Commit Graph

64 Commits

Author SHA256 Message Date
Mark Post
f072b8698a - Don't hide error messages from the groupadd command. To eliminate
a potentially common one, check to see if the pkcs11 group is
  already defined before trying to add it.
- Update the summary for the -devel package.
- Changed several PreReq entries to Requires(pre) as a result of
  the output from spec-cleaner. Removed a couple of obsolete lines.

OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=80
2018-11-29 22:49:07 +00:00
Mark Post
e7f80fc66d Accepting request 649626 from home:markkp:branches:security
- Upgraded to version 3.11.0 (Fate#325685)
  * opencryptoki 3.11.0
    EP11 enhancements
    A lot of bug fixes
- Reworked the ocki-3.1-remove-make-install-chgrp.patch to apply
  properly to 3.11, and renamed it to
  ocki-3.11-remove-make-install-chgrp.patch
- Removed obsolete patch ocki-3.5-icsf-coverity-memoryleakfix.patch
- Upgraded to version 3.10.0 (Fate#325685)
  * opencryptoki 3.10.0
    Add support to ECC on ICA token and to common code.
    Add SHA224 support to SOFT token.
    Improve pkcsslotd logging.
    Fix sha512_hmac_sign and rsa_x509_verify for ICA token.
    Fix tracing of session id.
    Fix and improve testcases.
    Fix spec file permission for log directory.
    Fix build warnings.
* opencryptoki 3.9.0
    Fix token reinitialization
    Fix conditional man pages
    EP11 enhancements
    EP11 EC Key import
    Increase RSA max key length
    Fix broken links on documentation
    Define CK_FALSE and CK_TRUE macros
    Improve build flags
- Dropped obsolete patch ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch
- Made multiple changes to the spec file based on spec-cleaner output.
- Added an rpmlintrc file to squelch warnings about adding ghost
  entries for files under /var/log/opencryptoki/

OBS-URL: https://build.opensuse.org/request/show/649626
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=78
2018-11-16 16:33:50 +00:00
Mark Post
4866a500c9 Accepting request 597601 from home:markkp:branches:security
- Added ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch
  (bsc#1086678)

OBS-URL: https://build.opensuse.org/request/show/597601
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=76
2018-04-17 23:10:57 +00:00
Mark Post
4539918c49 Accepting request 585157 from home:markkp:branches:security
- Re-enabled ARM architectures now that gcc6 is in SLE15. (bsc#1084617)

OBS-URL: https://build.opensuse.org/request/show/585157
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=74
2018-03-09 20:17:11 +00:00
Mark Post
cfbd8bf303 Accepting request 546863 from home:markkp:branches:security
- Upgraded to version 3.8.2 (fate#323295, bsc#1066412)
  * v3.8.2
    Update man pages.
    Improve ock_tests for parallel execution.
    Fix FindObjectsInit for hidden HW-feature.
    Fix to allow vendor defined hardware features.
    Fix unresolved symbols.
    Fix tracing.
    Code/project cleanup.
  * v3.8.1
    Fix TPM data-structure reset function.
    Fix error message when dlsym fails.
    Update configure.ac
    Update travis.
  * v3.8.0
    Multi token instance feature.
    Added possibility to run opencryptoki with transactional memory or locks
      (--enable-locks on configure step).
    Updated documentation.
    Fix segfault on ec_test.
    Bunch of small fixes.

OBS-URL: https://build.opensuse.org/request/show/546863
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=72
2017-12-01 02:02:32 +00:00
Mark Post
3d264fa667 Accepting request 500228 from home:markkp:branches:security
Fix for bsc#1039510

OBS-URL: https://build.opensuse.org/request/show/500228
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=70
2017-05-31 20:09:13 +00:00
Mark Post
cd6812de23 - Updated to version 3.7.0 (Fate#321451) (bsc#1036640)
- Update example spec file
  - Performance improvement. Moving from mutexes to transactional memory.
  - Add ECDSA SHA2 support for EP11 and CCA.
  - Fix declaration of inline functions.
  - Fix wrong testcase and ber en/decoding for integers.
  - Check for 'flex' and 'YACC' on configure.
  - EP11 config file rework.
  - Add enable-debug on travis build.
  - Add testcase for C_GetOperationState/C_SetOperationState.
  - Upgrade License to CPL-1.0
  - Ica token: fix openssh/ibmpkcs11 engine/libica crash.
  - Fix segfault and logic in hardware feature test.
  - Fix spelling of documentation and manuals.
  - Fix the retrieval of p from a generated rsa key.
  - Coverity scan fixes - incompatible pointer type and unused variables.

OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=67
2017-05-12 09:06:41 +00:00
Mark Post
5f9d2f2ce9 Accepting request 491365 from home:markkp:branches:security
Added libica-tools to the BuildRequires due to repackaging of libica.

OBS-URL: https://build.opensuse.org/request/show/491365
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=65
2017-04-26 20:28:06 +00:00
Mark Post
f168c8daed Accepting request 481628 from home:markkp:branches:security
Missed a second BuildRequires for libica3-devel.

OBS-URL: https://build.opensuse.org/request/show/481628
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=63
2017-03-20 21:54:09 +00:00
Mark Post
18e79c3575 Accepting request 481620 from home:markkp:branches:security
Missed a second BuildRequires for libica3-devel.

OBS-URL: https://build.opensuse.org/request/show/481620
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=62
2017-03-20 21:47:43 +00:00
Mark Post
4d86d0db29 Accepting request 480951 from home:markkp:branches:security
Fix problem with building on 32bit systems and make libica-devel requirement more generic.

OBS-URL: https://build.opensuse.org/request/show/480951
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=60
2017-03-17 22:23:40 +00:00
Mark Post
9b51cd5951 Accepting request 480948 from home:markkp:branches:security
Fix problem with building on 32bit systems and make libica-devel requirement more generic.

OBS-URL: https://build.opensuse.org/request/show/480948
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=59
2017-03-17 22:13:25 +00:00
Mark Post
1e158a83bf Accepting request 460930 from home:markkp:branches:security
Upgraded to version 3.6.2 (fate#321451)

OBS-URL: https://build.opensuse.org/request/show/460930
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=57
2017-02-28 17:15:00 +00:00
Mark Post
e9742235f7 - Removed reference to pkcs1_startup from pkcsslotd (bsc#1007081)
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=55
2017-01-17 20:14:46 +00:00
Mark Post
d78499d297 - ocki-3.5-fix-pkcscca-calls.patch
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=54
2017-01-17 17:41:42 +00:00
Mark Post
1ceb830200 - ocki-3.5-create-missing-tpm-token-lock-directory.patch
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=53
2017-01-17 17:39:47 +00:00
Mark Post
1bad7c6c08 - ocki-3.5-added-NULLreturn-check.patch
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=52
2017-01-17 17:36:51 +00:00
Mark Post
ad23c5b038 OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=51 2017-01-17 17:34:59 +00:00
Mark Post
86f5b3be6b - ocki-3.5-icsf-reasoncode-2028-added.patch
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=50
2017-01-17 17:33:29 +00:00
Mark Post
6633cafee3 - ocki-3.5-icsf-sessionhandle-missing-fix.patch
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=49
2017-01-17 17:31:45 +00:00
Mark Post
150ba1b024 - ocki-3.5-downgrade-syslogerror.patch
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=48
2017-01-17 17:29:57 +00:00
Mark Post
89a8628923 OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=47 2017-01-17 17:28:05 +00:00
Mark Post
77def9041e - Removed the following obsolete patches:
- ocki-3.5-sanity-checking.patch
    - ocki-3.5-icsf-reasoncode72-support.patch

OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=46
2017-01-17 17:26:54 +00:00
Mark Post
62e0f2c13e - Removed obsolete ocki-3.5-sanity-checking.patch.
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=45
2017-01-17 17:24:16 +00:00
Mark Post
5bf8c27619 - Upgraded to version 3.6.1 (fate#321451)
- opencryptoki 3.6.1
    - Fix SOFT token implementation of digest functions.
    - Replace deprecated OpenSSL interfaces.
  - opencryptoki 3.6
    - Replace deprecated libica interfaces.
    - Performance improvement for ICA.
    - Improvement in documentation on system resources.
    - Improvement in testcases.
    - Added support for rc=8, reasoncode=2028 in icsf token.
    - Fix for session handle not set in session issue.
    - Multiple fixes for lock and log directories.
    - Downgraded a syslog error to warning.
    - Multiple fixes based on coverity scan results.
    - Added pkcs11 mapping for icsf reason code 72 for return code 8.
  - opencryptoki 3.5.1
    - Fix Illegal Intruction on pkcscca tool.21451

OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=44
2017-01-17 17:19:02 +00:00
Mark Post
99ab635d6c OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=43 2016-09-07 18:55:37 +00:00
9a3dd47c2b Accepting request 424303 from home:markkp:branches:openSUSE:Factory
Latest fix from IBM developers.

OBS-URL: https://build.opensuse.org/request/show/424303
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=42
2016-09-07 06:53:01 +00:00
ff7be92b95 Accepting request 415916 from home:markkp:branches:security
Trivial change to add FAQ file to %doc. bsc#991168

OBS-URL: https://build.opensuse.org/request/show/415916
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=40
2016-08-04 11:44:34 +00:00
ad9b7480fa Accepting request 412843 from home:markkp:branches:security
Latest patch from IBM.

OBS-URL: https://build.opensuse.org/request/show/412843
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=38
2016-07-29 11:04:44 +00:00
Mark Post
d795e80599 - Added the following patches (bsc#986854)
- ocki-3.5-icsf-reasoncode72-support.patch
  - ocki-3.5-icsf-coverity-memoryleakfix.patch
  - ocki-3.5-downgrade-syslogerror.patch
  - ocki-3.5-icsf-sessionhandle-missing-fix.patch
  - ocki-3.5-icsf-reasoncode-2028-added.patch
  - ocki-3.5-added-NULLreturn-check.patch

OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=37
2016-07-08 20:30:53 +00:00
Mark Post
dfc5337165 - Added ocki-3.5-sanity-checking.patch (bsc#983496).
- Added %dir entry for %{_localstatedir}/log/opencryptoki/
  (bsc#983990)

OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=35
2016-06-13 20:42:21 +00:00
80f427e8ac Accepting request 399027 from home:markkp:branches:security
Added more bullet items to the changes file per dimstar's request.

OBS-URL: https://build.opensuse.org/request/show/399027
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=33
2016-06-07 08:04:52 +00:00
Mark Post
3303e660f7 Accepting request 398345 from home:oertel:branches:security
- Upgraded to openCryptoki 3.5 (bsc#978005).

OBS-URL: https://build.opensuse.org/request/show/398345
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=32
2016-05-27 17:45:26 +00:00
1e173dfe5e - renamed: ocki-3.1-remove-make-install-chgrp-chmod.patch to
ocki-3.1-remove-make-install-chgrp.patch

OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=30
2016-04-16 17:30:20 +00:00
695604103a Accepting request 390252 from home:markkp:branches:security
Reconciled all the differences between the OBS and IBS versions of the package. Merged the changelog files so that everything is in there.

OBS-URL: https://build.opensuse.org/request/show/390252
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=29
2016-04-16 17:18:42 +00:00
7d406e241d Accepting request 294859 from home:elvigia:branches:security
- Also create parent directory /run/lock/opencryptoki in 
  tmpfiles snippet if it does not exists.

- spec: do not use -D__USE_BSD, a glibc-internal macro
  which no longer has any meaning.

- spec: use %{_unitdir}  %{_tmpfilesdir)
- spec: call tmpfiles_create macro, if defined in %post
- opencryptoki-run-lock.patch, openCryptoki-tmp.conf: use
  /run/lock instead of /var/lock.

OBS-URL: https://build.opensuse.org/request/show/294859
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=27
2015-04-22 09:41:29 +00:00
adb9bc9138 OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=25 2014-12-18 14:50:52 +00:00
a15255e127 Accepting request 265545 from home:posophe:branches:security
Update + changes

OBS-URL: https://build.opensuse.org/request/show/265545
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=24
2014-12-18 14:21:44 +00:00
Cristian Rodríguez
e535e749ba Accepting request 247737 from home:jjolly:branches:security
Fixed zero length bug in ica token

OBS-URL: https://build.opensuse.org/request/show/247737
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=22
2014-09-05 21:19:23 +00:00
bbdcb346df Accepting request 247627 from home:jjolly:branches:security
Fixed several bugs and cleaned up changes and specfile

OBS-URL: https://build.opensuse.org/request/show/247627
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=21
2014-09-05 10:54:00 +00:00
eb0091de2e ocki-3.1_01_ep11_makefile.patch
ocki-3.1_02_ep11_m_init.patch
- Patches added:
  ocki-3.1-fix-libica-link.patch
  ocki-3.1_03_ock_obj_mgr.patch
  ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  ocki-3.1_05_ep11_readme_update.patch
  ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  ocki-3.1_06_0005-Small-reworks.patch
  ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch

OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=19
2014-09-02 14:42:54 +00:00
f04f03e4fb Accepting request 244776 from home:sfalken:branches:security
- Specfile Cleanup, Added directory macros in appropriate places

OBS-URL: https://build.opensuse.org/request/show/244776
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=18
2014-09-02 14:33:18 +00:00
Tomáš Chvátal
d6c48bed19 Accepting request 238818 from home:jjolly:branches:security
Fixes for bnc#880217 - systemd enabled

OBS-URL: https://build.opensuse.org/request/show/238818
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=17
2014-07-02 09:29:50 +00:00
8883ecb0ec OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=15 2014-02-06 12:57:43 +00:00
7de3ec42fa OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=14 2014-02-06 12:42:44 +00:00
58a54abac4 Accepting request 220960 from home:oertel:branches:security
- Updated to openCryptoki v3.1: See ChangeLog for complete details
  (FATE#315426)
  - opencryptoki-3.1
    - New ep11 token to support IBM Crypto Express adpaters
      (starting with Crypto Express 4S adapters) configured with
      Enterprise PKCS#11(EP11) firmware. (FATE#315330)
  - opencryptoki-3.0
    - New opencryptoki.conf file to replace pk_config_data and
      pkcs11_starup.  The opencryptoki.conf contains slot entry
      information for tokens.
    - Removed pkcs_slot and pkcs11_startup shell scripts.
    - ICA token supports CKM_DES_OFB64, CKM_DES_CFB8, CKM_DES_CFB6
      mechanisms using 3DES keys. (FATE#315323)
    - ICA token supports CKM_DES3_MAC and CKM_DES3_MAC_GENERAL
      mechanisms. (FATE#315323)
    - ICA token supports CKM_AES_OFB, CKM_AES_CFB8, CKM_AES_CFB64,
      CKM_AES_CFB128, CKM_AES_MAC, and CKM_AES_MAC_GENERAL
      mechanisms. (FATE#315323)
  - opencryptoki-2.4.1 (21 Feb 2012)
    - SHA256 support added for CCA token (FATE#315289)
- Using insserv macros in %post, %preun and %postun sections
- Cleaned up spec file
- removed patches:
  - ocki-2.2.6-PIN-backspace.patch
- added patches:
  - ocki-3.1-fix-implicit-decl.patch
  - ocki-3.1-remove-make-install-chgrp-chmod.patch
  - ocki-3.1-fix-init_d-path.patch

- add aarch64 to 64bit archs

OBS-URL: https://build.opensuse.org/request/show/220960
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=13
2014-02-06 09:10:48 +00:00
69ccf932a4 Accepting request 210434 from openSUSE:Factory:PowerLE
- enable ppc64le

OBS-URL: https://build.opensuse.org/request/show/210434
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=11
2013-12-12 12:31:17 +00:00
111fc52ebc OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=9 2012-12-08 18:58:05 +00:00
bddeada3ae - remove -o from groupadd
- fixed sed script to not a grouplist with leading ,

OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=8
2012-12-08 18:50:55 +00:00
4ce1688b56 tst
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=7
2012-12-08 18:43:00 +00:00