Accepting request 1308722 from security

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1308722
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pkcs11-provider?expand=0&rev=7

disable_kryoptic_nss.patch

@@ -0,0 +1,50 @@
+Index: pkcs11-provider-1.1/tests/meson.build
+===================================================================
+--- pkcs11-provider-1.1.orig/tests/meson.build
++++ pkcs11-provider-1.1/tests/meson.build
+@@ -128,7 +128,7 @@ foreach t, sources : test_programs
+ endforeach
+ 
+ setup_script=find_program('setup.sh')
+-all_suites=['softokn', 'softhsm', 'kryoptic', 'kryoptic.nss']
++all_suites=['softokn', 'softhsm', 'kryoptic']
+ foreach suite : all_suites
+   test(
+     'setup',
+@@ -147,14 +147,14 @@ tests = {
+   'pubkey': {'suites': all_suites},
+   'certs': {'suites': all_suites},
+   'ecc': {'suites': all_suites},
+-  'edwards': {'suites': ['softhsm', 'kryoptic', 'kryoptic.nss']},
++  'edwards': {'suites': ['softhsm', 'kryoptic']},
+   'ecdh': {'suites': all_suites},
+   'democa': {'suites': all_suites, 'is_parallel': false},
+   'digest': {'suites': all_suites},
+   'fork': {'suites': all_suites},
+-  'oaepsha2': {'suites': ['softokn', 'kryoptic', 'kryoptic.nss']},
+-  'hkdf': {'suites': ['softokn', 'kryoptic', 'kryoptic.nss']},
+-  'imported' : {'suites': ['softokn', 'kryoptic', 'kryoptic.nss']},
++  'oaepsha2': {'suites': ['softokn', 'kryoptic']},
++  'hkdf': {'suites': ['softokn', 'kryoptic']},
++  'imported' : {'suites': ['softokn', 'kryoptic']},
+   'pem_encoder': {'suites': all_suites},
+   'rsa': {'suites': all_suites},
+   'rsapss': {'suites': all_suites},
+@@ -162,14 +162,14 @@ tests = {
+   'genkey': {'suites': all_suites},
+   'pkey': {'suites': all_suites},
+   'session': {'suites': all_suites},
+-  'skey': {'suites': ['softokn', 'kryoptic', 'kryoptic.nss']},
++  'skey': {'suites': ['softokn', 'kryoptic']},
+   'rand': {'suites': all_suites},
+   'readkeys': {'suites': all_suites},
+   'tls': {'suites': all_suites, 'is_parallel': false, 'timeout': 60},
+   'tlsfuzzer': {'suites': all_suites, 'timeout': 90},
+   'uri': {'suites': all_suites, 'timeout': 90},
+-  'ecxc': {'suites': ['softhsm', 'kryoptic', 'kryoptic.nss']},
+-  'cms': {'suites': ['softokn', 'kryoptic', 'kryoptic.nss']},
++  'ecxc': {'suites': ['softhsm', 'kryoptic']},
++  'cms': {'suites': ['softokn', 'kryoptic']},
+   'pinlock': {'suites': ['kryoptic']},
+ }
+ 

pkcs11-provider-1.0.tar.xz.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEfHvRRpQ7IGu2RbZFlOrWfgBLZasFAmerjg8ACgkQlOrWfgBL
-ZasAJQgArHBOsKLDbChzFh/rbSk4udaWkmd+6TJqYMr0y1NSFiD5kbxaa6Inxy5Y
-75HKG5bnRK63FI0p9NS8lM9FYkq5bbAPqFE+DwfREDsPRPELdlrfBeMzMJVBzhC+
-qgvM9wlZ9yBT4L47kmKCeooGJudKP/wr6aa9CH91wj19qWxpFwuRl8Orc3naL7JK
-KuQsdpifTOpBKw0RNUwSJUmeedtoiiWDfZ8UWD/83++2QbpXh9PpNmqkfznbsToB
-PCy3hDAqvx1ZxBEcrhtRA8dM6+gPLrEUQPumo0ShODjbHPFf9uqnnt+RKJWGjsVN
-UXEM1CEy8JMUlzMPqREchWy5UcRmRw==
-=F8Nr
------END PGP SIGNATURE-----

pkcs11-provider-1.1.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:77fef7993ce28c4c1cdf956353ca47ac118d6bd8245f2fec79a19fc250693776
+size 187792

pkcs11-provider-1.1.tar.xz.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEEfHvRRpQ7IGu2RbZFlOrWfgBLZasFAmjJqcEACgkQlOrWfgBL
+Zavy9Qf/T5ImY6CeGKLti4YBHjOHAJoINfPSbQmNkJNxg3SSHwUcqO0maSlLui8A
+M3DM/WihqHP7bgl0w6xxrzkaxPuAaUbqaQh/trYETbVy2nZlEU8oFUWTBW4m25jy
+lRN//+FfbAJuHxVXw8d1HCdSy1Xk+ad1fVD/ZrFuNbK5s6PbP939W+2b0lhZrnY5
+Gy5DtuG/O8mkS5QJQeWWj27apWVNARre8Z3nmSJWzvQeYIOEcd9xMDl45qg0c+JN
+qW7BKDhRLBO6MhZyPFk//T1ED3KZ2gXEPv8zNEcOwmD3R+fL2YFFNcbuVtT3W0+S
+cgIrd1/FLS0CxCKa7+E3ShME/FyJYQ==
+=VBs2
+-----END PGP SIGNATURE-----

pkcs11-provider.changes

@@ -1,3 +1,18 @@
+-------------------------------------------------------------------
+Thu Sep 18 19:22:32 UTC 2025 - Lucas Mulling <lucas.mulling@suse.com>
+
+- Enable kryoptic tests
+  * Add patch disable_kryoptic_nss.patch
+
+-------------------------------------------------------------------
+Wed Sep 17 01:11:19 UTC 2025 - Lucas Mulling <lucas.mulling@suse.com>
+
+- Update to 1.1:
+  * EVP_SKEY support for AES ciphers and HKDF key derivation
+  * PKCS#11 3.2 support
+  * Support for the ML-DSA Quantum Resistant algorithm
+  * For a full list of changes see: https://github.com/latchset/pkcs11-provider/releases/tag/v1.1.0
+
 -------------------------------------------------------------------
 Tue Feb 25 21:00:35 UTC 2025 - Lucas Mulling <lucas.mulling@suse.com>
 

pkcs11-provider.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package pkcs11-provider
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 # Copyright (c) 2023 Luca Boccassi <bluca@debian.org>
 #
 # All modifications and additions to the file contributed by third parties
@@ -20,27 +20,28 @@
 %define _MODULES_DIR %(pkg-config --variable=modulesdir libcrypto)
 
 Name:           pkcs11-provider
-Version:        1.0
+Version:        1.1
 Release:        0
 Summary:        A PKCS#11 provider for OpenSSL 3.0+
 License:        Apache-2.0
 Group:          Productivity/Security
 URL:            https://github.com/latchset
-Source0:        %{url}/%{name}/releases/download/v%{version}/%{name}-%{version}.tar.xz
-Source1:        %{url}/%{name}/releases/download/v%{version}/%{name}-%{version}.tar.xz.asc
+Source0:        %{url}/%{name}/releases/download/v%{version}.0/%{name}-%{version}.tar.xz
+Source1:        %{url}/%{name}/releases/download/v%{version}.0/%{name}-%{version}.tar.xz.asc
 Source2:        %{name}.keyring
+Patch0:         disable_kryoptic_nss.patch
 BuildRequires:  meson
+BuildRequires:  openssl-devel >= 3.0.7
 BuildRequires:  pkgconfig
-BuildRequires:  pkgconfig(libcrypto) >= 3.0.7
 BuildRequires:  pkgconfig(p11-kit-1)
 # Required for testing
 BuildRequires:  expect
-BuildRequires:  gnutls
 BuildRequires:  opensc
 BuildRequires:  p11-kit-devel
 BuildRequires:  p11-kit-server
 BuildRequires:  pkgconfig(nss)
 %if 0%{?suse_version} >= 1699
+BuildRequires:  kryoptic
 BuildRequires:  softhsm-devel
 %endif