2022-07-08 14:20:43 +02:00
|
|
|
-------------------------------------------------------------------
|
2022-07-11 13:24:21 +02:00
|
|
|
Mon Jul 11 11:19:36 UTC 2022 - Alberto Planas Dominguez <aplanas@suse.com>
|
|
|
|
|
|
|
|
|
|
- Revert "Add version the configuration file tpm2-tss-fapi.conf"
|
|
|
|
|
This generate whitelist problems in rpmlint.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2022-07-08 14:20:43 +02:00
|
|
|
Fri Jul 8 11:52:40 UTC 2022 - Alberto Planas Dominguez <aplanas@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to 3.2.0
|
|
|
|
|
+ Fixed
|
|
|
|
|
* FAPI: fix curl_url_set call
|
|
|
|
|
* FAPI: Fix usage of curl url (Should fix Ubuntu 22.04)
|
|
|
|
|
* Fix buffer upcast leading to misalignment
|
|
|
|
|
* Fix check whether SM3 is available
|
|
|
|
|
* Update git.mk to support R/O src-dir
|
|
|
|
|
* Fixed file descriptor leak when tcti initialization failed.
|
|
|
|
|
* 32 Bit builds of the integration tests.
|
|
|
|
|
* Primary key creation, in some cases the unique field was not
|
|
|
|
|
cleared before calling create primary.
|
|
|
|
|
* Primary keys was used for signing the object were cleared after
|
|
|
|
|
loading. So access e.g. to the certificate did not work.
|
|
|
|
|
* Primary keys created with Fapi_Create with an auth value, the
|
|
|
|
|
auth_value was not used in inSensitive to recreate the primary
|
|
|
|
|
key. Now the auth value callback is used to initialize
|
|
|
|
|
inSensitive.
|
|
|
|
|
* The not possible usage of policies for primary keys generated
|
|
|
|
|
with Fapi_CreatePrimary has been fixed.
|
|
|
|
|
* An infinite loop when parsing erroneous JSON was fixed in FAPI.
|
|
|
|
|
* A buffer overflow in ESAPI xor parameter obfuscation was fixed.
|
|
|
|
|
* Certificates could be read only once in one application The
|
|
|
|
|
setting the init state of the state automaton for getting
|
|
|
|
|
certificates was fixed.
|
|
|
|
|
* A double free when executing policy action was fixed.
|
|
|
|
|
* A leak in Fapi_Quote was fixed.
|
|
|
|
|
* The wrong file locking in FAPI IO was fixed.
|
|
|
|
|
* Enable creation of tss group and user on systems with busybox
|
|
|
|
|
for fapi.
|
|
|
|
|
* One fapi integration test did change the auth value of the
|
|
|
|
|
storage hierarchy.
|
|
|
|
|
* A leak in fapi crypto with ossl3 was fixed.
|
|
|
|
|
* Add initial camelia support to FAPI
|
|
|
|
|
* Fix tests of fapi PCR
|
|
|
|
|
* Fix tests of ACT functionality if not supported by pTPM
|
|
|
|
|
* Fix compiler (unused) warning when building without debug
|
|
|
|
|
logging
|
|
|
|
|
* Fix leaks in error cases of integration tests
|
|
|
|
|
* Fix memory leak after ifapi_init_primary_finish failed
|
|
|
|
|
* Fix double-close of stream in FAPI
|
|
|
|
|
* Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
|
|
|
|
|
* Fix the authorization of hierarchy objects used in policy
|
|
|
|
|
secret.
|
|
|
|
|
* Fix check of qualifying data in Fapi_VerifyQuote.
|
|
|
|
|
* Fix some leaks in FAPI error cases.
|
|
|
|
|
* Make scripts compatible with non-posix shells where test does
|
|
|
|
|
not know -a and -o.
|
|
|
|
|
* Fix usage of variable not initialized when fapi keystore is
|
|
|
|
|
empty.
|
|
|
|
|
+ Added
|
|
|
|
|
* Add additional IFX root CAs
|
|
|
|
|
* Added support for SM2, SM3 and SM4.
|
|
|
|
|
* Added support for OpenSSL 3.0.0.
|
|
|
|
|
* Added authPolicy field to the TPMU_CAPABILITIES union.
|
|
|
|
|
* Added actData field to the TPMU_CAPABILITIES union.
|
|
|
|
|
* Added TPM2_CAP_AUTH_POLICIES
|
|
|
|
|
* Added TPM2_CAP_ACT constants.
|
|
|
|
|
* Added updates to the marshalling and unmarshalling of the
|
|
|
|
|
TPMU_CAPABILITIES union.
|
|
|
|
|
* Added updated to the FAPI serializations and deserializations of
|
|
|
|
|
the TPMU_CAPABILITIES union and associated types.
|
|
|
|
|
* Add CODE_OF_CONDUCT
|
|
|
|
|
* tcti-mssim and tcti-swtpm gained support for UDX communication
|
|
|
|
|
* Missing constant for TPM2_RH_PW
|
|
|
|
|
+ Removed
|
|
|
|
|
* Removed support for OpenSSL < 1.1.0.
|
|
|
|
|
* Marked TPMS_ALGORITHM_DESCRIPTION and corresponding MU routines
|
|
|
|
|
as deprecated.
|
|
|
|
|
* Those were errorous typedefs that are not use and not useful. So
|
|
|
|
|
we will remove this with 3.3
|
|
|
|
|
* Marked TPM2_RS_PW as deprecated. Use TPM2_RH_PW instead.
|
|
|
|
|
|
|
|
|
|
- Update to 3.1.1
|
|
|
|
|
+ Fixed
|
|
|
|
|
* Fixed file descriptor leak when tcti initialization failed.
|
|
|
|
|
* Primary key creation, in some cases the unique field was not
|
|
|
|
|
cleared before calling create primary.
|
|
|
|
|
* Primary keys was used for signing the object were cleared after
|
|
|
|
|
loading. So access e.g. to the certificate did not work.
|
|
|
|
|
* Primary keys created with Fapi_Create with an auth value, the
|
|
|
|
|
auth_value was not used in inSensitive to recreate the primary
|
|
|
|
|
key. Now the auth value callback is used to initialize
|
|
|
|
|
inSensitive.
|
|
|
|
|
* The not possible usage of policies for primary keys generated
|
|
|
|
|
with Fapi_CreatePrimary has been fixed.
|
|
|
|
|
* An infinite loop when parsing erroneous JSON was fixed in FAPI.
|
|
|
|
|
* A buffer overflow in ESAPI xor parameter obfuscation was fixed.
|
|
|
|
|
* Certificates could be read only once in one application The
|
|
|
|
|
setting the init state of the state automaton for getting
|
|
|
|
|
certificates was fixed.
|
|
|
|
|
* A double free when executing policy action was fixed.
|
|
|
|
|
* A leak in Fapi_Quote was fixed.
|
|
|
|
|
* The wrong file locking in FAPI IO was fixed.
|
|
|
|
|
* One fapi integration test did change the auth value of the
|
|
|
|
|
storage hierarchy.
|
|
|
|
|
* Fix test of FAPI PCR
|
|
|
|
|
* Fix leaks in error cases of integration tests
|
|
|
|
|
* Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
|
|
|
|
|
* Fix the authorization of hierarchy objects used in policy
|
|
|
|
|
secret.
|
|
|
|
|
* Fix check of qualifying data in Fapi_VerifyQuote.
|
|
|
|
|
* Fix some leaks in FAPI error cases.
|
|
|
|
|
* Fix usage of variable not initialized when fapi keystore is
|
|
|
|
|
empty.
|
|
|
|
|
+ Added
|
|
|
|
|
* Add additional IFX root CAs
|
|
|
|
|
|
2021-12-08 18:09:11 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 8 16:57:58 UTC 2021 - Alberto Planas Dominguez <aplanas@suse.com>
|
|
|
|
|
|
|
|
|
|
- Version 3.1.0 includes:
|
|
|
|
|
+ cover update to 2.4.5 (jsc#SLE-17366)
|
|
|
|
|
+ cover update to 2.3.0 (jsc#SLE-9515)
|
|
|
|
|
+ fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
|
Accepting request 937743 from home:aplanas:branches:security
- Version 3.1.0 includes:
+ cover update to 2.4.5 (jsc#SLE-17366)
+ cover update to 2.3.0 (jsc#SLE-9515)
+ fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf
- Remove conflicting sysusers.d file
- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
* Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
* Fixed possible access outside the array in ifapi_calculate_tree
* Added pcap TCTI
* Added GlobalSign TPM Root CA certs to FAPI cert store
* Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
* Added two new TPM commands TPM2_CC_CertifyX509,
and TPM2_CC_ACT_SetTimeout
- small services fixes and comments
- update to 3.0.3:
- changes in 3.0.3:
* Fix Regression in Fapi_List
* Fix memory leak in policy calculation
- changes in 3.0.2:
* FAPI: Fix setting of the system flag of NV objects
* This will let NV object metadata be created system-wide always instead of
* locally in the user. Existing metadata will remain in the user directory.
* It can be moved to the corresponding systemstore manually if needed.
* FAPI: Fix policy searching, when a policyRef was provided
* FAPI: Accept EK-Certs without CRL dist point
* FAPI: Fix return codes of Fapi_List
* FAPI: Fix memleak in policy execution
* FAPI: Fix coverity NULL-pointer check
* FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
* FAPI: Fix deleting of policy files.
* FAPI: Fix wrong file loading during object search.
* Fapi: Fix memory leak
* Fapi: Fix potential NULL-Dereference
* Fapi: Remove superfluous NULL check
* Fix a memory leak in async keystore load.
- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries
- Update to 3.0.1, changelog at:
https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
* libtss2-fapi1
* libtss2-tcti-cmd0
* libtss2-tcti-swtpm0
- Update to version 2.3.3
* Fixed mixing salted and unsalted sessions in the same ESAPI
context
* Removed use of VLAs from TPML marshal code
* Added check for object node before calling compute_session_value
function
* Fixed auth calculation in Esys_StartAuthSession called with
optional parameters
* Fixed compute_encrypted_salt error handling in
Esys_StartAuthSession
* Fixed exported symbols map for libtss2-mu
- Use system-users for tss user creation (boo#1162360).
- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
shortcut through the -mini flavor.
- update to upstream version 2.3.2:
- changes since version 2.3.0:
- Fix unit tests on S390 architectures
- Fixed HMAC generation for policy sessions
- update to upstream version 2.3.0:
- changes in version 2.3.0:
- tss2-tctildr: A new library that helps with tcti initialization
Recommend to use this in place of custom tcti loading code now !
- tss2-rc: A new library that provides textual representations for return
codes
- Option to disable NIST-deprecated crypto (--disable-weak-crypto)
- Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
- map-files with correct symbol lists for tss2-sys and tss2-esys
This may lead to unresolved symbols in linked applications
- Support to call Tss2_Sys_Execute repeatedly on certain errors
- Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
- Automated session attribution clearing for esys (decrypt and encrypt)
per cmd
- Removed libtss2-mu from "Requires" field of libtss2-esys.pc
Needs to be added explicitely now
- All fixes from 2.2.1, 2.2.2 and 2.2.3
- Fixed SPDX License Identifiers
- Fixed Null-pointer problems in tcti-tbs
- Fixed Default locality for tcti-mssim set to LOC_0
- Fixed coverity and valgrind leaks detected in test programs (not library
code)
- update to upstream version 2.2.3:
- changes in version 2.2.3:
* Fix computation of session name
* Fixed PolicyPassword handling of session Attributes
* Fixed windows build from dist ball
* Fixed default tcti configure option
* Fixed nonce size calculation in ESYS sessions
- changes in version 2.2.2:
* Fixed wrong encryption flag in EncryptDecrypt
* Fixing openssl engine invocation
- bsc#1130588: Require shadow instead of old pwdutils
- update to upstream version 2.2.1:
- changes from version 2.2.0:
- Fixed leak of hkey on success in iesys_cryptossl_hmac_start
- Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
- Fixed NULL ptr issue in sequenceHandleNode
- Fixed NULL ptr auth handling in Esys_TR_SetAuth
- Fixed NULL auth handling in iesys_compute_session_value
- Fixed marshaling of TPM2Bs with sub types.
- Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
- Fixed the way size of the hmac value of a session without authorization
- Added missing MU functions for TPM2_NT type
- Added missing MU functions for TPMA_ID_OBJECT type
- Added missing type TPM2_NT into tss2_tpm2_types.h
- Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
- Fixed build breakage when --with-maxloglevel is not 'trace'
- Fixed build breakage in generated configure script when CFLAGS is set
- Fixed configure scritp ERROR_IF_NO_PROG macro
- Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
- Fixed unmarshaling of the TPM2B type with invalid size
- Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- Added support for QNX build
- Added support for partial reads in device TCTI
- changes from version 2.1.1:
- Fixed leak of hkey on success in iesys_cryptossl_hmac_start
- Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
- Fixed NULL ptr issue in sequenceHandleNode
- Fixed NULL ptr auth handling in Esys_TR_SetAuth
- Fixed NULL auth handling in iesys_compute_session_value
- Fixed marshaling of TPM2Bs with sub types.
- Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
- Fixed the way size of the hmac value of a session without authorization
- Added missing MU functions for TPM2_NT type
- Added missing MU functions for TPMA_ID_OBJECT type
- Added missing type TPM2_NT into tss2_tpm2_types.h
- Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
- Fixed build breakage when --with-maxloglevel is not 'trace'
- Fixed build breakage in generated configure script when CFLAGS is set
- Fixed configure scritp ERROR_IF_NO_PROG macro
- Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
- Fixed unmarshaling of the TPM2B type with invalid size
- Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- changes from version 2.1.0:
- Fixed handling of the default TCTI
- Changed logging to be ISO-C99 compatible
- Fixed leak of dlopen handle
- Fixed logging of a response header tag in Tss2_Sys_Execute
- Fixed marshaling of TPM2B parameters in SAPI commands
- Fixed unnecessary warning in Esys_Startup
- Fixed warnings in doxygen documentation
- Added Esys_Free wrapper function for systems using different C runtime libraries
- Added Windows TBS TCTI
- Added non-blocking mode of operation in tcti-device
- Added tests for Esys_HMAC and Esys_Hash
- Enabled integration tests on physical TPM device
- Added openssl libcrypto backend
- Added Doxygen documentation to integration tests
- Refactored SetDecryptParam
- Enabled OpenSSL crypto backend by default
- changes from 2.0.2:
- Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
- Fixed NULL ptr issue in sequenceHandleNode
- Fixed NULL ptr auth handling in Esys_TR_SetAuth
- Fixed NULL auth handling in iesys_compute_session_value
- Fixed marshaling of TPM2Bs with sub types.
- Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
- Fixed the way size of the hmac value of a session without authorization
- Added missing MU functions for TPM2_NT type
- Added missing MU functions for TPMA_ID_OBJECT type
- Added missing type TPM2_NT into tss2_tpm2_types.h
- Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
- Fixed build breakage when --with-maxloglevel is not 'trace'
- Fixed build breakage in generated configure script when CFLAGS is set
- Fixed configure scritp ERROR_IF_NO_PROG macro
- Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
- Fixed unmarshaling of the TPM2B type with invalid size
- Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags
- update to upstream version 2.0.1 (FATE#324477):
- Fixed problems with doxygan failing make distcheck
- Fixed conversion of gcrypt mpi numbers to binary data
- Fixed an error in parsing socket address in MSSIM TCTI
- Fixed compilation error with --disable-tcti-mssim
- Added initialization function for gcrypt to suppress warning
- Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
- Fixed invalid RSA encryption with exponent equal to 0
- Fixed checking of return codes in ESAPI commands
- Added checks for programs required by the test harness @ configure time
- Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
- Checked for 1.2 TPM type response
- Changed constants values in esys header file to unsigned
- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
properly updated (at least on SLES-12-SP4)
- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
and sys0
- Explicitly require udev to fix missing ownership for /usr/lib/udev.
- update to new major version 2.0.0:
- version_fix.patch: removed, we're now using the distribution tarballs
where this problem shouldn't happen
- this update introduces an incompatible ABI to the previous version.
all libraries have been renamed so there is not really a relation to
the old version any more.
- upstream changelog:
## [2.0.0] - 2018-06-20
### Added
- Implementation of the Marshal/Unmarshal library (libtss2-mu)
- Implementation of the Enhanced System API (libtss2-esys aka ESAPI)
- New implemetation of the TPM Command Transmission Interface (TCTI) for:
- communication with Linux TPM2 device driver: libtss2-tcti-device
- communication with Microsoft software simulator: libtss2-tcti-mssim
- New directory layout (API break)
- Updated documentation with new doxygen and updated man pages
- Support for Windows build with Visual Studio and clang, currently limited
to libtss2-mu and libtss2-sys
- Implementation of the new Attached Component (AC) commands
- Implementation of the new TPM2_PolicyAuthorizeNV command
- Implementation of the new TPM2_CreateLoaded command
- Implementation of the new TPM2_PolicyTemplate command
- Addition of _Complete functions to all TPM commands
- New logging framework
- Added const qualifiers to API input pointers (API break)
- Cleaned up headers and remove implementation.h and tpm2.h (API break)
### Changed
- Converted all cpp files to c, removed dependency on C++ compiler.
- Cleaned out a number of marshaling functions from the SAPI code.
- Update Linux / Unix OS detection to use non-obsolete macros.
- Changed TCTI macros to CamelCase (API break)
- Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break)
- Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break)
- Fixed order of parameters in AC commands: Input command authorizations
now come after the input handles, but still before the command parameters.
### Removed
- Removed all sysapi/sysapi_utils/*arshal_TPM*.c files
### Fixed
- Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms
- Updated PlatformCommand function from libtss2-tcti-mssim to no longer send
CANCEL_OFF before every command.
- Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros
- Fixed wrong return type for Tss2_Sys_Finalize (API break).
## [1.4.0] - 2018-03-02
### Added
- Attached Component commands from the last public review spec.
### Fixed
- Essential files missing from release tarballs are now included.
- Version string generation has been moved from configure.ac to the
bootstrap script. It is now stored in a file named `VERSION` that is
shipped in the release tarball.
- We've stopped shipping the built man page for InitSocketTcti.3 and now
ship the source.
- removed leftover comment from dropped reproducable.patch
- update to upstream version 1.3.0:
- support for reproducable builds
- improved documentation / manual pages
- various stability bugfixes
- EncryptDecrypt2 command is now implemented
- removed reproducible.patch. This is now included upstream.
- added version_fix.patch to fix package config version numbers.
- fix the "fix", turns out only the unversioned symlink's supposed to go into
-devel.
- no longer install the udev rule, it's now part of the new tpm2.0-abrmd
package.
- fixed a warning regarding a missing dependency of the devel package to the
main package
- correctly package library symlinks only in the devel package, the library
itself only in the library package. Was mixed up before.
- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring
autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.
- Updated to upstream version 1.1.0
- With this version the resourcemgr daemon is dropped from this package. It
is replaced by a completely new implementation found in a new package
tpm2.0-abrmd. this package will only consist of the libraries any more.
- Changed
- tpmclient, disabled all tests that rely on the old resourcemgr.
- Fixed
- Fixed definition of PCR_LAST AND TRANSIENT_LAST macros.
- Removed
- tpmtest
- resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd
- Add reproducible.patch to sort input files to make build reproducible
(boo#1041090)
- create tss user account and install udev rule to fix startup of resourcemgr
(bnc#1038586)
- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing
to do with tpm2-tss.
- fixed typo in resourcemgr.service (bsc#1031004)
- Remove --with-pic which is only for static libs.
- Fix an improper Requires line.
- Split libtcti* from libsapi0; these are independentlty
developable units.
- Updated to 1.0 (FATE#321508)
- Added
- Travis-CI integration with GitHub
- Unit tests for primitive (un)?marshal functions.
- Example systemd unit for resourcemgr.
- Allow for unit tests to be enabled selectively.
- added pkg-config files for libraries
- Changed
- move simulator initialization code to socket TCTI init function.
- socket TCTI finalize no longer frees context
- rename libtss2 to libsapi
- rename libtcti_device to libtcti-device
- rename libtcti_socket to libtcti-socket
- move $(includedir)/tss to $(includedir)/sapi
- Move default compiler flags to config.site file.
- Fixed
- Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0.
- Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr.
- Fixes to handling of persistent objects by resourcemgr.
- Removed
- Semicolon from TPMA_* macros definitions.
- Windows build files.
- SAPI_CLIENT macro tests.
- Security
- Fix buffer overflow in resourcemgr.
- use sample resourcemanager.service
- tpm2-0-tss-configure.patch: fix weird error.
- Remove type=forking from service file (bsc#995554)
- added a systemd unit service file (FATE#315631)
- Correct package naming to be in line with shared library guideline
- Remove unused systemd build and runtime dependencies
(FATE#315631)
- Fix rpm group of library package: libs belong, per definition, to
the group "System/Libraries". (FATE#315631)
- initial import of the tpm 2.0 tss stack (FATE#315631)
OBS-URL: https://build.opensuse.org/request/show/937743
OBS-URL: https://build.opensuse.org/package/show/security/tpm2-0-tss?expand=0&rev=117
2021-12-09 11:31:03 +01:00
|
|
|
- Add version the configuration file tpm2-tss-fapi.conf
|
2021-12-08 10:29:33 +01:00
|
|
|
|
2021-07-16 10:13:53 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 15 15:51:04 UTC 2021 - Callum Farmer <gmbr3@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Remove conflicting sysusers.d file
|
|
|
|
|
|
2021-07-15 13:15:44 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 14 15:11:55 UTC 2021 - Callum Farmer <gmbr3@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Clean spec file
|
|
|
|
|
- Add new library libtss2-tcti-pcap0
|
|
|
|
|
- Update to 3.1.0:
|
|
|
|
|
* Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
|
|
|
|
|
* Fixed possible access outside the array in ifapi_calculate_tree
|
|
|
|
|
* Added pcap TCTI
|
|
|
|
|
* Added GlobalSign TPM Root CA certs to FAPI cert store
|
|
|
|
|
* Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
|
|
|
|
|
* Added two new TPM commands TPM2_CC_CertifyX509,
|
|
|
|
|
and TPM2_CC_ACT_SetTimeout
|
|
|
|
|
|
2021-06-28 08:53:09 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 28 06:52:53 UTC 2021 - Marcus Meissner <meissner@suse.com>
|
|
|
|
|
|
|
|
|
|
- small services fixes and comments
|
|
|
|
|
|
2021-01-28 10:21:04 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jan 28 09:18:58 UTC 2021 - Matthias Gerstner <matthias.gerstner@suse.com>
|
|
|
|
|
|
|
|
|
|
- update to 3.0.3:
|
|
|
|
|
- changes in 3.0.3:
|
|
|
|
|
* Fix Regression in Fapi_List
|
|
|
|
|
* Fix memory leak in policy calculation
|
|
|
|
|
- changes in 3.0.2:
|
|
|
|
|
* FAPI: Fix setting of the system flag of NV objects
|
|
|
|
|
* This will let NV object metadata be created system-wide always instead of
|
|
|
|
|
* locally in the user. Existing metadata will remain in the user directory.
|
|
|
|
|
* It can be moved to the corresponding systemstore manually if needed.
|
|
|
|
|
* FAPI: Fix policy searching, when a policyRef was provided
|
|
|
|
|
* FAPI: Accept EK-Certs without CRL dist point
|
|
|
|
|
* FAPI: Fix return codes of Fapi_List
|
|
|
|
|
* FAPI: Fix memleak in policy execution
|
|
|
|
|
* FAPI: Fix coverity NULL-pointer check
|
|
|
|
|
* FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
|
|
|
|
|
* FAPI: Fix deleting of policy files.
|
|
|
|
|
* FAPI: Fix wrong file loading during object search.
|
|
|
|
|
* Fapi: Fix memory leak
|
|
|
|
|
* Fapi: Fix potential NULL-Dereference
|
|
|
|
|
* Fapi: Remove superfluous NULL check
|
|
|
|
|
* Fix a memory leak in async keystore load.
|
|
|
|
|
|
2020-10-22 13:43:23 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 22 11:38:52 UTC 2020 - Matthias Gerstner <matthias.gerstner@suse.com>
|
|
|
|
|
|
|
|
|
|
- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
|
|
|
|
|
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
|
|
|
|
|
- adjust baselibs.conf to match new library versions and added libraries
|
|
|
|
|
|
2020-10-22 12:27:22 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 19 13:30:39 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Update to 3.0.1, changelog at:
|
|
|
|
|
https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
|
|
|
|
|
- Update libtss2-sys0 to libtss2-sys1
|
|
|
|
|
- Add new libs:
|
|
|
|
|
* libtss2-fapi1
|
|
|
|
|
* libtss2-tcti-cmd0
|
|
|
|
|
* libtss2-tcti-swtpm0
|
|
|
|
|
|
2020-02-24 10:44:15 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 19 19:37:14 UTC 2020 - Martin Hauke <mardnh@gmx.de>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.3.3
|
|
|
|
|
* Fixed mixing salted and unsalted sessions in the same ESAPI
|
|
|
|
|
context
|
|
|
|
|
* Removed use of VLAs from TPML marshal code
|
|
|
|
|
* Added check for object node before calling compute_session_value
|
|
|
|
|
function
|
|
|
|
|
* Fixed auth calculation in Esys_StartAuthSession called with
|
|
|
|
|
optional parameters
|
|
|
|
|
* Fixed compute_encrypted_salt error handling in
|
|
|
|
|
Esys_StartAuthSession
|
|
|
|
|
* Fixed exported symbols map for libtss2-mu
|
|
|
|
|
|
2020-01-31 15:16:21 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 31 11:51:03 UTC 2020 - Michal Suchanek <msuchanek@suse.com>
|
|
|
|
|
|
|
|
|
|
- Use system-users for tss user creation (boo#1162360).
|
|
|
|
|
|
2020-01-27 09:58:42 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 24 14:13:01 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
|
|
|
|
|
shortcut through the -mini flavor.
|
|
|
|
|
|
2020-01-02 10:06:06 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Dec 29 21:06:27 UTC 2019 - Martin Hauke <mardnh@gmx.de>
|
|
|
|
|
|
|
|
|
|
- update to upstream version 2.3.2:
|
|
|
|
|
- changes since version 2.3.0:
|
|
|
|
|
- Fix unit tests on S390 architectures
|
|
|
|
|
- Fixed HMAC generation for policy sessions
|
|
|
|
|
|
2019-12-11 12:09:20 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 11 11:01:44 UTC 2019 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- update to upstream version 2.3.0:
|
|
|
|
|
- changes in version 2.3.0:
|
|
|
|
|
- tss2-tctildr: A new library that helps with tcti initialization
|
|
|
|
|
Recommend to use this in place of custom tcti loading code now !
|
|
|
|
|
- tss2-rc: A new library that provides textual representations for return
|
|
|
|
|
codes
|
|
|
|
|
- Option to disable NIST-deprecated crypto (--disable-weak-crypto)
|
|
|
|
|
- Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
|
|
|
|
|
- map-files with correct symbol lists for tss2-sys and tss2-esys
|
|
|
|
|
This may lead to unresolved symbols in linked applications
|
|
|
|
|
- Support to call Tss2_Sys_Execute repeatedly on certain errors
|
|
|
|
|
- Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
|
|
|
|
|
- Automated session attribution clearing for esys (decrypt and encrypt)
|
|
|
|
|
per cmd
|
|
|
|
|
- Removed libtss2-mu from "Requires" field of libtss2-esys.pc
|
|
|
|
|
Needs to be added explicitely now
|
|
|
|
|
- All fixes from 2.2.1, 2.2.2 and 2.2.3
|
|
|
|
|
- Fixed SPDX License Identifiers
|
|
|
|
|
- Fixed Null-pointer problems in tcti-tbs
|
|
|
|
|
- Fixed Default locality for tcti-mssim set to LOC_0
|
|
|
|
|
- Fixed coverity and valgrind leaks detected in test programs (not library
|
|
|
|
|
code)
|
|
|
|
|
|
2019-08-23 14:08:26 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 23 12:06:22 UTC 2019 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- update to upstream version 2.2.3:
|
2019-08-26 07:44:16 +02:00
|
|
|
- changes in version 2.2.3:
|
2019-08-23 14:08:26 +02:00
|
|
|
* Fix computation of session name
|
|
|
|
|
* Fixed PolicyPassword handling of session Attributes
|
|
|
|
|
* Fixed windows build from dist ball
|
|
|
|
|
* Fixed default tcti configure option
|
|
|
|
|
* Fixed nonce size calculation in ESYS sessions
|
2019-08-26 07:44:16 +02:00
|
|
|
- changes in version 2.2.2:
|
2019-08-23 14:08:26 +02:00
|
|
|
* Fixed wrong encryption flag in EncryptDecrypt
|
|
|
|
|
* Fixing openssl engine invocation
|
|
|
|
|
|
2019-04-26 12:43:02 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 26 10:37:23 UTC 2019 - mvetter@suse.com
|
|
|
|
|
|
|
|
|
|
- bsc#1130588: Require shadow instead of old pwdutils
|
|
|
|
|
|
2018-09-18 11:05:11 +02:00
|
|
|
-------------------------------------------------------------------
|
2019-03-06 11:09:35 +01:00
|
|
|
Wed Mar 6 10:06:35 UTC 2019 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- update to upstream version 2.2.1:
|
|
|
|
|
- changes from version 2.2.0:
|
|
|
|
|
- Fixed leak of hkey on success in iesys_cryptossl_hmac_start
|
|
|
|
|
- Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
|
|
|
|
|
- Fixed NULL ptr issue in sequenceHandleNode
|
|
|
|
|
- Fixed NULL ptr auth handling in Esys_TR_SetAuth
|
|
|
|
|
- Fixed NULL auth handling in iesys_compute_session_value
|
|
|
|
|
- Fixed marshaling of TPM2Bs with sub types.
|
|
|
|
|
- Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
|
|
|
|
|
- Fixed the way size of the hmac value of a session without authorization
|
|
|
|
|
- Added missing MU functions for TPM2_NT type
|
|
|
|
|
- Added missing MU functions for TPMA_ID_OBJECT type
|
|
|
|
|
- Added missing type TPM2_NT into tss2_tpm2_types.h
|
|
|
|
|
- Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
|
|
|
|
|
- Fixed build breakage when --with-maxloglevel is not 'trace'
|
|
|
|
|
- Fixed build breakage in generated configure script when CFLAGS is set
|
|
|
|
|
- Fixed configure scritp ERROR_IF_NO_PROG macro
|
|
|
|
|
- Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
|
|
|
|
|
- Fixed unmarshaling of the TPM2B type with invalid size
|
|
|
|
|
- Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
|
|
|
|
|
- Added support for QNX build
|
|
|
|
|
- Added support for partial reads in device TCTI
|
|
|
|
|
- changes from version 2.1.1:
|
|
|
|
|
- Fixed leak of hkey on success in iesys_cryptossl_hmac_start
|
|
|
|
|
- Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
|
|
|
|
|
- Fixed NULL ptr issue in sequenceHandleNode
|
|
|
|
|
- Fixed NULL ptr auth handling in Esys_TR_SetAuth
|
|
|
|
|
- Fixed NULL auth handling in iesys_compute_session_value
|
|
|
|
|
- Fixed marshaling of TPM2Bs with sub types.
|
|
|
|
|
- Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
|
|
|
|
|
- Fixed the way size of the hmac value of a session without authorization
|
|
|
|
|
- Added missing MU functions for TPM2_NT type
|
|
|
|
|
- Added missing MU functions for TPMA_ID_OBJECT type
|
|
|
|
|
- Added missing type TPM2_NT into tss2_tpm2_types.h
|
|
|
|
|
- Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
|
|
|
|
|
- Fixed build breakage when --with-maxloglevel is not 'trace'
|
|
|
|
|
- Fixed build breakage in generated configure script when CFLAGS is set
|
|
|
|
|
- Fixed configure scritp ERROR_IF_NO_PROG macro
|
|
|
|
|
- Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
|
|
|
|
|
- Fixed unmarshaling of the TPM2B type with invalid size
|
|
|
|
|
- Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
|
|
|
|
|
- changes from version 2.1.0:
|
|
|
|
|
- Fixed handling of the default TCTI
|
|
|
|
|
- Changed logging to be ISO-C99 compatible
|
|
|
|
|
- Fixed leak of dlopen handle
|
|
|
|
|
- Fixed logging of a response header tag in Tss2_Sys_Execute
|
|
|
|
|
- Fixed marshaling of TPM2B parameters in SAPI commands
|
|
|
|
|
- Fixed unnecessary warning in Esys_Startup
|
|
|
|
|
- Fixed warnings in doxygen documentation
|
|
|
|
|
- Added Esys_Free wrapper function for systems using different C runtime libraries
|
|
|
|
|
- Added Windows TBS TCTI
|
|
|
|
|
- Added non-blocking mode of operation in tcti-device
|
|
|
|
|
- Added tests for Esys_HMAC and Esys_Hash
|
|
|
|
|
- Enabled integration tests on physical TPM device
|
|
|
|
|
- Added openssl libcrypto backend
|
|
|
|
|
- Added Doxygen documentation to integration tests
|
|
|
|
|
- Refactored SetDecryptParam
|
|
|
|
|
- Enabled OpenSSL crypto backend by default
|
|
|
|
|
- changes from 2.0.2:
|
|
|
|
|
- Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
|
|
|
|
|
- Fixed NULL ptr issue in sequenceHandleNode
|
|
|
|
|
- Fixed NULL ptr auth handling in Esys_TR_SetAuth
|
|
|
|
|
- Fixed NULL auth handling in iesys_compute_session_value
|
|
|
|
|
- Fixed marshaling of TPM2Bs with sub types.
|
|
|
|
|
- Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
|
|
|
|
|
- Fixed the way size of the hmac value of a session without authorization
|
|
|
|
|
- Added missing MU functions for TPM2_NT type
|
|
|
|
|
- Added missing MU functions for TPMA_ID_OBJECT type
|
|
|
|
|
- Added missing type TPM2_NT into tss2_tpm2_types.h
|
|
|
|
|
- Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
|
|
|
|
|
- Fixed build breakage when --with-maxloglevel is not 'trace'
|
|
|
|
|
- Fixed build breakage in generated configure script when CFLAGS is set
|
|
|
|
|
- Fixed configure scritp ERROR_IF_NO_PROG macro
|
|
|
|
|
- Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
|
|
|
|
|
- Fixed unmarshaling of the TPM2B type with invalid size
|
|
|
|
|
- Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
|
2019-03-06 11:10:25 +01:00
|
|
|
- introduce _service file for syncing with upstream tags
|
2019-03-06 11:09:35 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2018-09-26 17:42:09 +02:00
|
|
|
Wed Sep 26 15:41:27 UTC 2018 - matthias.gerstner@suse.com
|
|
|
|
|
|
2019-01-14 15:18:22 +01:00
|
|
|
- update to upstream version 2.0.1 (FATE#324477):
|
2018-09-26 17:42:09 +02:00
|
|
|
- Fixed problems with doxygan failing make distcheck
|
|
|
|
|
- Fixed conversion of gcrypt mpi numbers to binary data
|
|
|
|
|
- Fixed an error in parsing socket address in MSSIM TCTI
|
|
|
|
|
- Fixed compilation error with --disable-tcti-mssim
|
|
|
|
|
- Added initialization function for gcrypt to suppress warning
|
|
|
|
|
- Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
|
|
|
|
|
- Fixed invalid RSA encryption with exponent equal to 0
|
|
|
|
|
- Fixed checking of return codes in ESAPI commands
|
|
|
|
|
- Added checks for programs required by the test harness @ configure time
|
|
|
|
|
- Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
|
|
|
|
|
- Checked for 1.2 TPM type response
|
|
|
|
|
- Changed constants values in esys header file to unsigned
|
|
|
|
|
-------------------------------------------------------------------
|
2018-09-18 11:05:11 +02:00
|
|
|
Tue Sep 18 09:04:31 UTC 2018 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
|
|
|
|
|
properly updated (at least on SLES-12-SP4)
|
|
|
|
|
|
2018-07-05 17:40:46 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 5 15:40:23 UTC 2018 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
|
|
|
|
|
and sys0
|
|
|
|
|
|
2018-07-03 09:57:35 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 3 07:56:18 UTC 2018 - matthias.gerstner@suse.com
|
|
|
|
|
|
2018-07-03 13:21:50 +02:00
|
|
|
- Explicitly require udev to fix missing ownership for /usr/lib/udev.
|
2018-07-03 09:57:35 +02:00
|
|
|
|
2018-06-29 16:14:43 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jun 29 10:55:58 UTC 2018 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- update to new major version 2.0.0:
|
|
|
|
|
- version_fix.patch: removed, we're now using the distribution tarballs
|
|
|
|
|
where this problem shouldn't happen
|
|
|
|
|
- this update introduces an incompatible ABI to the previous version.
|
|
|
|
|
all libraries have been renamed so there is not really a relation to
|
|
|
|
|
the old version any more.
|
|
|
|
|
- upstream changelog:
|
|
|
|
|
## [2.0.0] - 2018-06-20
|
|
|
|
|
### Added
|
|
|
|
|
- Implementation of the Marshal/Unmarshal library (libtss2-mu)
|
|
|
|
|
- Implementation of the Enhanced System API (libtss2-esys aka ESAPI)
|
|
|
|
|
- New implemetation of the TPM Command Transmission Interface (TCTI) for:
|
|
|
|
|
- communication with Linux TPM2 device driver: libtss2-tcti-device
|
|
|
|
|
- communication with Microsoft software simulator: libtss2-tcti-mssim
|
|
|
|
|
- New directory layout (API break)
|
|
|
|
|
- Updated documentation with new doxygen and updated man pages
|
|
|
|
|
- Support for Windows build with Visual Studio and clang, currently limited
|
|
|
|
|
to libtss2-mu and libtss2-sys
|
|
|
|
|
- Implementation of the new Attached Component (AC) commands
|
|
|
|
|
- Implementation of the new TPM2_PolicyAuthorizeNV command
|
|
|
|
|
- Implementation of the new TPM2_CreateLoaded command
|
|
|
|
|
- Implementation of the new TPM2_PolicyTemplate command
|
|
|
|
|
- Addition of _Complete functions to all TPM commands
|
|
|
|
|
- New logging framework
|
|
|
|
|
- Added const qualifiers to API input pointers (API break)
|
|
|
|
|
- Cleaned up headers and remove implementation.h and tpm2.h (API break)
|
|
|
|
|
### Changed
|
|
|
|
|
- Converted all cpp files to c, removed dependency on C++ compiler.
|
|
|
|
|
- Cleaned out a number of marshaling functions from the SAPI code.
|
|
|
|
|
- Update Linux / Unix OS detection to use non-obsolete macros.
|
|
|
|
|
- Changed TCTI macros to CamelCase (API break)
|
|
|
|
|
- Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break)
|
|
|
|
|
- Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break)
|
|
|
|
|
- Fixed order of parameters in AC commands: Input command authorizations
|
|
|
|
|
now come after the input handles, but still before the command parameters.
|
|
|
|
|
### Removed
|
|
|
|
|
- Removed all sysapi/sysapi_utils/*arshal_TPM*.c files
|
|
|
|
|
### Fixed
|
|
|
|
|
- Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms
|
|
|
|
|
- Updated PlatformCommand function from libtss2-tcti-mssim to no longer send
|
|
|
|
|
CANCEL_OFF before every command.
|
|
|
|
|
- Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros
|
|
|
|
|
- Fixed wrong return type for Tss2_Sys_Finalize (API break).
|
|
|
|
|
|
|
|
|
|
## [1.4.0] - 2018-03-02
|
|
|
|
|
### Added
|
|
|
|
|
- Attached Component commands from the last public review spec.
|
|
|
|
|
### Fixed
|
|
|
|
|
- Essential files missing from release tarballs are now included.
|
|
|
|
|
- Version string generation has been moved from configure.ac to the
|
|
|
|
|
bootstrap script. It is now stored in a file named `VERSION` that is
|
|
|
|
|
shipped in the release tarball.
|
|
|
|
|
- We've stopped shipping the built man page for InitSocketTcti.3 and now
|
|
|
|
|
ship the source.
|
|
|
|
|
|
2018-03-07 15:49:26 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 7 14:48:50 UTC 2018 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- removed leftover comment from dropped reproducable.patch
|
|
|
|
|
|
2018-02-22 11:16:24 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 22 09:41:46 UTC 2018 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- update to upstream version 1.3.0:
|
|
|
|
|
- support for reproducable builds
|
|
|
|
|
- improved documentation / manual pages
|
|
|
|
|
- various stability bugfixes
|
|
|
|
|
- EncryptDecrypt2 command is now implemented
|
2018-02-22 13:15:09 +01:00
|
|
|
- removed reproducible.patch. This is now included upstream.
|
2018-02-22 11:49:01 +01:00
|
|
|
- added version_fix.patch to fix package config version numbers.
|
2018-02-22 11:16:24 +01:00
|
|
|
|
2017-09-01 16:32:12 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 1 14:27:33 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- fix the "fix", turns out only the unversioned symlink's supposed to go into
|
|
|
|
|
-devel.
|
|
|
|
|
|
2017-08-03 10:12:52 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 20 13:51:38 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- no longer install the udev rule, it's now part of the new tpm2.0-abrmd
|
|
|
|
|
package.
|
|
|
|
|
- fixed a warning regarding a missing dependency of the devel package to the
|
|
|
|
|
main package
|
|
|
|
|
- correctly package library symlinks only in the devel package, the library
|
|
|
|
|
itself only in the library package. Was mixed up before.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 19 14:10:02 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring
|
|
|
|
|
autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 19 11:13:43 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- Updated to upstream version 1.1.0
|
|
|
|
|
- With this version the resourcemgr daemon is dropped from this package. It
|
|
|
|
|
is replaced by a completely new implementation found in a new package
|
|
|
|
|
tpm2.0-abrmd. this package will only consist of the libraries any more.
|
|
|
|
|
|
|
|
|
|
- Changed
|
|
|
|
|
- tpmclient, disabled all tests that rely on the old resourcemgr.
|
|
|
|
|
- Fixed
|
|
|
|
|
- Fixed definition of PCR_LAST AND TRANSIENT_LAST macros.
|
|
|
|
|
- Removed
|
|
|
|
|
- tpmtest
|
|
|
|
|
- resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd
|
|
|
|
|
|
2017-05-27 23:39:27 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat May 27 05:07:22 UTC 2017 - bwiedemann@suse.com
|
|
|
|
|
|
|
|
|
|
- Add reproducible.patch to sort input files to make build reproducible
|
|
|
|
|
(boo#1041090)
|
|
|
|
|
|
2017-05-11 17:15:35 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu May 11 15:13:49 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
|
|
|
|
|
|
- create tss user account and install udev rule to fix startup of resourcemgr
|
|
|
|
|
(bnc#1038586)
|
|
|
|
|
|
2017-04-11 16:26:35 +02:00
|
|
|
-------------------------------------------------------------------
|
2017-05-10 13:33:35 +02:00
|
|
|
Wed May 10 13:33:16 CEST 2017 - mgerstner@suse.com
|
2017-04-11 16:26:35 +02:00
|
|
|
|
2017-05-10 11:38:50 +02:00
|
|
|
- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing
|
|
|
|
|
to do with tpm2-tss.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 11 14:26:14 UTC 2017 - meissner@suse.com
|
|
|
|
|
|
2017-04-11 16:26:35 +02:00
|
|
|
- fixed typo in resourcemgr.service (bsc#1031004)
|
|
|
|
|
|
2017-02-08 14:48:45 +01:00
|
|
|
-------------------------------------------------------------------
|
2017-02-18 12:42:59 +01:00
|
|
|
Thu Feb 16 13:35:44 UTC 2017 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Remove --with-pic which is only for static libs.
|
|
|
|
|
- Fix an improper Requires line.
|
|
|
|
|
- Split libtcti* from libsapi0; these are independentlty
|
|
|
|
|
developable units.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2017-02-08 14:48:45 +01:00
|
|
|
Wed Feb 8 13:43:55 UTC 2017 - meissner@suse.com
|
|
|
|
|
|
2017-02-08 14:49:03 +01:00
|
|
|
- Updated to 1.0 (FATE#321508)
|
2017-02-08 14:48:45 +01:00
|
|
|
- Added
|
|
|
|
|
- Travis-CI integration with GitHub
|
|
|
|
|
- Unit tests for primitive (un)?marshal functions.
|
|
|
|
|
- Example systemd unit for resourcemgr.
|
|
|
|
|
- Allow for unit tests to be enabled selectively.
|
|
|
|
|
- added pkg-config files for libraries
|
|
|
|
|
- Changed
|
|
|
|
|
- move simulator initialization code to socket TCTI init function.
|
|
|
|
|
- socket TCTI finalize no longer frees context
|
|
|
|
|
- rename libtss2 to libsapi
|
|
|
|
|
- rename libtcti_device to libtcti-device
|
|
|
|
|
- rename libtcti_socket to libtcti-socket
|
|
|
|
|
- move $(includedir)/tss to $(includedir)/sapi
|
|
|
|
|
- Move default compiler flags to config.site file.
|
|
|
|
|
- Fixed
|
|
|
|
|
- Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0.
|
|
|
|
|
- Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr.
|
|
|
|
|
- Fixes to handling of persistent objects by resourcemgr.
|
|
|
|
|
- Removed
|
|
|
|
|
- Semicolon from TPMA_* macros definitions.
|
|
|
|
|
- Windows build files.
|
|
|
|
|
- SAPI_CLIENT macro tests.
|
|
|
|
|
- Security
|
|
|
|
|
- Fix buffer overflow in resourcemgr.
|
|
|
|
|
- use sample resourcemanager.service
|
2017-02-15 18:15:45 +01:00
|
|
|
- tpm2-0-tss-configure.patch: fix weird error.
|
2017-02-08 14:48:45 +01:00
|
|
|
|
2017-03-02 11:17:50 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 25 14:09:35 UTC 2016 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- Remove type=forking from service file (bsc#995554)
|
|
|
|
|
|
2016-08-06 21:28:47 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Aug 6 19:28:27 UTC 2016 - meissner@suse.com
|
|
|
|
|
|
2016-08-06 21:54:12 +02:00
|
|
|
- added a systemd unit service file (FATE#315631)
|
2016-08-06 21:28:47 +02:00
|
|
|
|
2016-05-07 10:25:53 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri May 6 19:45:29 UTC 2016 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Correct package naming to be in line with shared library guideline
|
|
|
|
|
- Remove unused systemd build and runtime dependencies
|
2016-08-06 21:53:32 +02:00
|
|
|
(FATE#315631)
|
2016-05-07 10:25:53 +02:00
|
|
|
|
2016-04-08 11:42:06 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 8 07:54:36 UTC 2016 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Fix rpm group of library package: libs belong, per definition, to
|
2016-08-06 21:53:32 +02:00
|
|
|
the group "System/Libraries". (FATE#315631)
|
2016-04-08 11:42:06 +02:00
|
|
|
|
2016-02-24 11:22:52 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 24 10:22:38 UTC 2016 - meissner@suse.com
|
|
|
|
|
|
2016-03-23 16:52:38 +01:00
|
|
|
- initial import of the tpm 2.0 tss stack (FATE#315631)
|
2016-02-24 11:22:52 +01:00
|
|
|
|
