- fix 32bit provides of libnssckbi.so - repace p11-kit-extract-trust with update-ca-certificates OBS-URL: https://build.opensuse.org/request/show/182281 OBS-URL: https://build.opensuse.org/package/show/Base:System/p11-kit?expand=0&rev=3
294 lines
10 KiB
Plaintext
294 lines
10 KiB
Plaintext
-------------------------------------------------------------------
|
|
Fri Jul 5 08:09:46 UTC 2013 - lnussel@suse.de
|
|
|
|
- fix 32bit provides of libnssckbi.so
|
|
- repace p11-kit-extract-trust with update-ca-certificates
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 28 09:30:03 UTC 2013 - lnussel@suse.de
|
|
|
|
- provide libnssckbi.so to replace mozilla-nss-certs
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jun 24 13:08:21 UTC 2013 - lnussel@suse.de
|
|
|
|
- add p11-kit-nss-trust subpackage that serves as drop-in
|
|
replacement for mozilla-nss-certs
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 19 09:24:45 UTC 2013 - lnussel@suse.de
|
|
|
|
- use /etc/pki/trust and /usr/share/pki/trust as system CA
|
|
certificate store
|
|
|
|
-------------------------------------------------------------------
|
|
Mon May 27 14:40:57 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.19.1:
|
|
+ Refactor API to be able to handle managed modules.
|
|
+ Deprecate much of old p11-kit API.
|
|
+ Implement concept of managed modules.
|
|
+ Make C_CloseAllSessions function work for multiple callers.
|
|
+ New dependency on libffi.
|
|
+ Fix possible threading problems reported by hellgrind.
|
|
+ Add log-calls option.
|
|
+ Mark p11_kit_message() as a stable function.
|
|
+ Use our own unit testing framework.
|
|
- Add pkgconfig(libffi) BuildRequires: new dependency.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue May 14 18:27:52 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.18.2:
|
|
+ Build fixes (fdo#64378)
|
|
|
|
-------------------------------------------------------------------
|
|
Mon May 13 21:13:20 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Also provide p11-kit-32bit (in fact, the pkcs#11 modules)
|
|
(bnc#819246).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 15 18:46:10 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.18.1:
|
|
+ Put the external tools in $libdir/p11-kit.
|
|
+ Documentation build fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 4 13:34:40 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.18.0:
|
|
+ Fix use of trust module with gcr and empathy (fdo#62896).
|
|
+ Further tweaks to trust module date parsing.
|
|
+ Fix unaligned memory reads (fdo#62819).
|
|
+ Win32 fixes (fdo#63062, fdo#63046).
|
|
+ Debug and logging tweaks (fdo#62874).
|
|
+ Other build fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 28 21:42:55 UTC 2013 - zaitor@opensuse.org
|
|
|
|
- Update to version 0.17.5:
|
|
+ Don't try to guess at overflowing time values on 32-bit
|
|
systems (fdo#62825).
|
|
+ Test fixes (fdo#927394).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 21 08:10:37 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.17.4:
|
|
+ Check for duplicate certificates in a token, warn and discard
|
|
(fdo#62548).
|
|
+ Implement a proper index so we have decent load performance.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Mar 20 19:09:13 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.17.3:
|
|
+ Use descriptive labels for the trust module tokens (fdo#62534).
|
|
+ Remove the temporary built in distrust objects.
|
|
+ Make extracted output directories and files read-only
|
|
(fdo#61898).
|
|
+ Don't export unneccessary ABI.
|
|
+ Build fixes (fdo#62479).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 19 20:39:24 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.17.2:
|
|
+ Fix build on 32-bit linux.
|
|
+ Fix several crashers.
|
|
- Changes from version 0.17.1:
|
|
+ Support a p11-kit specific PKCS#11 attribute persistance format
|
|
(fdo#62156).
|
|
+ Use the SHA1 hash of SPKI as the CKA_ID in the trust module by
|
|
default (fdo#62329).
|
|
+ Refactor a trust builder which builds objects out of parsed
|
|
data (fdo#62329).
|
|
+ Combine trust policy when extracting certificates (fdo#61497).
|
|
+ The extract --comment option adds comments to PEM bundles
|
|
(fdo#62029).
|
|
+ A new 'priority' config option for ordering modules
|
|
(fdo#61978).
|
|
+ Make each configured path its own trust module token
|
|
(fdo#61499).
|
|
+ Use --with-trust-paths to configure trust module (fdo#62327).
|
|
+ Fix bug decoding some PEM files.
|
|
+ Better debug output for trust module lookups.
|
|
+ Work around bug in NSS when doing serial number lookups.
|
|
+ Work around broken strndup() function in firefox.
|
|
+ Fix the nickname for the distrusted attribute.
|
|
+ Build fixes.
|
|
- Add ca-certificates BuildRequires: needed to find the location of
|
|
the root certificates.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 14 12:26:18 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.16.4:
|
|
+ Display per command help again (fdo#62153).
|
|
+ Don't always print tools debug output (fdo#62152).
|
|
- Changes from version 0.16.3:
|
|
+ When iterating don't skip tokens without the
|
|
CKF_TOKEN_INITIALIZED flag.
|
|
+ Hardcode some distrust records for NSS temporarily.
|
|
+ Parse global options better in the p11-kit command.
|
|
+ Better debugging.
|
|
- Changes from version 0.16.2:
|
|
+ Fix regression in 'p11-kit extract --purpose' option
|
|
(fdo#62009)
|
|
+ Documentation updates
|
|
+ Build fixes (fdo#62001).
|
|
- Changes from version 0.16.1:
|
|
+ Don't break when cA field of BasicConstraints is missing
|
|
(fdo#61975).
|
|
+ Documentation fixes and updates.
|
|
+ p11-kit extract-trust is a placeholder script now.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 5 13:36:20 UTC 2013 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.16.0:
|
|
+ Update the pkcs11.h header for new mechanisms
|
|
+ Fix build and tests on mingw64 (ie: win32)
|
|
+ Relicense LGPL code to BSD license
|
|
+ Documentation tweaks
|
|
+ Bugs fixed: fdo#61739, fdo#60894, fdo#61740, fdo#60792
|
|
+ Updated translations.
|
|
- Changes from version 0.15.2:
|
|
+ Better define the libtasn1 dependency.
|
|
+ Crasher and bug fixes.
|
|
+ Build fixes.
|
|
+ Updated translations.
|
|
- Changes from version 0.15.1:
|
|
+ Fix some memory leaks.
|
|
+ Add a location for packages to drop module configs.
|
|
+ Documentation updates and fixes.
|
|
+ Add command line tool manual page.
|
|
+ Remove unused err() function and friends.
|
|
+ Move more code into common/ directory and refactor.
|
|
+ Add a system trust policy module.
|
|
+ Refactor how the p11-kit command line tool works.
|
|
+ Add p11-kit extract and extract-trust commands.
|
|
+ Don't complain if we cannot access ~/.pkcs11/pkcs11.conf.
|
|
+ Refuse to load the p11-kit-proxy.so as a registered module.
|
|
+ Don't fail initialization if last initialized module fails.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Sep 7 11:04:40 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.14:
|
|
+ Change default for user-config to merge
|
|
+ Always URI-encode the 'id' attribute in PKCS#11 URIs
|
|
+ Expect a .module extension on module configs
|
|
+ Windows compatibility fixes
|
|
+ Testing fixes
|
|
+ Build fixes
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 23 06:26:02 UTC 2012 - zaitor@opensuse.org
|
|
|
|
- Update to version 0.13:
|
|
+ Don't allow reading of PIN files larger than 4096 bytes
|
|
+ If a module is not marked as critical then ignore init failure
|
|
+ Use preconditions to check for input problems and out of memory
|
|
+ Add enable-in and disable-in options to module config
|
|
+ Fix the flags in pin.h
|
|
+ Use gcc extensions to check varargs during compile
|
|
+ Fix crasher when a duplicate module is present
|
|
+ Fix broken hashmap behavior
|
|
+ Testing fixes
|
|
+ Win32 build fixes
|
|
+ 'p11-kit -h' now works
|
|
+ Documentation fixes
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Mar 9 19:37:44 UTC 2012 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.12:
|
|
+ Build fix.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Feb 10 08:05:27 UTC 2012 - vuntz@opensuse.org
|
|
|
|
- Update to version 0.11:
|
|
+ Remove automatic reinitialization of PKCS#11 after fork
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 4 09:08:59 UTC 2012 - vuntz@opensuse.org
|
|
|
|
- Update to version 0.10:
|
|
+ Build fixes, for windows, gcc 4.6.1.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 15 10:18:49 UTC 2011 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.9:
|
|
+ p11-kit can't be used as a static library.
|
|
+ Fix problems crashing when freeing TLS on windows.
|
|
+ Add debug output to windows init and uninit of library.
|
|
+.Build fixes, especially for windows
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 27 21:53:33 UTC 2011 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.8:
|
|
+ Rename non-static functions to have a _p11_xxx prefix
|
|
+ No concurrent calling of C_Initialize and C_Finalize
|
|
+ Print more information in 'p11-kit -l'
|
|
+ Initial port to win32
|
|
+ Build and testing fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 27 19:24:59 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 0.7:
|
|
+ Expand p11-kit config variables correctly in various build
|
|
scenarios
|
|
+ Add test tool to print out error messages
|
|
+ Build fix on FreeBSD
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 15 05:02:07 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 0.6:
|
|
+ Add concept of a default module directory from which modules
|
|
with relative paths are loaded.
|
|
+ Renamed pkg-config variables to make it clearer what's what.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Sep 2 08:20:47 UTC 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 0.5:
|
|
+ Fix crasher in p11_kit_registered_modules()
|
|
+ Add 'critical' setting for modules, which defaults to 'no'
|
|
+ Fix initialization issues in the proxy module
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Aug 19 19:37:44 CEST 2011 - dimstar@opensuse.org
|
|
|
|
- Update to version 0.4:
|
|
+ Fix endless loop if module forks during initialization
|
|
+ Update PKCS#11 URI code for new draft of spec
|
|
+ Don't fail when duplicate modules are configured
|
|
+ Better debug output
|
|
+ Add example configuration documentation
|
|
+ Support whitespace in PKCS#11 URIs
|
|
- Move the p11-kit.conf.example to the doc folder.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Jul 30 15:04:36 CEST 2011 - vuntz@opensuse.org
|
|
|
|
- Update to version 0.3:
|
|
+ Rewrite hash table, and simplify licensing.
|
|
+ Correct paths for p11-kit config files.
|
|
+ Many build fixes and tweaks.
|
|
- Remove Apache-2 part from License tag, as the code was rewritten.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 25 15:35:57 CEST 2011 - vuntz@opensuse.org
|
|
|
|
- Initial package (version 0.2).
|
|
|