Dominique Leuenberger
004b4fb1e9
- update to 2.10:
* added JavaScript signing
* added PKCS#11 provider support (requires OpenSSL 3.0+)
* added support for providers without specifying
"-pkcs11module" option
* (OpenSSL 3.0+, e.g., for the upcoming CNG provider)
* added compatibility with the CNG engine version 1.1 or later
* added the "-engineCtrl" option to control hardware and CNG
engines
* added the '-blobFile' option to specify a file containing the
blob content
* improved unauthenticated blob support (thanks to Asger Hautop
Drewsen)
* improved UTF-8 handling for certificate subjects and issuers
* fixed support for multiple signerInfo contentType OIDs (CTL
and Authenticode)
* fixed tests for python-cryptography >= 43.0.0
- update to version 2.9:
* added a 64 bit long pseudo-random NONCE in the TSA request
* missing NID_pkcs9_signingTime is no longer an error
* added support for PEM-encoded CRLs
* fixed the APPX central directory sorting order
* added a special "-" file name to read the passphrase from
stdin
* used native HTTP client with OpenSSL 3.x, removing libcurl
dependency
* added '-login' option to force a login to PKCS11 engines
* added the "-ignore-crl" option to disable fetching and
verifying CRL Distribution Points
* changed error output to stderr instead of stdout
OBS-URL: https://build.opensuse.org/request/show/1292313
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/osslsigncode?expand=0&rev=10