[pkg-opensc-commit] [engine-pkcs11] annotated tag engine_pkcs11-0.2.0 created (now 5b36d1f)

Eric Dorland eric at moszumanska.debian.org
Mon Oct 19 03:11:40 UTC 2015


This is an automated email from the git hooks/post-receive script.

eric pushed a change to annotated tag engine_pkcs11-0.2.0
in repository engine-pkcs11.

        at  5b36d1f   (tag)
   tagging  6909d6761c8820e1750fa0bf4fa8532c82f34e35 (commit)
 tagged by  Nikos Mavrogiannopoulos
        on  Fri Oct 9 14:17:01 2015 +0200

- Log -----------------------------------------------------------------
released 0.2.0
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQGcBAABAgAGBQJWF7BBAAoJEHY3EnR/ND+nsoQMAKRdlZYRPyAJYXqqDdDZh5bM
bTYpSwssrvMB4sfZi6ya4WAvMnS9nP+rDbKTWahNZ8aAiPxEIzlguFik8isINjMn
2+Ywl7+a4W8k50owzGl1gHo1/iMEmM/0H3+SAs4fhO4faPaRHK3HVKNpvg7cFN/S
X0h3M8vHR0mOVzeeRGPVnh15CzQcJAfb4/CJ/83uZaDNa2ZaCf308/YwKu+/AH3P
1dqqsDvdN/thCSKNYy3Yvk454Nn6G4Urx4r9bpeX1iX0NUrB6f2VxCpp1SDQ1FnM
IWZ3ODDyg6As239hrkwVhQfptgzMQ6nQV8G4K3pFq6Hqqk+SGxDuhpAmunYEcRoP
Noj7xdeWbCQIMnE1WTKA0NXWQ9Ax5Y5VXcesgazMFCdSg/5FfoGUFVr0/EucRhtA
fQbmtwx/FQYLXBOhntAkUZiRNmYMxBzMSbSxUWPusl1g29AHdGDYiKct8pVvB73/
ibMYocuPJrZde90bd04t7ZSdBd+n2ZPuUxvkgoVcEA==
=ojM7
-----END PGP SIGNATURE-----

Alon Bar-Lev (24):
      New build system
      engine_pkcs11 MSVC fixups
      Distribute files for MSVC
      afxres.h is not needed
      More fixups to maintainer-clean
      Add --force to autoreconf
      Include winresrc.h
      Fixup configure help strings
      Prepare for libtool-2
      Some more cleanups
      More aclocal->m4
      Detect libtool-1 or libtool-2 at runtime
      Update NEWS
      Don't remove external files on distclean
      Handle svn checkout detection correctly when srcdir is different
      mingw32->mingw*
      Fix doc build issues
      Add PACKAGE_SUFFIX
      build: -svn->_git suffix
      build: add m4 directory needed by recent libtool
      build: remove automake depreciated syntax
      layout: create .gitignore out of svnignore
      build: build only shared library, remove hacks
      build: remove embedded wiki docs

Andreas Jellinghaus (69):
      add minimal structure.
      initial checkin of a standalone engine_pkcs11.
      include more build rules for building the engine.
      adapt to latest changes in libp11.
      generate documentation on "make dist".
      update with latest api changes.
      clean up also documentation.
      dist-hook: is too late, need to generate the documentation
      "doc" does not work well, it is the subdirectory name.
      fix/update makefiles for doc handling.
      aclocal -I aclocal/ (as suggested by Ralf Wildenhues)
      AC_SUBSTed variables are better used with $(..). Thanks to Ralf Wildenhues.
      add aclocal/ directory for engine_pkcs11, too.
      proper cleanup.
      fix windows compile.
      remove default module name.
      remove obsolete file.
      Patch by Douglas E. Engert to allow engine_pkcs11 to
      add ChangeLog using svn2cl.
      new parser for slot/id strings.
      openssl 0.9.8 puts the engines in lib/engines/.
      remove bundles (I - guess - not needed / used).
      perform unload, so another load will work fine.
      older wget version only know -nv.
      libp11 trunk now exports PKCS11_get_rsa_method().
      allow not specifying a string.
      allow giving slot only.
      fix memory leak, thanks to Dougles E. Engert.
      depend on libp11 >= 0.2.1
      kill some dead code.
      set version number based on svn revision. thanks to werner koch.
      move to opensc-project till opensc.org dns is back.
      simply the revision, drop the m4 code.
      fix configure script - some shells don't like the extra ;
      ust utf-8.
      increase max. pin length to 32 chars.
      fix resource leakage, found by Risto Laanoja.
      properly clean pin storage. full size as it might be not null-terminated.
      disable dead code.
      use ansi style declaration.
      fix more compiler warnings.
      silence more warnings.
      add support for labels, by Risto Laanoja.
      prepare for new release.
      accept pin from openssl - patch by ahasenack at terra.com.br
      fix ident.
      add NEWS to distribution.
      document latest changes. update wiki export script.
      needed one more day for testing.
      trunk is now post 0.1.4 release.
      cleanup of pin code, partly based on suggestions by Stanislav Brabec. thanks.
      fix typos, change return type to int and args to 0 and 1.
      Apply a fix by  Andreas Kroehnert <andreas.kroehnert at de.safenet-inc.com>
      David Smith: While working on adding PKCS#11 support to Gnome's Network Manager
      New function only in libtpp 0.2.4 and newer.
      update NEWS file.
      fix version.
      update export script.
      fix segfault in new code.
      always allocate full size, as we will clean full size later.
      document news as well.
      Revert some changes to slot parsing code, but add a proper fix instead. (I hope)
      release 0.1.6 was branched, so trunk is now open for development again.
      fix for a buffer overrun in engine_pkcs11's pin handling:
      New 0.1.7 release.
      Next release will be 0.1.8, trunk is "-svn" preview.
      hw_pkcs11.c:146: warning: implicit declaration of function 'set_init_args'
      new engine_pkcs11 release 0.1.8.
      now pre 0.1.9 release.

David Woodhouse (5):
      Default to using p11-kit-proxy.so if it's available
      Add support for parsing PKCS#11 URIs in pkcs11_load_key()
      Add support for parsing PKCS#11 URIs in pkcs11_load_cert()
      Ignore type= and object-type= attributes in PKCS#11 URIs
      Refer to RFC7512 when reporting ID parse failure

Doug Engert (4):
      ECDSA Support
      Merge pull request #10 from dengert/ecc
      Engine should only offer support for its own functions
      Merge pull request #12 from dengert/own_functions

Ludovic Rousseau (7):
      add the minimum release number of libp11 needed in the error message
      get_pin(): do not dereference mycb->password if mycb is NULL
      Create a m4 directory if not already present
      Merge pull request #4 from mtausig/patch-1
      Merge pull request #6 from alonbl/build
      Create README.md
      Add OpenSSL Configuration

Martin Paljak (4):
      Fixes #12
      avoid errors like #12 in the future
      Add missing braces. Thanks to Umberto Rustichelli for the report.
      Fix autoconf/automake for automake 1.13+

Mat (1):
      Wiki link updated

Nikos Mavrogiannopoulos (20):
      Parse pin-value in PKCS #11 URLs
      Made error message more specific to context
      When loading a certificate login if a PIN is provided
      Merge pull request #19 from nmav/login-cert
      introduce zero_pin() to eliminate copied code
      better output message: slot->object
      name module in accordance to other openssl engines
      tests: added basic test suite
      tests: enhanced test suite to include legacy IDs
      Added .travis.yml
      Added additional path of libsofthsm
      tests: use the correct library name in the engine file
      tests: check for libsofthsm in more paths
      when compiling with old libp11 disable ECDSA support
      tests: don't rely on softhsm's version for PKCS #11 URLs
      bumped version and added news entries
      tests: addressed few leaks in evp-sign
      updated README.md
      updated documentation
      released 0.2.0

Nils Larsch (1):
      allow hex characters as well, patch supplied by Alexander Starostin <assur at esc.ru>

Petr Písař (5):
      Decouple loging into the token
      Free PIN storage where needed
      Find token if no slot was specified
      Search for a certificate by a label
      Use user interface correctly

Richard Levitte (1):
      Exercise different methods for setting the PIN

dwmw2 (1):
      Merge pull request #15 from nmav/master

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  5785c43   add minimal structure.
       new  b2455b0   initial checkin of a standalone engine_pkcs11.
       new  c12d5df   include more build rules for building the engine.
       new  d76c531   adapt to latest changes in libp11.
       new  d86f573   generate documentation on "make dist".
       new  782a0d5   update with latest api changes.
       new  cdfbf55   clean up also documentation.
       new  0aa7c96   dist-hook: is too late, need to generate the documentation before automake "make dist" copied files around.
       new  b40c910   "doc" does not work well, it is the subdirectory name.
       new  7d61292   fix/update makefiles for doc handling.
       new  d243b61   aclocal -I aclocal/ (as suggested by Ralf Wildenhues)
       new  3d0cda9   AC_SUBSTed variables are better used with $(..). Thanks to Ralf Wildenhues.
       new  73a200c   add aclocal/ directory for engine_pkcs11, too.
       new  a0b8de7   proper cleanup.
       new  e99a26c   fix windows compile.
       new  e54d7de   remove default module name. change include order (some effords to get openssl 0.9.8* to work on windows).
       new  ad014f8   remove obsolete file.
       new  01b65aa   Patch by Douglas E. Engert to allow engine_pkcs11 to work with heimdal PKINIT code.
       new  deba0ec   add ChangeLog using svn2cl.
       new  ab6c5fc   new parser for slot/id strings.
       new  e069310   openssl 0.9.8 puts the engines in lib/engines/.
       new  d8b2a40   remove bundles (I - guess - not needed / used). if they are used, will revert this change.
       new  0982fd5   perform unload, so another load will work fine.
       new  99089bf   older wget version only know -nv.
       new  bd4860f   libp11 trunk now exports PKCS11_get_rsa_method().
       new  dfa34cb   allow not specifying a string.
       new  f5b686d   allow giving slot only.
       new  d2e2226   fix memory leak, thanks to Dougles E. Engert.
       new  d07360e   depend on libp11 >= 0.2.1
       new  376ea60   kill some dead code.
       new  1f4cdae   set version number based on svn revision. thanks to werner koch.
       new  7e894e3   move to opensc-project till opensc.org dns is back.
       new  29f5097   simply the revision, drop the m4 code. it didn't turn out the way I wanted it (does not contain the _repository_/_branch_ revision).
       new  70b8680   allow hex characters as well, patch supplied by Alexander Starostin <assur at esc.ru>
       new  759c6c7   fix configure script - some shells don't like the extra ;
       new  91b6a8a   ust utf-8.
       new  96a42cb   increase max. pin length to 32 chars.
       new  25d05b1   fix resource leakage, found by Risto Laanoja.
       new  5b2711a   properly clean pin storage. full size as it might be not null-terminated.
       new  ab823ca   disable dead code.
       new  bea4150   use ansi style declaration.
       new  6a00dec   fix more compiler warnings.
       new  096f840   silence more warnings.
       new  697a865   add support for labels, by Risto Laanoja.
       new  1b2da2b   prepare for new release.
       new  b376307   accept pin from openssl - patch by ahasenack at terra.com.br
       new  5d9ba4c   fix ident.
       new  5f6874a   add NEWS to distribution. target saturday for release.
       new  3294e62   document latest changes. update wiki export script.
       new  4eb85c5   needed one more day for testing.
       new  32e4328   trunk is now post 0.1.4 release.
       new  266c3a1   cleanup of pin code, partly based on suggestions by Stanislav Brabec. thanks.
       new  0a42df7   fix typos, change return type to int and args to 0 and 1.
       new  930e863   Apply a fix by  Andreas Kroehnert <andreas.kroehnert at de.safenet-inc.com>
       new  2b38204   New build system
       new  f0b7e47   engine_pkcs11 MSVC fixups
       new  0c03eab   Distribute files for MSVC
       new  02d431a   afxres.h is not needed
       new  7d78285   More fixups to maintainer-clean
       new  c34c7a1   Add --force to autoreconf
       new  6b84e22   Include winresrc.h
       new  c533895   Fixup configure help strings
       new  b2bdb20   Prepare for libtool-2
       new  ec261b1   Some more cleanups
       new  91dca59   More aclocal->m4
       new  3abcfa0   Detect libtool-1 or libtool-2 at runtime
       new  bd26988   David Smith: While working on adding PKCS#11 support to Gnome's Network Manager project, it was found that being able to specify the pReserved member of CK_C_INITIALIZE_ARGS_PTR to C_Initialize is probably necessary in wpasupplicant, an engine-pkcs11 consumer. This support did not exist in libp11 and engine-pkcs11, so I've attached a patch that adds a new function in libp11, PKCS11_CTX_init_args, and a new engine command, CMD_INIT_ARGS.
       new  fb55baf   New function only in libtpp 0.2.4 and newer.
       new  50641c7   Update NEWS
       new  562f715   update NEWS file.
       new  9c9757e   fix version.
       new  a18bc4e   update export script.
       new  2cd685e   fix segfault in new code.
       new  da935bf   always allocate full size, as we will clean full size later. strncpy will maybe not \0 terminate the string, but that is ok, we deal with it already.
       new  e5d981e   document news as well.
       new  8504fe1   Don't remove external files on distclean
       new  cc74a12   Handle svn checkout detection correctly when srcdir is different
       new  b975914   add the minimum release number of libp11 needed in the error message
       new  aabc99b   get_pin(): do not dereference mycb->password if mycb is NULL
       new  1d77ac9   mingw32->mingw*
       new  8eba4f2   Fixes #12
       new  11f95b0   avoid errors like #12 in the future
       new  158b712   Fix doc build issues 1. VPATH issue. 2. Parallel build issue, suggested by Ludovic Rousseau.
       new  f0d3fe8   Add PACKAGE_SUFFIX
       new  3fa2bfc   Revert some changes to slot parsing code, but add a proper fix instead. (I hope) apply changes by Douglas to print the slot in verbose mode. Create new release and document changes. require latest libp11 with the new function.
       new  70ead30   release 0.1.6 was branched, so trunk is now open for development again.
       new  954f1fe   fix for a buffer overrun in engine_pkcs11's pin handling: The overrun occurs after the pin has been created with strdup() via set_pin(), when it is OPENSSL_cleanse() it always cleanses to MAX_PIN_LENGTH, which will cause free() to fail when the pin is short. The patch adds tracking of the pin length in a new static variable and uses it for all calls to OPENSSL_cleanse(). By David Smith
       new  8f73a3c   New 0.1.7 release.
       new  fc79f79   Next release will be 0.1.8, trunk is "-svn" preview.
       new  6261bb1   hw_pkcs11.c:146: warning: implicit declaration of function 'set_init_args' Fix this warning, by Arfrever Frehtes Taifersar Arahesis.
       new  bb775c3   new engine_pkcs11 release 0.1.8.
       new  5f8842a   now pre 0.1.9 release.
       new  4fda72d   Add missing braces. Thanks to Umberto Rustichelli for the report.
       new  49acb54   Create a m4 directory if not already present
       new  8d6264e   Fix autoconf/automake for automake 1.13+
       new  c002e5d   Wiki link updated
       new  c569b42   Merge pull request #4 from mtausig/patch-1
       new  8a8c6eb   build: -svn->_git suffix
       new  572a087   build: add m4 directory needed by recent libtool
       new  1fcfd50   build: remove automake depreciated syntax
       new  4a0c4a5   layout: create .gitignore out of svnignore
       new  49d0a42   build: build only shared library, remove hacks
       new  9a9f172   build: remove embedded wiki docs
       new  5abdc7e   Merge pull request #6 from alonbl/build
       new  4927327   ECDSA Support
       new  5171e82   Merge pull request #10 from dengert/ecc
       new  3f8af68   Create README.md
       new  0c93ddb   Add OpenSSL Configuration
       new  d04bccb   Default to using p11-kit-proxy.so if it's available
       new  853a087   Add support for parsing PKCS#11 URIs in pkcs11_load_key()
       new  52456b7   Add support for parsing PKCS#11 URIs in pkcs11_load_cert()
       new  dc5ffeb   Ignore type= and object-type= attributes in PKCS#11 URIs
       new  0cc9d88   Refer to RFC7512 when reporting ID parse failure
       new  44c7e85   Engine should only offer support for its own functions
       new  ec285f4   Merge pull request #12 from dengert/own_functions
       new  8a3aae6   Parse pin-value in PKCS #11 URLs
       new  64b8aa3   Made error message more specific to context
       new  4c9628b   Merge pull request #15 from nmav/master
       new  091b78c   When loading a certificate login if a PIN is provided
       new  f5685d9   Merge pull request #19 from nmav/login-cert
       new  d99c01f   introduce zero_pin() to eliminate copied code
       new  d00be94   Decouple loging into the token
       new  2f1a9a8   Free PIN storage where needed
       new  1edebec   better output message: slot->object
       new  0ab5515   name module in accordance to other openssl engines
       new  df14154   tests: added basic test suite
       new  bcd888d   Find token if no slot was specified
       new  8d7c6e8   tests: enhanced test suite to include legacy IDs
       new  9bc5381   Search for a certificate by a label
       new  14468db   Added .travis.yml
       new  8ce72b1   Added additional path of libsofthsm
       new  44cc995   tests: use the correct library name in the engine file
       new  d833e49   tests: check for libsofthsm in more paths
       new  8c6d6f1   when compiling with old libp11 disable ECDSA support
       new  d48bf38   tests: don't rely on softhsm's version for PKCS #11 URLs
       new  795f9f7   bumped version and added news entries
       new  3ac3f7a   tests: addressed few leaks in evp-sign
       new  5891935   updated README.md
       new  be98266   updated documentation
       new  37ae318   Use user interface correctly
       new  d85cb2f   Exercise different methods for setting the PIN
       new  6909d67   released 0.2.0

The 142 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-opensc/engine-pkcs11.git



More information about the pkg-opensc-commit mailing list