Accepting request 1120796 from home:pmonrealgonzalez:branches:Base:System
- Update to 0.25.1: * fix probing of C_GetInterface [#535] * p11-kit: add command to list tokens [#581] * p11-kit: add command to list mechanisms supported by a token [#576] * p11-kit: add command to generate private-public keypair on a token [#551, #582] * p11-kit: add commands to import/export certificates and public keys into/from a token [#543, #549, #568, #588] * p11-kit: add commands to list and delete objects of a token [#533, #544, #571] * p11-kit: add --login option to login into a token with object and profile management commands [#587] * p11-kit: adjust behavior of PKCS#11 profile management commands [#558, #560, #583, #591] * p11-kit: print PKCS#11 URIs in list-modules [#532] * bug and build fixes [#528 #529, #534, #537, #540, #541, #545, #547, #550, #557, #572, #575, #579, #585, #586, #590] * test fixes [#553, #580] * Remove patch fixed upstream: - d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch OBS-URL: https://build.opensuse.org/request/show/1120796 OBS-URL: https://build.opensuse.org/package/show/Base:System/p11-kit?expand=0&rev=56
This commit is contained in:
parent
b7097f4ba5
commit
a534892686
@ -1,42 +0,0 @@
|
||||
From d1d4b0ac316a27c739ff91e6c4153f1154e96e5a Mon Sep 17 00:00:00 2001
|
||||
From: Xi Ruoyao <xry111@xry111.site>
|
||||
Date: Thu, 27 Jul 2023 12:18:15 +0800
|
||||
Subject: [PATCH] Fix probing of C_GetInterface
|
||||
|
||||
`p11_dl_symbol (dl, "C_GetInterface")` uses dlsym() to find
|
||||
C_GetInterface in the loaded pkcs11 module. For legacy (pre-3.0) pkcs11
|
||||
modules, C_GetInterface is not defined in the module. But according to
|
||||
the documentation of dlsym():
|
||||
|
||||
The search performed by dlsym() is breadth first through the
|
||||
dependency tree of these shared objects.
|
||||
|
||||
So if a pkcs11 module links to libp11-kit.so, the C_GetInterface
|
||||
implementation in libp11-kit.so itself will be found. This
|
||||
C_GetInterface will return the metadata of p11-kit-proxy.so, causing
|
||||
"Refuse to load the p11-kit-proxy.so as a registered module".
|
||||
|
||||
To solve the issue, if p11_dl_symbol() returns the C_GetInterface in
|
||||
libp11-kit.so itself, we should ignore it and continue trying
|
||||
C_GetFunctionList.
|
||||
---
|
||||
p11-kit/modules.c | 6 ++++++
|
||||
1 file changed, 6 insertions(+)
|
||||
|
||||
diff --git a/p11-kit/modules.c b/p11-kit/modules.c
|
||||
index 8ad88ae01..da0a7f04d 100644
|
||||
--- a/p11-kit/modules.c
|
||||
+++ b/p11-kit/modules.c
|
||||
@@ -383,6 +383,12 @@ dlopen_and_get_function_list (Module *mod,
|
||||
mod->loaded_module = dl;
|
||||
|
||||
gi = p11_dl_symbol (dl, "C_GetInterface");
|
||||
+
|
||||
+#ifndef OS_WIN32
|
||||
+ if (gi == C_GetInterface)
|
||||
+ gi = NULL;
|
||||
+#endif
|
||||
+
|
||||
if (gi) {
|
||||
/* Get the default standard interface */
|
||||
rv = gi ((unsigned char *)"PKCS 11", NULL, &interface, 0);
|
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:d55583bcdde83d86579cabe3a8f7f2638675fef01d23cace733ff748fc354706
|
||||
size 958940
|
Binary file not shown.
3
p11-kit-0.25.1.tar.xz
Normal file
3
p11-kit-0.25.1.tar.xz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:b6f326925725c8c45484e6daf78cdc73428a86296b6b99078255017f1bacdafc
|
||||
size 990460
|
BIN
p11-kit-0.25.1.tar.xz.sig
Normal file
BIN
p11-kit-0.25.1.tar.xz.sig
Normal file
Binary file not shown.
@ -1,3 +1,27 @@
|
||||
-------------------------------------------------------------------
|
||||
Fri Oct 27 12:05:22 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
||||
|
||||
- Update to 0.25.1:
|
||||
* fix probing of C_GetInterface [#535]
|
||||
* p11-kit: add command to list tokens [#581]
|
||||
* p11-kit: add command to list mechanisms supported by a token [#576]
|
||||
* p11-kit: add command to generate private-public keypair on a token
|
||||
[#551, #582]
|
||||
* p11-kit: add commands to import/export certificates and public
|
||||
keys into/from a token [#543, #549, #568, #588]
|
||||
* p11-kit: add commands to list and delete objects of a token
|
||||
[#533, #544, #571]
|
||||
* p11-kit: add --login option to login into a token with object
|
||||
and profile management commands [#587]
|
||||
* p11-kit: adjust behavior of PKCS#11 profile management commands
|
||||
[#558, #560, #583, #591]
|
||||
* p11-kit: print PKCS#11 URIs in list-modules [#532]
|
||||
* bug and build fixes [#528 #529, #534, #537, #540, #541, #545,
|
||||
#547, #550, #557, #572, #575, #579, #585, #586, #590]
|
||||
* test fixes [#553, #580]
|
||||
* Remove patch fixed upstream:
|
||||
- d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Sep 20 21:26:03 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
|
||||
|
||||
|
@ -21,7 +21,7 @@
|
||||
%define trustdir_cfg %{pkidir_cfg}/trust
|
||||
%define trustdir_static %{pkidir_static}/trust
|
||||
Name: p11-kit
|
||||
Version: 0.25.0
|
||||
Version: 0.25.1
|
||||
Release: 0
|
||||
Summary: Library to work with PKCS#11 modules
|
||||
License: BSD-3-Clause
|
||||
@ -31,8 +31,6 @@ Source0: https://github.com/p11-glue/%{name}/releases/download/%{version}
|
||||
Source1: https://github.com/p11-glue/%{name}/releases/download/%{version}/p11-kit-%{version}.tar.xz.sig
|
||||
Source98: https://p11-glue.github.io/p11-glue/%{name}/%{name}-release-keyring.gpg#/%{name}.keyring
|
||||
Source99: baselibs.conf
|
||||
# PATCH-FIX-UPSTREAM d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch -- Fix probing of C_GetInterface
|
||||
Patch0: https://github.com/p11-glue/p11-kit/commit/d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch
|
||||
BuildRequires: gtk-doc
|
||||
%if 0%{?suse_version} >= 1600
|
||||
BuildRequires: libtasn1-tools
|
||||
|
Loading…
x
Reference in New Issue
Block a user