forked from pool/tpm2.0-tools
Matthias Gerstner
00ea3cc493
cleartext password into the tpm when generating an HMAC in the context of tpm_kdfa() (key derivation function). OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=23
101 lines
4.2 KiB
Plaintext
101 lines
4.2 KiB
Plaintext
-------------------------------------------------------------------
|
|
Thu Jun 29 09:45:45 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
- 0002-kdfa-use-openssl-for-hmac-not-tpm.patch: fixed unexpected leak of
|
|
cleartext password into the tpm when generating an HMAC in the context of
|
|
tpm_kdfa() (key derivation function).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 20 08:35:29 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
- 0001-tpm2_listpcrs-use-TPM2_GetCapability-to-determine-PC.patch: fixed
|
|
tpm2_listpcrs aborting saying "too much pcrs to get!" (bnc#1044419)
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 2 07:16:45 UTC 2017 - meissner@suse.com
|
|
|
|
- tpm2.0-tools-fix-hardening.patch: do not disable fortify,
|
|
do not use -Wstack-protector as it warns also for non-utilized
|
|
functions and then -Werror fails.
|
|
- tpm2.0-tools-fix-gcc7.patch: fixed gcc7 case fallthrough errors
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 10 11:52:40 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
- Major update to 2.0.0
|
|
- dropped fixes.patch, now part of the upstream version
|
|
- a set of man pages have been added to the package
|
|
- Upstream changes:
|
|
* Tracked on the milestone: https://github.com/01org/tpm2.0-tools/milestone/2
|
|
* Reworked all the tools to support configurable TCTIs, based on build time
|
|
configuration, one can specify the tcti via the --tcti (-T) option to all
|
|
tools.
|
|
* tpm2_getrandom interface made -s a positional argument.
|
|
* Numerous bug fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 6 16:23:15 UTC 2017 - meissner@suse.com
|
|
|
|
- buildrequire pkgconfig
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Mar 1 15:33:46 UTC 2017 - meissner@suse.com
|
|
|
|
- Updated to 1.1.0 / 016-11-04 (FATE#321509)
|
|
- Added
|
|
* travis ci support.
|
|
* Allow for unit tests to be enabled selectively.
|
|
* tpm2_rc_decode tool: Decode TPM_RC error codes.
|
|
* Android Make file
|
|
* tpm2_listpersistent: list all persistent objects
|
|
* test scripts for tpm2-tools
|
|
* tpm2_nvreadlock
|
|
* tpm2_getmanufec: retrieve EC from tpm manufacturer server.
|
|
* Copy 'common' and 'sample' code from the TPM2.0-TSS repo.
|
|
|
|
- Modified
|
|
* tpm2_takeownership: update option -c to use lockout password to clear.
|
|
* tpm2_listpcrs: add options -L and -s, rewrite to increase performance.
|
|
* tpm2_quote: added -L option to support selection of multiple banks.
|
|
* tpm2_quote: add -q option to get qualifying data.
|
|
* configure: Use pkg-config to get info about libcurl and libcrypto.
|
|
* configure: Use pkg-config to locate SAPI and TCTI headers / libraries.
|
|
* tpm2_x: Add -X option to enable password input in Hex format.
|
|
* tpm2_nvdefine: Change -X option to -I.
|
|
* tpm2-nvwrite: fix for unable to write 1024B+ data.
|
|
* tpm2_getmanufec: Fix base64 encoding.
|
|
* tpm2_x: fixed a lot of TPM2B failures caused by wrong initialization.
|
|
* tpm2_getmanufec: let configure handle libs.
|
|
* tpm2_getmanufec: Convert from dos to unix format.
|
|
* build: Check for TSS2 library @ configure time.
|
|
* build: Detect required TSS2 and TCTI headers.
|
|
* build: Use libtool to build the common library
|
|
* build: Install all binaries into sbin.
|
|
* build: Build common sources into library.
|
|
* build: Move all source files to 'src'.
|
|
* Makefile.am: Move all build rules into single Makefile.am.
|
|
* everything: Use new TCTI headers and fixup API calls.
|
|
* everything: Update source to cope with sapi header cleanup.
|
|
* tpm2_activatecredential: Updated to support TCG compatible EK
|
|
* tpm2_getpubak: Updated to use TCG compatible EK
|
|
* tpm2_getpubek: fix ek creation to follow TCG EK profile spec.
|
|
|
|
- Removed
|
|
* Windows related code
|
|
* depenedency on the TPM2.0-TSS repo source code
|
|
|
|
- 1.0-alpha_0.zip: removed, use tpm2-0-tss directly.
|
|
- tpm2-install-binaries.patch: not needed anymore.
|
|
- fixes.patch: fixed random return build errors.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 22 12:02:01 UTC 2016 - meissner@suse.com
|
|
|
|
- update description
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 24 12:42:04 UTC 2016 - meissner@suse.com
|
|
|
|
- initial import of tpm2.0-tools
|
|
|