------------------------------------------------------------------- Mon Apr 15 18:46:10 UTC 2013 - dimstar@opensuse.org - Update to version 0.18.1: + Put the external tools in $libdir/p11-kit. + Documentation build fixes. ------------------------------------------------------------------- Thu Apr 4 13:34:40 UTC 2013 - dimstar@opensuse.org - Update to version 0.18.0: + Fix use of trust module with gcr and empathy (fdo#62896). + Further tweaks to trust module date parsing. + Fix unaligned memory reads (fdo#62819). + Win32 fixes (fdo#63062, fdo#63046). + Debug and logging tweaks (fdo#62874). + Other build fixes. ------------------------------------------------------------------- Thu Mar 28 21:42:55 UTC 2013 - zaitor@opensuse.org - Update to version 0.17.5: + Don't try to guess at overflowing time values on 32-bit systems (fdo#62825). + Test fixes (fdo#927394). ------------------------------------------------------------------- Thu Mar 21 08:10:37 UTC 2013 - dimstar@opensuse.org - Update to version 0.17.4: + Check for duplicate certificates in a token, warn and discard (fdo#62548). + Implement a proper index so we have decent load performance. ------------------------------------------------------------------- Wed Mar 20 19:09:13 UTC 2013 - dimstar@opensuse.org - Update to version 0.17.3: + Use descriptive labels for the trust module tokens (fdo#62534). + Remove the temporary built in distrust objects. + Make extracted output directories and files read-only (fdo#61898). + Don't export unneccessary ABI. + Build fixes (fdo#62479). ------------------------------------------------------------------- Tue Mar 19 20:39:24 UTC 2013 - dimstar@opensuse.org - Update to version 0.17.2: + Fix build on 32-bit linux. + Fix several crashers. - Changes from version 0.17.1: + Support a p11-kit specific PKCS#11 attribute persistance format (fdo#62156). + Use the SHA1 hash of SPKI as the CKA_ID in the trust module by default (fdo#62329). + Refactor a trust builder which builds objects out of parsed data (fdo#62329). + Combine trust policy when extracting certificates (fdo#61497). + The extract --comment option adds comments to PEM bundles (fdo#62029). + A new 'priority' config option for ordering modules (fdo#61978). + Make each configured path its own trust module token (fdo#61499). + Use --with-trust-paths to configure trust module (fdo#62327). + Fix bug decoding some PEM files. + Better debug output for trust module lookups. + Work around bug in NSS when doing serial number lookups. + Work around broken strndup() function in firefox. + Fix the nickname for the distrusted attribute. + Build fixes. - Add ca-certificates BuildRequires: needed to find the location of the root certificates. ------------------------------------------------------------------- Thu Mar 14 12:26:18 UTC 2013 - dimstar@opensuse.org - Update to version 0.16.4: + Display per command help again (fdo#62153). + Don't always print tools debug output (fdo#62152). - Changes from version 0.16.3: + When iterating don't skip tokens without the CKF_TOKEN_INITIALIZED flag. + Hardcode some distrust records for NSS temporarily. + Parse global options better in the p11-kit command. + Better debugging. - Changes from version 0.16.2: + Fix regression in 'p11-kit extract --purpose' option (fdo#62009) + Documentation updates + Build fixes (fdo#62001). - Changes from version 0.16.1: + Don't break when cA field of BasicConstraints is missing (fdo#61975). + Documentation fixes and updates. + p11-kit extract-trust is a placeholder script now. ------------------------------------------------------------------- Tue Mar 5 13:36:20 UTC 2013 - dimstar@opensuse.org - Update to version 0.16.0: + Update the pkcs11.h header for new mechanisms + Fix build and tests on mingw64 (ie: win32) + Relicense LGPL code to BSD license + Documentation tweaks + Bugs fixed: fdo#61739, fdo#60894, fdo#61740, fdo#60792 + Updated translations. - Changes from version 0.15.2: + Better define the libtasn1 dependency. + Crasher and bug fixes. + Build fixes. + Updated translations. - Changes from version 0.15.1: + Fix some memory leaks. + Add a location for packages to drop module configs. + Documentation updates and fixes. + Add command line tool manual page. + Remove unused err() function and friends. + Move more code into common/ directory and refactor. + Add a system trust policy module. + Refactor how the p11-kit command line tool works. + Add p11-kit extract and extract-trust commands. + Don't complain if we cannot access ~/.pkcs11/pkcs11.conf. + Refuse to load the p11-kit-proxy.so as a registered module. + Don't fail initialization if last initialized module fails. ------------------------------------------------------------------- Fri Sep 7 11:04:40 UTC 2012 - dimstar@opensuse.org - Update to version 0.14: + Change default for user-config to merge + Always URI-encode the 'id' attribute in PKCS#11 URIs + Expect a .module extension on module configs + Windows compatibility fixes + Testing fixes + Build fixes ------------------------------------------------------------------- Mon Jul 23 06:26:02 UTC 2012 - zaitor@opensuse.org - Update to version 0.13: + Don't allow reading of PIN files larger than 4096 bytes + If a module is not marked as critical then ignore init failure + Use preconditions to check for input problems and out of memory + Add enable-in and disable-in options to module config + Fix the flags in pin.h + Use gcc extensions to check varargs during compile + Fix crasher when a duplicate module is present + Fix broken hashmap behavior + Testing fixes + Win32 build fixes + 'p11-kit -h' now works + Documentation fixes ------------------------------------------------------------------- Fri Mar 9 19:37:44 UTC 2012 - dimstar@opensuse.org - Update to version 0.12: + Build fix. ------------------------------------------------------------------- Fri Feb 10 08:05:27 UTC 2012 - vuntz@opensuse.org - Update to version 0.11: + Remove automatic reinitialization of PKCS#11 after fork ------------------------------------------------------------------- Wed Jan 4 09:08:59 UTC 2012 - vuntz@opensuse.org - Update to version 0.10: + Build fixes, for windows, gcc 4.6.1. ------------------------------------------------------------------- Tue Nov 15 10:18:49 UTC 2011 - dimstar@opensuse.org - Update to version 0.9: + p11-kit can't be used as a static library. + Fix problems crashing when freeing TLS on windows. + Add debug output to windows init and uninit of library. +.Build fixes, especially for windows ------------------------------------------------------------------- Thu Oct 27 21:53:33 UTC 2011 - dimstar@opensuse.org - Update to version 0.8: + Rename non-static functions to have a _p11_xxx prefix + No concurrent calling of C_Initialize and C_Finalize + Print more information in 'p11-kit -l' + Initial port to win32 + Build and testing fixes. ------------------------------------------------------------------- Tue Sep 27 19:24:59 UTC 2011 - vuntz@opensuse.org - Update to version 0.7: + Expand p11-kit config variables correctly in various build scenarios + Add test tool to print out error messages + Build fix on FreeBSD ------------------------------------------------------------------- Thu Sep 15 05:02:07 UTC 2011 - vuntz@opensuse.org - Update to version 0.6: + Add concept of a default module directory from which modules with relative paths are loaded. + Renamed pkg-config variables to make it clearer what's what. ------------------------------------------------------------------- Fri Sep 2 08:20:47 UTC 2011 - vuntz@opensuse.org - Update to version 0.5: + Fix crasher in p11_kit_registered_modules() + Add 'critical' setting for modules, which defaults to 'no' + Fix initialization issues in the proxy module ------------------------------------------------------------------- Fri Aug 19 19:37:44 CEST 2011 - dimstar@opensuse.org - Update to version 0.4: + Fix endless loop if module forks during initialization + Update PKCS#11 URI code for new draft of spec + Don't fail when duplicate modules are configured + Better debug output + Add example configuration documentation + Support whitespace in PKCS#11 URIs - Move the p11-kit.conf.example to the doc folder. ------------------------------------------------------------------- Sat Jul 30 15:04:36 CEST 2011 - vuntz@opensuse.org - Update to version 0.3: + Rewrite hash table, and simplify licensing. + Correct paths for p11-kit config files. + Many build fixes and tweaks. - Remove Apache-2 part from License tag, as the code was rewritten. ------------------------------------------------------------------- Mon Jul 25 15:35:57 CEST 2011 - vuntz@opensuse.org - Initial package (version 0.2).