuation fixes.
|
|
+ Add libgck library to soon replace libgp11
|
|
+ Migrate everything in gnome-keyring to libgp11
|
|
+ Fix invalid memory access in PKCS#11 rpc-layer
|
|
+ Fix race condition in tests
|
|
- Move to pkgconfig()-style BuildRequires:
|
|
+ Old ones: dbus-1-devel, gtk2-devel, libtasn1-devel.
|
|
+ New ones: dbus-1, glib-2.0, gtk+-3.0, libtasn1.
|
|
- Add libcap-devel BuildRequires.
|
|
- Rename libgcr0 to libgcr-3_0 after library name change.
|
|
- Remove explicit glib2-devel, gtk2-devel, libgp11-devel,
|
|
libtasn1-devel Requires in libgcr-devel package: they will be
|
|
automatically added the pkgconfig() way.
|
|
- Add libgck0, libgck-devel and libgck-modules subpackages, and
|
|
remove libgp11-0, libgp11-devel, libgp11-modules. Packaging-wise,
|
|
it's mostly like a renaming. Note that we have libgck-modules
|
|
with a Obsoletes tag for libgp11-modules since they share the
|
|
same files.
|
|
- Pass --with-gtk=3.0 instead of --with-gtk=2.0 to configure.
|
|
- Stop passing --libexecdir=%{_libexecdir}/gnome-keyring-1 to
|
|
configure: this is really not needed.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 15 12:11:37 CET 2010 - vuntz@opensuse.org
|
|
|
|
- Own /usr/share/GConf and /usr/share/GConf/gsettings to fix build.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 23 07:27:22 UTC 2010 - aj@suse.de
|
|
|
|
- Change lang package Requires to Recommends since it is not
|
|
mandatory at runtime.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 28 16:01:49 CEST 2010 - vuntz@opensuse.org
|
|
|
|
- Update to version 2.32.1:
|
|
+ Don't offer to save password for symmetric encryption in
|
|
gpg-agent.
|
|
+ Don't try to cache password when symmetric encryption in
|
|
gpg-agent.
|
|
+ Check that daemon is initialized before changing password from
|
|
pam.
|
|
+ Fix login keyring password doesn't match login.
|
|
+ Link correctly to gio.
|
|
+ Add extra debug guard around printing of prompt io.
|
|
+ Fix invalid memory access in rpc-layer.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 20 15:03:32 CEST 2010 - vuntz@opensuse.org
|
|
|
|
- Update gnome-keyring-check-session.patch to also use the
|
|
gnome-keyring PAM module for the gnome3 and smeegol sessions: we
|
|
want the keyring to be unlocked on login there.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 28 00:45:45 CEST 2010 - vuntz@opensuse.org
|
|
|
|
- Update to version 2.32.0:
|
|
+ Make builds silent by default.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Sep 12 22:59:38 CEST 2010 - vuntz@opensuse.org
|
|
|
|
- Update to version 2.31.92:
|
|
+ Require glib 2.25 or later.
|
|
+ Require automake 1.7 or later.
|
|
+ Fix assertion in secure memory code.
|
|
+ Don't go into endless loop when GPG Agent client disconnects.
|
|
+ Fix double free in gp11 library.
|
|
+ Fix crash during keyring unlock operation.
|
|
+ Expand prompt details when a non-default unlock option is
|
|
chosen.
|
|
+ Migrate to gsettings.
|
|
+ Use gsettings for GPG agent unlock options.
|
|
+ Fix library header installation directory for libgcr.
|
|
+ Fix some errors parsing certificates.
|
|
+ Rework how unlock options are loaded and handled.
|
|
+ Fix saving of auto-unlock passwords.
|
|
+ Support building with GTK+ 3.0
|
|
+ No warning message when SSH unlock prompt is cancelled.
|
|
+ Build fix finding PAM headers.
|
|
+ Build fix of PAM module for Hurd.
|
|
- Drop gnome-keyring-fix-pam-module-build.patch: fixed upstream.
|
|
- Pass --with-gtk=2.0 to configure to make sure we build against
|
|
GTK+ 2.
|
|
- Handle GSettings schemas, by using the %glib2_gsettings_schema_*
|
|
macros.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 31 01:41:15 CEST 2010 - vuntz@opensuse.org
|
|
|
|
- Update to version 2.31.91:
|
|
+ Fix problem with keyring names that contain foreign charaters.
|
|
+ Build fixes and warning fixes.
|
|
+ Better GPG Agent prompt strings.
|
|
+ More internal documentation.
|
|
+ Remove gconf as part of migration to gsettings.
|
|
+ Add --replace option to daemon.
|
|
+ Fix race condition in tests.
|
|
+ Use new DER decoding and encoding routines.
|
|
+ Only try to authenticate once if PKCS#11 slot has protected
|
|
auth path.
|
|
+ Better handling of when PKCS#11 token is write protected.
|
|
- Add gnome-keyring-fix-pam-module-build.patch to fix build of PAM
|
|
module.
|
|
- Pass --enable-pam to configure to make the build fail early if we
|
|
lose the pam module.
|
|
- Pass --with-root-certs=%{_sysconfdir}/ssl/certs to configure.
|
|
- Remove all of the gconf packaging:
|
|
+ Remove gconf2-devel BuildRequires.
|
|
+ Remove use of %gconf macros and corresponding
|
|
%pre/%preun/%posttrans.
|
|
+ Do not pass --disable-schemas-install to configure.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jul 22 17:56:58 CEST 2010 - vuntz@opensuse.org
|
|
|
|
- Remove gnome-common BuildRequires and call to gnome-autogen.sh.
|
|
- Call %suse_update_desktop_file on gnome-keyring-gpg.desktop.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jul 8 10:54:15 CEST 2010 - dimstar@opensuse.org
|
|
|
|
- Update to version 2.31.4:
|
|
+ New GPG Agent built into gnome-keyring-daemon
|
|
+ Start building (but not using) new DER parser and writer.
|
|
+ Fix building of desktop and service files.
|
|
+ Fix problems displaying prompts with certain characters in
|
|
strings.
|
|
+ Fix deadlock on secure memory usage.
|
|
+ Refactor the way prompting works for PKCS#11 components.
|
|
+ Refactor the way testing works and files are named.
|
|
+ Implement coverage testing.
|
|
+ Cleanup whitespace issues and rename certain modules.
|
|
+ Tests can now involve prompts and responses.
|
|
+ Fix possible threading race condition in gp11.
|
|
+ Fix broken startup when used with gdm and password-less login.
|
|
+ Fix checking of uninitialized value in prompting code.
|
|
- Drop gnome-keyring-fixes-from-git.patch: fixed upstream.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 3 18:37:26 CEST 2010 - vuntz@opensuse.org
|
|
|
|
- Add gnome-keyring-fixes-from-git.patch to fix various issues
|
|
related to gnome-keyring not working fine (with autologin, for
|
|
example).
|
|
- Add gnome-common BuildRequires and call to gnome-autogen.sh
|
|
needed for the patch.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 29 14:27:20 CEST 2010 - dimstar@opensuse.org
|
|
|
|
- Update to version 2.30.1:
|
|
+ Build fixes for errors and distribution problems.
|
|
+ Fixes for building on recent GTK versions.
|
|
+ Remove accidental storage of user's login password in login
|
|
keyring.
|
|
+ Fix assertion when exiting.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 30 19:49:40 CEST 2010 - vuntz@opensuse.org
|
|
|
|
- Update to version 2.30.0:
|
|
+ More robust error display and handling.
|
|
+ Don't assert on va_list.
|
|
+ Don't save session keyring to disk.
|
|
+ Allow unlocking even when always unlock is not available.
|
|
+ Hide the automatically unlock check when login not usable.
|
|
+ Fix various issues storing and using auto unlock passwords.
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Mar 10 14:00:45 CET 2010 - dimstar@opensuse.org
|
|
|
|
- Update to version 2.29.92:
|
|
+ Fix various problems with not storing secret value properly.
|
|
+ Return no results when a search includes a bad collection
|
|
identifier.
|
|
+ Don't raise error if ssh client disconnects early.
|
|
+ Allow running in a test environment.
|
|
+ Fix error when setting default keyring to NULL.
|
|
+ Autostart gnome-keyring-daemon in LXDE as well.
|
|
+ Rework the startup again, to use a singleton crontrolled via
|
|
dbus, to help when no process was started by pam.
|
|
+ Display password and confirm prompts when creating keyring.
|
|
+ Allow specifying CKA_ID when creating collection.
|
|
+ Give translatable label to created login keyring.
|
|
+ When no default keyring set, use login keyring.
|
|
+ Fix problem initializing socket path in rpc module.
|
|
+ Fix endless loop in reading data.
|
|
+ Potential fix or sporadic crash.
|
|
+ Solaris build fixes.
|
|
+ Updated translations.
|
|
Drop upstream included gnome-keyring-LXDE-autostart.patch.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 11 10:49:29 CET 2010 - vuntz@opensuse.org
|
|
|
|
- Update to version 2.29.90:
|
|
+ Quit daemon when the dbus session is disconnected.
|
|
+ Don't print out warnings on SSH v1 keys.
|
|
+ Remove erroneous egg-dbus dependency.
|
|
+ Allow saving password for encryption keys.
|
|
+ Fix problems storing secrets in keyrings.
|
|
+ Expose idle and timeout lock options for keyrings in the prompt
|
|
dialog. Fix remaining issues to get this to work.
|
|
+ Display a different message when unlocking the login keyring.
|
|
+ Fix problem with phantom 'xxx_1' keyrings appearing.
|
|
+ Load and use the default keyring properly.
|
|
+ Support accessing template style pkcs11 attributes.
|
|
+ Fix endless loop when looking for encryption key password in
|
|
login keyring.
|
|
+ GNU Hurd build fixes.
|
|
+ Solaris build fixes.
|
|
+ Translation fixes.
|
|
- Drop eggdbus-devel BuildRequires.
|
|
- Tweak gnome-keyring-check-session.patch to not start the keyring
|
|
if we're in a supported display manager, but DESKTOP_SESSION is
|
|
not set.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Feb 7 14:56:57 UTC 2010 - andrea@opensuse.org
|
|
|
|
- Add gnome-keyring-LXDE-autostart.patch to allow to autostart
|
|
keyring on LXDE session.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 27 23:33:45 UTC 2010 - andrea@opensuse.org
|
|
|
|
- Update gnome-keyring-check-session.patch to also support LXDE
|
|
(and lxdm).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 11 22:47:22 CET 2010 - captain.magnus@opensuse.org
|
|
|
|
- Update to version 2.29.5:
|
|
+ Implement lookup collection passwords in login keyring.
|
|
+ Various prompting fixes.
|
|
+ Store PKCS#11 objects after any attribute change.
|
|
+ Add 'Type' property to Secret Service API DBus item interface
|
|
+ Various warning, and uninitialized memory fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Dec 22 17:58:05 CET 2009 - vuntz@opensuse.org
|
|
|
|
- Update to version 2.29.4:
|
|
+ Refactor how the daemon starts up.
|
|
+ Allow init with already present environment variables, using
|
|
--start.
|
|
+ Install autostart files for each component of the daemon.
|
|
+ New DBus Secret Service API for accessing passwords and
|
|
secrets.
|
|
+ Old protocol for accessing secrets is no longer present.
|
|
+ libgnome-keyring is now its own module, and no longer bundled
|
|
with gnome-keyring.
|
|
+ Use normal GtkEntry when prompting for passwords.
|
|
+ Requires GTK+ 2.18
|
|
+ Implement new more flexible control protocol for pam and
|
|
startup.
|
|
+ Complete more of the gp11 PKCS#11 wrapper library.
|
|
+ Implement AES key wrapping and unwrapping in PKCS#11
|
|
components.
|
|
+ Implement DH key generation and derivation in PKCS#11
|
|
components.
|
|
+ Integrate testing of PKCS#11 components via p11-tests.
|
|
+ Implement PKCS#11 component for storing 'keyring' style
|
|
secrets.
|
|
+ Don't complain if we can't set session environment variables.
|
|
+ When running a debug build, warnings are fatal.
|
|
+ Refactor testing.
|
|
+ Encrypted channel for password with prompting dialog.
|
|
- Pass --disable-schemas-install to configure.
|
|
- Add eggdbus-devel BuildRequires.
|
|
- Remove libgnome-keyring0 and gnome-keyring-devel subpackages
|
|
(moved to libgnome-keyring source package).
|
|
- Split the remaining of gnome-keyring-devel in libgcr-devel and
|
|
libgp11-devel.
|
|
- Update baselibs.conf to reflect the packages shipping libraries
|
|
(libgcr0 and libgp11-0).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 17 22:46:39 CET 2009 - jengelh@medozas.de
|
|
|
|
- Add baselibs.conf as a source
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 17 12:06:26 CET 2009 - vuntz@opensuse.org
|
|
|
|
- Fix build on openSUSE <= 11.2.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Dec 15 13:48:24 CET 2009 - vuntz@opensuse.org
|
|
|
|
- Update to version 2.28.2:
|
|
+ Add license to reference documentation.
|
|
+ Sent output of g_printerr to syslog.
|
|
+ No error when can't unlock login keyring.
|
|
+ Fix assertion when comparing attributes.
|
|
+ Fix freeing of unallocated memory in test.
|
|
+ Don't barf on certificates with unsupported algorithm.
|
|
+ Fix some memory leaks.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Dec 4 21:19:27 CET 2009 - vuntz@opensuse.org
|
|
|
|
- Split the libraries in their own packages, to avoid useless
|
|
dependencies for packages depending on libgnome-keyring0 but that
|
|
don't want the whole gnome-keyring (which pulls gtk2). This means
|
|
we now have libgnome-keyring0, libgcr0, libgp11-0 and
|
|
libgp11-modules subpackages. (Thanks to Debian: summaries and
|
|
descriptions are inspired by the Debian ones.)
|
|
- Remove .la files.
|
|
- Do not self-obsolete for gnome-keyring-doc and pam_keyring.
|
|
- Move the pam-confire PreReq to the pam subpackage.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Nov 13 17:46:05 CET 2009 - vuntz@opensuse.org
|
|
|
|
- Update to version 2.28.1:
|
|
+ Fix support for SSH RSA1 keys.
|
|
+ Fix a delay when the daemon quits.
|
|
+ Use default D-Bus timeout when finding daemon.
|
|
+ Make custom pkcs11 constants unsigned longs.
|
|
+ Use unsigned long for module handle counter.
|
|
+ Fix assertion when releasing secure memory block.
|
|
- Drop gnome-keyring-no-logout-delay.patch: fixed upstream.
|
|
- Drop gnome-keyring-fix-ssh1-agent.patch: fixed upstream.
|
|
- Update gnome-keyring-check-session.patch to apply without fuzz.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 8 15:59:38 CEST 2009 - vuntz@opensuse.org
|
|
|
|
- Add gnome-keyring-fix-ssh1-agent.patch to make the ssh agent
|
|
support rsa1 keys again. Fix bnc#540515.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 6 11:16:11 CEST 2009 - vuntz@opensuse.org
|
|
|
|
- Update gnome-keyring-pam-auth-prompt-password.patch to not prompt
|
|
for password if use_authtok option is used.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 2 17:53:32 CEST 2009 - vuntz@opensuse.org
|
|
|
|
- Add gnome-keyring-no-logout-delay.patch to fix delay during
|
|
logout.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 22 17:37:54 CEST 2009 - dimstar@opensuse.org
|
|
|
|
- Update to version 2.28.0:
|
|
+ Fix build problems with -as-needed.
|
|
- Remove export SUSE_ASNEEDED.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 14 10:20:16 CEST 2009 - vuntz@opensuse.org
|
|
|
|
- Update to version 2.27.92:
|
|
+ Some uses of glib memory routines to explicitly allocate
|
|
memory.
|
|
+ Fix erroneous assertion hit by gtk-doc and tests.
|
|
+ Revert change which bumped libtasn1 required to 1.0.
|
|
+ Fix logic for only_if option in PAM module.
|
|
+ Handle unix signals on one thread.
|
|
+ Better daemon startup and forking logic.
|
|
+ Optional use of automake silent rules when available.
|
|
+ No warning when a disk doesn't have a UDI identifier.
|
|
- Drop gnome-keyring-pam-fix-only_if.patch: fixed upstream.
|
|
- Add SUSE_ASNEEDED=0 to fix build.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Aug 30 20:12:38 CEST 2009 - vuntz@novell.com
|
|
|
|
- Add gnome-keyring-pam-fix-only_if.patch to fix logic in pam
|
|
module when using only_if.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 10 21:27:22 CEST 2009 - vuntz@novell.com
|
|
|
|
- Update to version 2.27.90:
|
|
+ Build fixes on Solaris and FreeBSD.
|
|
+ Take length of ASN.1 elements into account, when parsing.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jul 29 16:52:04 CEST 2009 - vuntz@novell.com
|
|
|
|
- Drop gnome-keyring-auto-start-if-compatibility.patch now that
|
|
pam-config has been updated to support only_if in the pam config.
|
|
- Change pam-config call in post to use "--gnome_keyring-auto_start
|
|
--gnome_keyring-only_if=gdm" instead of
|
|
"--gnome_keyring-auto_start_if=gdm""
|
|
- PreReq pam-config at least 0.72 for those changes.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 28 17:21:23 CEST 2009 - lmedinas@gmail.com
|
|
|
|
- Update to version 2.27.5:
|
|
+ Add support for lifetime constrained SSH identities.
|
|
+ Use GtkBuilder files where glade files were used.
|
|
+ Write private key files with tighter file permissions.
|
|
+ Use gio instead of libhal for monitoring volumes.
|
|
+ Updated translations.
|
|
- Remove hal-devel from BuildRequires not needed anymore.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 20 01:09:59 CEST 2009 - vuntz@novell.com
|
|
|
|
- Update to version 2.27.4:
|
|
+ Insurance in parsing keyring format for future changes.
|
|
+ Add 'use_authtok' option to pam module.
|
|
+ Test utility fix.
|
|
+ Add 'only_if=' option to pam module.
|
|
+ Make 'Password:' prompt translatable in pam module.
|
|
+ Use libgcrypt to generate iv/salt where needed.
|
|
+ Remove old cu-test style unit tests.
|
|
+ Code refactoring and cleanup, removed 'common' component.
|
|
+ Auto generated ChangeLog.
|
|
+ Cleanup unit tests, and make them run with 'make check'
|
|
- Changes from version 2.26.3:
|
|
+ Build fixes.
|
|
+ Fix problem with RSA key sizes that are not a multiple of 8.
|
|
This affected use of SSH keys in particular.
|
|
+ Fix crash related to secure memory.
|
|
- Drop gnome-keyring-pam-auto-start-if.patch: fixed upstream.
|
|
- Drop gnome-keyring-pam-translate.patch: fixed upstream.
|
|
- Remove AutoReqProv: it's default now.
|
|
- Add gnome-keyring-auto-start-if-compatibility.patch since
|
|
pam-config does not know yet about only_if. It will be removed
|
|
once pam-config will be updated.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 13 00:49:03 CEST 2009 - mboman@suse.de
|
|
|
|
- Update to version 2.26.1:
|
|
+ Fix many problems with the new secure memory allocator
|
|
+ DBus now automatically starts the gnome-keyring service
|
|
properly
|
|
+ When auto activating the gnome-keyring DBus service, check for
|
|
an already running daemon
|
|
+ Don't print critical warnings when registering with DBus fails
|
|
+ Bump glib dependency
|
|
+ Add DBus method for getting the gnome-keyring environment
|
|
variables
|
|
+ Fix crash when prompting to unlock the keyring
|
|
+ Initialize daemon with LOGNAME and USERNAME environment
|
|
variables
|
|
+ Build fixes
|
|
- Merge -doc into -devel as it only contains gtk-doc
|
|
- Move gtk-doc from main to -devel
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Mar 22 00:34:30 CET 2009 - mboman@suse.de
|
|
|
|
- Modify baselibs.conf so that if pam-32bit is installed on x86_64,
|
|
gnome-keyring-pam-32bit and gnome-keyring-32bit is installed as
|
|
well.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Mar 20 00:15:03 CET 2009 - mboman@suse.de
|
|
|
|
- Fix an issue where Requires on libtasn1-devel and gtk2-devel was
|
|
added to -pam instead of -devel
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 14 22:31:33 CET 2009 - mboman@suse.de
|
|
|
|
- Update to version 2.26.0:
|
|
+ Implement support for running gnome-keyring-daemon under
|
|
valgrind
|
|
+ Checks for asn1Parser tool when configuring
|
|
+ Only automatically expose PKCS#11 public key objects for
|
|
private keys
|
|
+ Have the SSH agent only log into the token when we have a
|
|
private key that we want to access
|
|
+ Disable input method in password
|
|
- Add libtasn1-devel and gtk2-devel to Requires for devel package
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Mar 6 02:18:42 CET 2009 - vuntz@novell.com
|
|
|
|
- Update to version 2.25.92:
|
|
+ Fix problems when multiple processes tried to initialize the
|
|
gnome-keyring-daemon at the same time, often resulting in a
|
|
user session that hung on login.
|
|
+ Add compatibility support for loading SSH unlock passwords from
|
|
previous versions of gnome-keyring.
|
|
+ Fix compiler warnings on 32-bit systems.
|
|
+ Fix uninitialized variable usage. These resulted in crashes.
|
|
+ Initialize PKCS#11 tokens before importing certificates or keys
|
|
to them. Remove previous auto-initialize idea.
|
|
+ Add basic support for PKCS#11 SO logins.
|
|
+ Fix focus issues in the import certificate/key dialog.
|
|
+ When looking for PKCS#11 objects, skip tokens that have not
|
|
been initialized.
|
|
+ Exit properly when an error occurs on importing a certificate
|
|
or key.
|
|
+ Hash objects when storing them in PKCS#11 user-store and
|
|
validate the hashes when loading them.
|
|
+ Build fix on Solaris
|
|
+ If login keyring doesn't exist when changing a PAM password,
|
|
don't create it automatically.
|
|
+ Close stdin/stdout when not running the daemon in foreground.
|
|
This fixes a regression in scripts starting
|
|
gnome-keyring-daemon.
|
|
- Remove -fno-strict-aliasing from CFLAGS.
|
|
- Use makeinstall (install-pam is no longer useful)
|
|
- Make sure fdupes is called last (since we might changes some
|
|
files before).
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Feb 22 01:32:53 CET 2009 - vuntz@novell.com
|
|
|
|
- Better document the cleanup of /etc/pam.d/gdm
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 19 02:27:08 CET 2009 - vuntz@novell.com
|
|
|
|
- Add gnome-keyring-pam-auth-prompt-password.patch: we make the pam
|
|
module prompt for a password during auth when none was set.
|
|
- Use pam-config instead of hack in post/postun of the pam package.
|
|
We have to manually remove the pam_gnome_keyring.so from
|
|
/etc/pam.d/gdm in post, though.
|
|
- Should fix bnc#466732.
|
|
- Add gnome-keyring-pam-translate.patch to translate the prompt
|
|
strings in the pam module, using the pam translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 16 17:49:47 CET 2009 - sbrabec@suse.cz
|
|
|
|
- Added support for translation-update-upstream (FATE#301344).
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Feb 14 22:19:45 CET 2009 - mboman@suse.de
|
|
|
|
- Update to version 2.25.91:
|
|
+ Complete certificate details display in the gcr library
|
|
+ Correctly escape prompt markup
|
|
+ Show correct MD5 hash in certificate display
|
|
+ Overhaul the secure memory allocator to have memory guards, and
|
|
also be more sparing with secure memory
|
|
+ Add C++ header guards to public headers
|
|
+ Prompt to initialize new PKCS#11 tokens with a password
|
|
+ Fix output of RSA keys to be interoperable
|
|
+ Translation fixes
|
|
+ Fix problems importing certificates and keys
|
|
+ More code reorganization
|
|
+ Add support for netscape trust objects, so Root CA certificates
|
|
can be trusted by NSS
|
|
+ Fixes to the PKCS#11 headers on 64-bit systems
|
|
- Remove gnome-keyring-bgo570295-use-markup-correctly.patch. Fixed
|
|
upstream
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 3 11:16:53 EST 2009 - mboman@suse.de
|
|
|
|
- Update to version 2.25.90:
|
|
+ Add certificate UI bit to gcr library.
|
|
+ Can now again clear the cached authentication from an SSH key.
|
|
+ Add some additional helper functions to gp11 library.
|
|
+ Fix some corner cases in signal handling.
|
|
+ Don't crash when trying to lock keyrings that don't have a
|
|
password.
|
|
+ Fix problems running on 64-bit systems.
|
|
+ Build fixes
|
|
- Tag/Rename/Upstream
|
|
gnome-keyring-bgo570295-use-markup-correctly.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Feb 1 15:45:32 EST 2009 - mboman@suse.de
|
|
|
|
- Update to version 2.25.5:
|
|
+ Refactor out gcr library for crypto UI and related tasks.
|
|
+ Code refactoring.
|
|
+ Support automatically initializing a PKCS#11 token when not initialized.
|
|
+ Add modular user-store module for general storage of keys and certs.
|
|
+ Build fixes [Saleem Abdulrasool, Jeff Cai]
|
|
+ Add modular roots-store module for storage of trusted CA certs.
|
|
+ Add modular rpc-layer for communication between module and daemon.
|
|
+ Add modular ssh-agent as the main gnome-keyring-daemon agent.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jan 22 22:12:45 CET 2009 - vuntz@novell.com
|
|
|
|
- Clean up package a bit, especially the file list.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 12 15:28:37 EST 2009 - mboman@suse.de
|
|
|
|
- Update to version 2.25.4.2:
|
|
+ The modular ssh agent uses keys from all available PKCS#11 slots.
|
|
+ Fix compiler warnings.
|
|
+ Fix broken release.
|
|
- Remove gnome-keyring-svndiff-1440-1442.patch. New version
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 7 15:16:48 EST 2009 - mboman@suse.de
|
|
|
|
- Update to version 2.25.4.1:
|
|
+ Half way through refactoring of PKCS#11 support.
|
|
+ Add crypto support to gp11 library.
|
|
+ gp11 library is now by and large thread-safe.
|
|
+ Add modular ssh-store, roots and rpc-layer PKCS#11 components.
|
|
+ Beginnings of a PKCS#11 based ssh-agent.
|
|
+ Transactional storage of PKCS#11 objects.
|
|
+ Add auto-authenticate support in GP11 library, which greatlty
|
|
simplifies figuring out when to provide passwords.
|
|
+ Fix initialization problems which prevented SSH agent from
|
|
setting environment variables properly
|
|
+ Translation fixes
|
|
- Add gnome-keyring-svndiff-1440-1442.patch to make it compile
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Dec 20 10:17:22 EST 2008 - mboman@suse.de
|
|
|
|
- Update to version 2.25.2:
|
|
+ Fix PKCS#11 corner cases highlighted by p11-tests tool.
|
|
+ Solaris fixes
|
|
+ Don't use non-pageable memory for public keys.
|
|
+ Rework initialization of daemon, and the way that it integrates
|
|
with the session.
|
|
+ Close open file descriptors before starting daemon from PAM
|
|
module.
|
|
+ Don't try and unlock keyring from PAM if daemon isn't running
|
|
+ Don't leave keyring daemon running if PAM just started it for
|
|
a password change
|
|
+ Add a keyboard accelerator to the 'Deny' button
|
|
+ Use pkg-config to detect libtasn1
|
|
+ Register environment variables with session properly.
|
|
+ Make DBUS a required dependency of gnome-keyring.
|
|
+ Remove usage of deprecated glib/gtk stuff.
|
|
- Removed gnome-keyring-pam-stop-passwd.patch. Fixed upstream
|
|
- Removed gnome-keyring-spurious-syslog.patch. Fixed upstream
|
|
- Removed gnome-keyring-sync-XAUTHLOCALHOSTNAME.patch. Fixed upstream
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 10 12:34:56 CET 2008 - olh@suse.de
|
|
|
|
- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
|
|
(bnc#437293)
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Dec 1 01:48:57 CET 2008 - vuntz@novell.com
|
|
|
|
- Add gnome-keyring-sync-XAUTHLOCALHOSTNAME.patch to synchronize
|
|
XAUTHLOCALHOSTNAME and ICEAUTHORITY in the keyring daemon after
|
|
login. Else, gnome-keyring-ask might not be able to access the
|
|
display. Fix bnc#441789.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Nov 24 12:34:56 CET 2008 - olh@suse.de
|
|
|
|
- obsolete old -XXbit packages (bnc#437293)
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Nov 19 12:09:12 CET 2008 - vuntz@novell.com
|
|
|
|
- Compile with --disable-acl-prompts. The prompt dialogs don't help
|
|
the user in the end. Fix bnc#446010.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Nov 9 02:21:56 CET 2008 - vuntz@novell.com
|
|
|
|
- Add some patches that will make pam-config integration possible.
|
|
This is part of bnc#421603.
|
|
- Add gnome-keyring-pam-stop-passwd.patch: if the keyring is
|
|
started to update the keyring password on password change, then
|
|
stop it too.
|
|
Based on patch by Thorsten Kukuk.
|
|
- Add gnome-keyring-pam-auto-start-if.patch: support an
|
|
auto_start_if option for the pam module to specify for which
|
|
service to auto-start the keyring.
|
|
Based on patch by Thorsten Kukuk.
|
|
- Update gnome-keyring-check-session.patch: the check for the GNOME
|
|
session is only working for the gdm service. With the
|
|
gnome-keyring-pam-auto-start-if.patch patch, we need to make sure
|
|
that we only do it for gdm since someone might want to configure
|
|
the keyring to start when logging in a console, eg.
|
|
- gnome-keyring-spurious-syslog.patch: don't try to unlock the
|
|
keyring if there's no daemon running.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 22 07:35:52 EST 2008 - mboman@suse.de
|
|
|
|
- Update to version 2.24.1:
|
|
+ Fix crash on logout on Solaris.
|
|
+ Add missing 'server' attribute to the NETWORK_PASSWORD schema
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Sep 21 10:44:34 EST 2008 - mboman@suse.de
|
|
|
|
- Update to version 2.24.0:
|
|
+ Update documentation for functions in gp11 library
|
|
+ Ungrab the keyboard properly when a password prompt is minimized.
|
|
+ Report errors from keyboard grabbing.
|
|
+ Fix build problems with gcc 4.3.
|
|
+ PKCS#11 initialize compatibility fix for OpenSC.
|
|
+ Make all errors from prompt process go to syslog.
|
|
+ When prompting for a password on import, don't go into an endless
|
|
+ loop for blank passwords.
|
|
+ Fix problems with PK indexes overwriting one another.
|
|
+ Don't add additional extensions on storage files when the extension
|
|
is already correct.
|
|
+ Load all objects when a PKCS#11 session is opened, regardless of
|
|
whether a C_FindObjects is run or not.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Sep 20 06:18:56 CEST 2008 - vuntz@novell.com
|
|
|
|
- Rewrite gnome-keyring-check-session.patch to be more correct:
|
|
ie, don't return too early from functions, and now check the
|
|
DESKTOP_SESSION environment variable that will be set by GDM.
|
|
- Change the gdm pam configuration to have auto_start for
|
|
pam_gnome_keyring.so for session, and not auth. This is what
|
|
upstream recommends and it's also required to have a proper
|
|
behavior with the above patch.
|
|
- This is part of bnc#427744.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Sep 12 10:19:08 CEST 2008 - aj@suse.de
|
|
|
|
- Add directory ownership for /usr/share/gtk-doc/html/gp11.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 9 15:55:20 EST 2008 - mboman@novell.com
|
|
|
|
- Update to version 2.23.92:
|
|
+ Build fix for Solaris
|
|
+ Import the LANG environment variable into daemon enviroment
|
|
so that dialogs display with correct translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 04 19:48:25 CEST 2008 - mboman@novell.com
|
|
|
|
- Update to version 2.23.91:
|
|
+ Use 'Change' instead of 'Create' when prompting the user for a
|
|
password to change keyring password.
|
|
+ Fix RSA signing with X509 mechanism.
|
|
+ Tweaking of the asynchronous scheduling to prevent hangs.
|
|
+ Add some documentation for GP11 library.
|
|
+ Translation updates.
|
|
+ Build fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 26 19:48:25 CEST 2008 - mboman@novell.com
|
|
|
|
- Update to version 2.23.90:
|
|
+ Use 'Create' button instead of 'OK' when prompting the user for
|
|
a password to create a new keyring.
|
|
+ Fix more cases where 'Deny' choice by a user resulted in
|
|
more subsequent prompts.
|
|
+ Automatically create non-existant directories when storing files.
|
|
+ Fix problem prompting for the same password twice when parsing a
|
|
PFX or PKCS#12 file.
|
|
+ Don't offer to store password during import operation.
|
|
+ Don't try to store certificates encrypted on the disk.
|
|
+ Add command line tool for importing of keys and certificates.
|
|
+ Fix problems with SSH agent not unlocking keys properly.
|
|
+ Build fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 05 19:48:25 CEST 2008 - captain.magnus@opensuse.org
|
|
|
|
- Update to version 2.23.6:
|
|
+ If the user denies a prompt, then don't prompt the same prompt
|
|
again for that connection to the daemon.
|
|
+ Bug fixes for loading of SSH keys.
|
|
+ Add gconf schema for noting the user's configured PKCS#11
|
|
modules.
|
|
+ Update and bug fixes for the new GP11 library.
|
|
+ Better reference counting of internal objects.
|
|
+ When a certificate is in the roots storage, assume it is a CA if
|
|
no basic constraints are present.
|
|
+ Add ability of PKCS#11 module to accept a string on its reserved
|
|
initialization argument, similar to NSS's libsoftkn3 module.
|
|
+ Translation fixes.
|
|
+ Build fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Aug 02 19:48:25 CEST 2008 - captain.magnus@opensuse.org
|
|
|
|
- Update to version 2.23.5:
|
|
+ Load all SSH keys in ~/.ssh named id_?sa*, not just id_rsa
|
|
and id_dsa. Also load public portions of keys when needed ie:
|
|
*.pub
|
|
+ Include new GP11 library, which is a GLib wrapper for PKCS#11
|
|
+ Add ability to import keys/certificates to PKCS#11.
|
|
+ Better storage and creation of PKCS#11 objects.
|
|
+ Start using GTest for new unit testing.
|
|
+ Better indexing of keys and certificates.
|
|
+ Better buffer handling, and threading fixes. [Jon Burgress]
|
|
+ Fix warnings in logs caused by programs checking whether
|
|
gnome-keyring is available.
|
|
+ Standardize on libgcrypt random number generator.
|
|
+ Add --disable-acl-prompts option to disable all ACL prompting
|
|
[Colin Walters]
|
|
+ Build fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 18 19:48:25 CEST 2008 - maw@suse.de
|
|
|
|
- Update to version 2.22.2:
|
|
+ Streamline the importing of keys and make the proper prompts
|
|
show up consistently; better fixes for this to come in 2.24.x
|
|
+ Don't show 'location' field in most password prompts
|
|
+ Return serial number of certificates properly to requesting
|
|
programs
|
|
+ Fix crash when receiving certain HAL events.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu May 1 05:24:46 CEST 2008 - hpj@suse.de
|
|
|
|
- Remove gnome-keyring-0.4.6-casa-integration.patch. GNOME can now
|
|
replicate the login password for use in the default keyring
|
|
without Casa's help.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
|
|
|
|
- added baselibs.conf file to build xxbit packages
|
|
for multilib support
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 10 00:53:56 CEST 2008 - maw@suse.de
|
|
|
|
- Update to version 2.22.1:
|
|
+ Add SSH agent protocol 1 support
|
|
+ Make 'ssh-add -D' lock any SSH private keys that gnome-keyring
|
|
is automatically loading
|
|
+ Reconnect to system DBus whenever the system bus restarts
|
|
+ Log to syslog even when running in the foreground
|
|
+ Add a configure option to disable building of the SSH agent
|
|
+ Build fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Mar 14 03:16:20 CET 2008 - maw@suse.de
|
|
|
|
- Update to version 2.22.0:
|
|
+ Minor build fix.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 4 18:43:50 CET 2008 - maw@suse.de
|
|
|
|
- Update to version 2.21.92:
|
|
+ Sync up user's session environment with the daemon, so that
|
|
things like X authentication, DBUS, etc. work properly
|
|
+ Shutdown socket connections properly, so things don't hang,
|
|
when wrong versions of daemon/library are used
|
|
+ Limit PKCS#12 parsing to a clearly defined subset of the
|
|
format
|
|
+ Decrypt PKCS#12 with empty passwords properly
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 18 20:46:47 CET 2008 - maw@suse.de
|
|
|
|
- Update to version 2.21.91:
|
|
+ Don't prompt for a password from the PAM module since
|
|
gnome-keyring is not an authenticator
|
|
+ Check that PKCS#11 socket connections come from same user
|
|
+ Don't lock the entire gnome-keyring-ask process in memory,
|
|
just the password text; this works better when less non-pageable
|
|
memory is available
|
|
+ Basic serializing of certificates and keys
|
|
+ Build fixes
|
|
+ Updated translations.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 29 10:00:55 CST 2008 - maw@suse.de
|
|
|
|
- Update to version 2.21.90:
|
|
+ Proper support for creating and destroying objects through
|
|
PKCS#11
|
|
+ Support for setting PKCS#11 attributes
|
|
+ Fix hanging of daemon under certain conditions
|
|
+ Add gconf setting for determining which components of the
|
|
daemon (such as SSH) are run at startup
|
|
+ Better parsing of objects and prompting for passwords in
|
|
PKCS#12 files
|
|
+ Calculate trust and purpose/usage of certificates
|
|
+ Mark certain key/certificate directories as special requiring
|
|
certain special treatment (such as the CA root store, SSH
|
|
keys etc...)
|
|
+ Add support for unencrypted keyrings which are used when
|
|
the user specifies a blank password
|
|
+ Fix problem where most keyrings were being treated as insecure
|
|
from the point of view of storing passwords for keys or
|
|
certificates
|
|
+ Fix race condition that is causing deadlocks and freezes
|
|
+ Misc fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 22 07:44:15 CET 2008 - hpj@suse.de
|
|
|
|
- Remove gnome-keyring-2.21.4-getenv-returns-null.patch, and fix
|
|
gnome-keyring-check-session.patch instead.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 21 04:43:15 CET 2008 - hpj@suse.de
|
|
|
|
- Add gnome-keyring-2.21.4-getenv-returns-null.patch to fix
|
|
GNOME bug #510902.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Jan 12 08:01:04 CET 2008 - hpj@suse.de
|
|
|
|
- Install the D-Bus service file. Fixes Novell bug #353198.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 20 14:48:35 CST 2007 - maw@suse.de
|
|
|
|
- Fix build on x86_64.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 20 13:40:10 CST 2007 - maw@suse.de
|
|
|
|
- Update to version 2.21.4:
|
|
+ Build fixes for various platforms and against various libraries
|
|
+ Print few useless warning messages
|
|
+ Simpler API for accessing and storing passwords
|
|
+ PAM module now works with SELinux
|
|
+ Includes an SSH agent
|
|
+ Added basic x.509 certificate and key store
|
|
+ PKCS#11 module
|
|
+ ASN.1 support
|
|
- Don't package license files.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 10 16:26:26 CEST 2007 - sbrabec@suse.cz
|
|
|
|
- Replace old pam_keyring.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 17 19:46:45 CEST 2007 - mauro@suse.de
|
|
|
|
- Updated to version 2.20.
|
|
+ Translation fixes (Claude Paroz)
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 10 19:58:49 CEST 2007 - crivera@suse.de
|
|
|
|
- Add a patch to fix Bug #186189. We only start gnome-keyring
|
|
daemon if the WINDOWMANAGER environment variable is set to
|
|
/usr/bin/gnome.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 27 19:18:57 CEST 2007 - cgaisford@novell.com
|
|
- Updated to 2.19.91 to incorporate needed fixes for Novell bugs:
|
|
298975, 299730, 299621, 304189
|
|
- Builds with newer versions of DBus [Theppitak Karoonboonyanan]
|
|
- In the PAM module we now support starting gnome-keyring-daemon
|
|
when the user's session actually starts, rather than during
|
|
password validation. This makes us more solid and sane with GDM
|
|
and well behaved PAM using applications. [Chris Rivera]
|
|
- In the PAM module check that the socket is owned by the same
|
|
user, before sending the login password there.
|
|
- Don't read from /dev/random when not needed. This makes startup
|
|
faster in many cases, as it won't block for entropy.
|
|
- Get around more optimizations that cancel out wiping of strings
|
|
in memory before freeing.
|
|
- Fix problem where keyrings are created in wrong directory
|
|
[Nathaniel McCallum]
|
|
- Incorporated security fixes from Novell
|
|
- Fix crashers when the ask dialog sends back bad data.
|
|
- Now builds on Solaris [Damien Carbery]
|
|
- Configure PAM module directory better [Matthias Clasen]
|
|
- Fix memory leaks
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 8 01:11:19 CEST 2007 - maw@suse.de
|
|
|
|
- Use %fdupes
|
|
- Split off a -lang subpackage.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Aug 2 22:39:42 CEST 2007 - jpr@suse.de
|
|
|
|
- Build with pam support in gnome-keyring-pam
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Aug 2 19:34:07 CEST 2007 - maw@suse.de
|
|
|
|
- Update to version 2.19.6.1:
|
|
+ Sync with current gnome version numbers
|
|
+ Build fixes
|
|
+ Use libgcrypt instead of hand-rolled encryption algorithms
|
|
+ Code refactoring and cleanup
|
|
+ Error and warning messages are logged to syslog when running
|
|
as a daemon
|
|
+ Use non-pageable memory for secrets and passwords
|
|
+ Use NULL consistently in the API to represent the default
|
|
keyrong
|
|
+ Improved prompts
|
|
+ Handle unix signals properly
|
|
+ Keyrings supported on removeable drives
|
|
+ New API
|
|
+ API docs
|
|
+ Unit tests are run automagically when building
|
|
+ Misc. bug fixes
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Apr 11 11:41:13 CDT 2007 - maw@suse.de
|
|
|
|
- Update to version 0.8.1, which
|
|
- Fixes a crash when called with a NULL keyring
|
|
- Has an updated translation for the gl locale.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Apr 4 15:45:19 CDT 2007 - maw@suse.de
|
|
|
|
- Update to version 0.8
|
|
- b.g.o 407160 and 339137.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Mar 9 11:29:48 CST 2007 - maw@suse.de
|
|
|
|
- Update to version 0.7.91
|
|
- Changes in version 0.7.91 are:
|
|
* Add method for library to discover daemon via DBus. Adds soft
|
|
DBus dependency.
|
|
* Fixes for building on kFreeBSD.
|
|
- Changes in version 0.7.3 are:
|
|
* Fix endless loop when creating a keyring and a file by that
|
|
name already exists.
|
|
* Fix crasher when deleting session keyring.
|
|
* Fix crasher when doing find operation with NULL attribute
|
|
string.
|
|
* Sync files to disk after writing to keyring.
|
|
- Changes in version 0.7.2 are:
|
|
* Don't have multiple password dialogs presented for the same
|
|
keyring
|
|
- Changes in version 0.7.1 are:
|
|
* Added GNOME_KEYRING_ITEM_APPLICATION_SECRET which allows an
|
|
item to be for a single application only with strict access
|
|
controls.
|
|
* New function gnome_keyring_item_get_info_full(_sync) which
|
|
allow retrieval of item meta data without the secret, thus not
|
|
incurring an ACL prompt.
|
|
* Translation updates
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 27 09:42:07 CST 2007 - maw@suse.de
|
|
|
|
- Create a -doc subpackage (#248813).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 14 17:10:44 CET 2006 - sbrabec@suse.cz
|
|
|
|
- More spec file cleanups.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 13 15:56:31 CST 2006 - maw@suse.de
|
|
|
|
- Move to /usr
|
|
- Do some specfile cleanup.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 14 19:33:34 CEST 2006 - jhargadon@suse.de
|
|
|
|
- update to version 0.6.0
|
|
- NetBSD fixes
|
|
- Crash fix
|
|
- Typo fix
|
|
- Translations
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Aug 31 00:06:48 CEST 2006 - jhargadon@suse.de
|
|
|
|
- update to version 0.5.2
|
|
- Translation updates
|
|
- Better title in docs
|
|
- Fixed crashes
|
|
- New function: gnome_keyring_item_grant_access_rights_sync
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Aug 24 23:34:57 CEST 2006 - ro@suse.de
|
|
|
|
- copy CASA headers to local source and remove CASA-devel
|
|
from BuildRequires to avoid build-dep cycle
|
|
(CASA needs gtk-sharp needs gnome-keyring needs CASA)
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Aug 11 23:00:22 CEST 2006 - jhargadon@suse.de
|
|
|
|
- update to version 0.5.1
|
|
- Support changing password of a keyring
|
|
- Create ~/.gnome2 if needed
|
|
- Save keyring when an ACL is added
|
|
- Add password strength meter
|
|
- Fix return value for some sync calls
|
|
- Translation updates
|
|
- Fix crash when asking for password
|
|
- Fix --disable-nls
|
|
|
|
-------------------------------------------------------------------
|
|
Sat May 13 03:57:49 CEST 2006 - hpj@suse.de
|
|
|
|
- Add a patch to provide better CASA integration. CASAManager is
|
|
allowed by default, and the default keyring's password is saved
|
|
in CASA, making most of the annoying dialogs go away. Part of
|
|
fix for Novell bug #174093.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue May 9 22:56:48 CEST 2006 - joeshaw@suse.de
|
|
|
|
- Add a patch to only display the "unlock keyring" dialog once
|
|
per keyring, no matter how many different apps request it.
|
|
(bnc #170587) Also fixes a crash in gnome-keyring-ask if you
|
|
clicked "Deny".
|
|
|
|
-------------------------------------------------------------------
|
|
Mon May 8 20:21:01 CEST 2006 - joeshaw@suse.de
|
|
|
|
- Add a patch to correctly escape for markup, and set the markup
|
|
flag on the label. (bnc #172603)
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 25 21:31:44 CET 2006 - mls@suse.de
|
|
|
|
- converted neededforbuild to BuildRequires
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Nov 30 22:34:30 CET 2005 - gekker@suse.de
|
|
|
|
- Update to version 0.4.6
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 13 18:40:37 CEST 2005 - gekker@suse.de
|
|
|
|
- Update to version 0.4.5
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 5 10:23:21 CEST 2005 - mmj@suse.de
|
|
|
|
- Update to version 0.4.4 (GNOME 2.12)
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jul 22 18:31:58 CEST 2005 - gekker@suse.de
|
|
|
|
- Update to version 0.4.3
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 1 18:16:23 CEST 2005 - sbrabec@suse.cz
|
|
|
|
- Fixed devel requirements.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Mar 9 20:22:56 CET 2005 - gekker@suse.de
|
|
|
|
- Update to version 0.4.2 (GNOME 2.10).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 19 22:48:01 CET 2005 - clahey@suse.de
|
|
|
|
- Updated to version 0.4.1.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 23 20:10:02 CET 2004 - gekker@suse.de
|
|
|
|
- Update version to 0.4.0
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 2 17:14:57 CET 2004 - ro@suse.de
|
|
|
|
- locale rename: no -> nb
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 12 12:20:29 CEST 2004 - sbrabec@suse.cz
|
|
|
|
- Fixed libexecdir for bi-arch (#47050).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jun 28 11:39:08 CEST 2004 - hhetter@suse.de
|
|
|
|
- reduce #neededforbuild
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 26 15:47:03 CEST 2004 - sbrabec@suse.cz
|
|
|
|
- New SuSE package, version 0.2.1 (GNOME 2.6).
|
|
|