![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / security / p11-kit
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.26 / (download) - annotate - [select for diffs], Mon Feb 7 08:05:05 2022 UTC (15 months, 2 weeks ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2023Q1-base,
pkgsrc-2023Q1,
pkgsrc-2022Q4-base,
pkgsrc-2022Q4,
pkgsrc-2022Q3-base,
pkgsrc-2022Q3,
pkgsrc-2022Q2-base,
pkgsrc-2022Q2,
pkgsrc-2022Q1-base,
pkgsrc-2022Q1,
HEAD
Changes since 1.25: +2 -2
lines
Diff to previous 1.25 (colored)
p11-kit: add readlink to tools From Claes Nästén in PR 56697
Revision 1.25 / (download) - annotate - [select for diffs], Sun Jan 23 22:17:51 2022 UTC (16 months ago) by wiz
Branch: MAIN
Changes since 1.24: +8 -3
lines
Diff to previous 1.24 (colored)
p11-kit: update to 0.24.1. 0.24.1 (stable) * rpc: Support protocol version negotiation [PR#371, PR#385] * proxy: Support copying attribute array recursively [PR#368] * Link libp11-kit so that it cannot unload [PR#383] * Translation improvements [PR#381] * Build fixes [PR#372, PR#373, PR#375, PR#377, PR#384, PR#407]
Revision 1.24 / (download) - annotate - [select for diffs], Wed Dec 8 16:02:34 2021 UTC (17 months, 2 weeks ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2021Q4-base,
pkgsrc-2021Q4
Changes since 1.23: +2 -2
lines
Diff to previous 1.23 (colored)
revbump for icu and libffi
Revision 1.23 / (download) - annotate - [select for diffs], Tue Aug 24 15:07:28 2021 UTC (21 months ago) by manu
Branch: MAIN
CVS Tags: pkgsrc-2021Q3-base,
pkgsrc-2021Q3
Changes since 1.22: +2 -2
lines
Diff to previous 1.22 (colored)
Only use -z nodelete linker flag if it is available. This should fix the build on platforms that do not use GNU ld such as MacOSX.
Revision 1.22 / (download) - annotate - [select for diffs], Thu Aug 19 12:56:22 2021 UTC (21 months, 1 week ago) by manu
Branch: MAIN
Changes since 1.21: +2 -2
lines
Diff to previous 1.21 (colored)
Prevent dynamic unload of libp11-kit.so The library sets up a pthread_atfork() hook. If we let be unload, we get a callback to stale memory.
Revision 1.21 / (download) - annotate - [select for diffs], Sat Jul 3 21:02:45 2021 UTC (22 months, 3 weeks ago) by thor
Branch: MAIN
Changes since 1.20: +3 -1
lines
Diff to previous 1.20 (colored)
security/p11-kit: make gettext-lib dependency explicit It uses gettext, libintl. Enough said.
Revision 1.20 / (download) - annotate - [select for diffs], Thu Jun 10 10:20:50 2021 UTC (23 months, 2 weeks ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2021Q2-base,
pkgsrc-2021Q2
Changes since 1.19: +2 -3
lines
Diff to previous 1.19 (colored)
p11-kit: update to 0.24.0. 0.24.0 (stable) * Use inclusive language on certificate distrust. Note: This changes the directory and attribute names to distrust certain CAs to "blocklist" [PR#324] * Fix issues spotted by coverity and ASan [PR#349, PR#351] * Integrate gettext with tools more tightly [PR#358] * rpc: Forbid use of array of attributes [PR#365, PR#367] * Build fixes [PR#342, PR#344, PR#345, PR#353, PR#362, PR#364]
Revision 1.17.4.2 / (download) - annotate - [select for diffs], Wed Jan 27 19:40:46 2021 UTC (2 years, 3 months ago) by spz
Branch: pkgsrc-2020Q4
Changes since 1.17.4.1: +1 -0
lines
Diff to previous 1.17.4.1 (colored) to branchpoint 1.17 (colored) next main 1.18 (colored)
Pullup ticket #6414 - requested by sborrill security/p11-kit: build fix for FreeBSD Revisions pulled up: - security/p11-kit/Makefile 1.19 - security/p11-kit/distinfo 1.14 - security/p11-kit/patches/patch-p11-kit_lists.c 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: triaxx Date: Fri Jan 8 21:09:08 UTC 2021 Modified Files: pkgsrc/security/p11-kit: Makefile distinfo Added Files: pkgsrc/security/p11-kit/patches: patch-p11-kit_lists.c Log Message: p11-kit: Fix build on FreeBSD The build step failed on FreeBSD due to undeclared SIZE_MAX. This error has been fixed upstream (https://github.com/p11-glue/p11-kit/commit/507c394) and the patch could be removed at the next update. To generate a diff of this commit: cvs rdiff -u -r1.18 -r1.19 pkgsrc/security/p11-kit/Makefile cvs rdiff -u -r1.13 -r1.14 pkgsrc/security/p11-kit/distinfo cvs rdiff -u -r0 -r1.1 pkgsrc/security/p11-kit/patches/patch-p11-kit_lists.c
Revision 1.19 / (download) - annotate - [select for diffs], Fri Jan 8 21:09:08 2021 UTC (2 years, 4 months ago) by triaxx
Branch: MAIN
CVS Tags: pkgsrc-2021Q1-base,
pkgsrc-2021Q1
Changes since 1.18: +2 -1
lines
Diff to previous 1.18 (colored)
p11-kit: Fix build on FreeBSD The build step failed on FreeBSD due to undeclared SIZE_MAX. This error has been fixed upstream (https://github.com/p11-glue/p11-kit/commit/507c394) and the patch could be removed at the next update.
Revision 1.17.4.1 / (download) - annotate - [select for diffs], Mon Jan 4 17:27:43 2021 UTC (2 years, 4 months ago) by bsiegert
Branch: pkgsrc-2020Q4
Changes since 1.17: +2 -2
lines
Diff to previous 1.17 (colored)
Pullup ticket #6390 - requested by wiz
security/p11-kit: security fix
Revisions pulled up:
- security/p11-kit/Makefile 1.18
- security/p11-kit/distinfo 1.13
---
Module Name: pkgsrc
Committed By: wiz
Date: Mon Jan 4 11:43:48 UTC 2021
Modified Files:
pkgsrc/security/p11-kit: Makefile distinfo
Log Message:
p11-kit: update to 0.23.22.
0.23.22 (stable)
* Fix memory-safety issues that affect the RPC protocol
(CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
and fixed by David Cook
* anchor: Prefer persistent format when storing anchor [PR#329]
* common: Fix infloop in p11_path_build [PR#326, PR#327]
* proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
* common: Check for a NULL locale before freeing it [PR#321]
* Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323, PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
Revision 1.18 / (download) - annotate - [select for diffs], Mon Jan 4 11:43:47 2021 UTC (2 years, 4 months ago) by wiz
Branch: MAIN
Changes since 1.17: +2 -2
lines
Diff to previous 1.17 (colored)
p11-kit: update to 0.23.22. 0.23.22 (stable) * Fix memory-safety issues that affect the RPC protocol (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered and fixed by David Cook * anchor: Prefer persistent format when storing anchor [PR#329] * common: Fix infloop in p11_path_build [PR#326, PR#327] * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325] * common: Check for a NULL locale before freeing it [PR#321] * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323, PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
Revision 1.17 / (download) - annotate - [select for diffs], Wed Sep 9 07:29:29 2020 UTC (2 years, 8 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2020Q4-base,
pkgsrc-2020Q3-base,
pkgsrc-2020Q3
Branch point for: pkgsrc-2020Q4
Changes since 1.16: +3 -3
lines
Diff to previous 1.16 (colored)
p11-kit: update to 0.23.21.
0.23.21 (stable)
* proxy: Do not assign duplicate slot IDs [PR#282]
* common: Get program name based on executable path if possible [PR#307]
* anchor: Exit with non-zero code, if any error occurs [PR#304]
* Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299, PR#305, PR#306, PR#309, PR#311]
0.23.20 (stable)
* Revert "Fix RPC when length-s are 0" changes [PR#276]
0.23.19 (stable)
* common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
* Add simple bash completion for provided commands [PR#258]
* Unbreak list matching in enable-in and disable-in [PR#262]
* Fix RPC when length-s are 0 [PR#259]
* rpc: Add vsock transport support [PR#270]
* trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
* Build fixes [PR#271, PR#272, PR#273, ...]
0.23.18 (stable)
* rpc: Allow empty CK_DATE value [PR#253]
* build: Meson fixes [PR#245]
* build: Adjust feature parity between meson and autotools [PR#247]
0.23.17 (stable)
* common: Fix uClibc-ng compilation [PR#237]
* trust: do not allow daylight to invalidate date validation [PR#236]
* build: Port to meson build system [PR#231, PR#234]
* rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
* doc: Add 'server' command in help [PR#229]
* Build and test fixes [PR#230]
0.23.16 (stable)
* proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
* conf: Ignore user configuration if the program is running as root [PR#226]
* proxy: Refresh slot list on every C_GetSlotList call [PR#224]
* modules: Fix index used in call to p11_dict_remove() [PR#219]
* Fix Win32 p11_dl_error crash [PR#218]
* modules: check gl.modules before iterates on it when freeing [PR#217]
* trust: Ignore unreadable content in anchors [PR#215]
* extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
Revision 1.16 / (download) - annotate - [select for diffs], Sun Mar 8 16:42:30 2020 UTC (3 years, 2 months ago) by bsiegert
Branch: MAIN
CVS Tags: pkgsrc-2020Q2-base,
pkgsrc-2020Q2,
pkgsrc-2020Q1-base,
pkgsrc-2020Q1
Changes since 1.15: +2 -1
lines
Diff to previous 1.15 (colored)
Revbump packages depending on libffi after .so version change. Requested by Matthias Ferdinand and Oskar on pkgsrc-users.
Revision 1.15 / (download) - annotate - [select for diffs], Mon Nov 4 21:12:56 2019 UTC (3 years, 6 months ago) by rillig
Branch: MAIN
CVS Tags: pkgsrc-2019Q4-base,
pkgsrc-2019Q4
Changes since 1.14: +4 -4
lines
Diff to previous 1.14 (colored)
security: align variable assignments pkglint -Wall -F --only aligned --only indent -r No manual corrections.
Revision 1.14 / (download) - annotate - [select for diffs], Sun Mar 24 18:03:54 2019 UTC (4 years, 2 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2019Q3-base,
pkgsrc-2019Q3,
pkgsrc-2019Q2-base,
pkgsrc-2019Q2,
pkgsrc-2019Q1-base,
pkgsrc-2019Q1
Changes since 1.13: +2 -2
lines
Diff to previous 1.13 (colored)
Update to 0.23.15
Changelog:
trust: Improve error handling if backed trust file is corrupted [#206]
url: Prefer upper-case letters in hex characters when encoding [#193]
trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [#202]
virtual: Prefer fixed closures to libffi closures [#196]
Fix issues spotted by coverity and cppcheck [#194, #204]
Build and test fixes [#164, #191, #199, #201]
Revision 1.13 / (download) - annotate - [select for diffs], Wed Dec 12 22:29:36 2018 UTC (4 years, 5 months ago) by leot
Branch: MAIN
CVS Tags: pkgsrc-2018Q4-base,
pkgsrc-2018Q4
Changes since 1.12: +2 -2
lines
Diff to previous 1.12 (colored)
p11-kit: Use `+=' to append to DEPENDS (not `=') (NFC)
Revision 1.12 / (download) - annotate - [select for diffs], Wed Sep 5 08:34:10 2018 UTC (4 years, 8 months ago) by prlw1
Branch: MAIN
CVS Tags: pkgsrc-2018Q3-base,
pkgsrc-2018Q3
Changes since 1.11: +2 -3
lines
Diff to previous 1.11 (colored)
Update p11-kit to 0.23.14 0.23.14 (stable) * proxy: Avoid invalid memory access when unloading proxy module [PR#180] * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181] * build: Restore libpthread dependency [PR#183] * Build fixes [PR#188]
Revision 1.11 / (download) - annotate - [select for diffs], Sun Sep 2 07:49:51 2018 UTC (4 years, 8 months ago) by tnn
Branch: MAIN
Changes since 1.10: +2 -1
lines
Diff to previous 1.10 (colored)
p11-kit: Hide getauxval(). PR pkg/53387 (related to port-arm/53386)
Revision 1.10 / (download) - annotate - [select for diffs], Sun Aug 19 05:00:41 2018 UTC (4 years, 9 months ago) by wiz
Branch: MAIN
Changes since 1.9: +4 -3
lines
Diff to previous 1.9 (colored)
p11-kit: update to 0.23.13. 0.23.13 (stable) * server: Enable socket activation through systemd [PR#173] * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules [PR#174] * proxy: Fail early if there is no slot mapping [PR#175] * Remove hard dependency on libpthread on glibc systems [PR#177] * Build fixes [PR#170, PR#176]
Revision 1.9 / (download) - annotate - [select for diffs], Fri Jul 13 11:21:29 2018 UTC (4 years, 10 months ago) by prlw1
Branch: MAIN
Changes since 1.8: +5 -1
lines
Diff to previous 1.8 (colored)
reallocarray exists in NetBSD's libc, so AC_CHECK_LIB will find it. For some reason it is hidden in stdlib.h by _OPENBSD_SOURCE, so add that to p11-kit's Makefile to avoid coredumps. Fixes PR pkg/53426.
Revision 1.8 / (download) - annotate - [select for diffs], Fri Jul 6 15:33:39 2018 UTC (4 years, 10 months ago) by prlw1
Branch: MAIN
Changes since 1.7: +2 -2
lines
Diff to previous 1.7 (colored)
Update p11-kit to 0.23.12 0.23.12 (stable) * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160] * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167] * Build and test fixes on macOS [PR#162, PR#168] 0.23.11 (stable) * trust: Add extractor for edk2/cacerts.bin [PR#139] * modules: Add option to control module visibility from proxy [PR#140] * trust: Prevent trust module being loaded by proxy module [PR#142] * library: Use dedicated locale object for printing error [PR#148] * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134] * Improve const correctness for P11KitUri [PR#152] * PKCS#11 URI scheme comparison is now case insensitive [PR#156] * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
Revision 1.7 / (download) - annotate - [select for diffs], Wed Apr 18 00:46:25 2018 UTC (5 years, 1 month ago) by schmonz
Branch: MAIN
CVS Tags: pkgsrc-2018Q2-base,
pkgsrc-2018Q2
Changes since 1.6: +5 -1
lines
Diff to previous 1.6 (colored)
Fix PLIST on Darwin.
Revision 1.6 / (download) - annotate - [select for diffs], Tue Apr 17 13:26:15 2018 UTC (5 years, 1 month ago) by wiz
Branch: MAIN
Changes since 1.5: +6 -6
lines
Diff to previous 1.5 (colored)
p11-kit: update to 0.23.10. This is a development release, but gnutls needs at least 0.23.x, so take the latest development release. 0.23.10 (devel) * filter: Respect "write-protected" vendor-specific attribute in PKCS#11 URI [PR#129] * server: Improve shell integration and documentation [PR#107, PR#108] * proxy: Reuse existing slot ID mapping in after fork() [PR#120] * trust: Forcibly mark "Default Trust" read-only [PR#123] * New function p11_kit_override_system_files() which can be used for testing [PR#110] * trust: Filter out duplicate extensions [PR#69] * Update translations [PR#128] * Bug fixes [PR#125, PR#126] 0.23.9 (devel) * Fix p11-kit server regressions [PR#103, PR#104] * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99] * Build fixes related to reallocarray [PR#96, PR#98, PR#100] 0.23.8 (devel) * Improve vendor query attributes handling in PKCS#11 URI [PR#92] * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91] * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user configurations [PR#87] * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86] 0.23.7 (devel) * Fix memory issues with "p11-kit server" [PR#78] * Build fixes [PR#77 ...] 0.23.6 (devel) * Port "p11-kit server" to Windows and portability fixes of the RPC protocol [PR#67, PR#72, PR#74] * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71] * Build fixes [PR#63 ...] 0.23.5 (devel) * Fix license notice of common/unix-peer.c [PR#58] * Remove systemd unit files for now [PR#60] * Build fixes for FreeBSD [PR#56] 0.23.4 (devel) * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31, PR#37, PR#52] * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY attribute, used by Firefox [#99453, PR#46] * Add 'trust dump' command to dump all PKCS#11 objects in the persistence format [PR#44] * New experimental 'p11-kit server' command that allows PKCS#11 forwarding through a Unix domain socket. A client-side module p11-kit-client.so is also provided [PR#15] * Add systemd unit files for exporting the proxy module through a Unix domain socket [PR#35] * New P11KitIter API to iterate over slots, tokens, and modules in addition to objects [PR#28] * libffi dependency is now optional [PR#9] * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45] 0.23.3 (devel) * Install private executables in libexecdir [#98817] * Fix link error of proxy module on macOS [#98022] * Use new PKCS#11 URI specification for URIs [#97245] * Support x-init-reserved argument of C_Initialize() in remote modules [#80519] * Incorporate changes from PKCS#11 2.40 specification * Bump libtool library version * Documentation fixes * Build fixes [#87192 ...] 0.23.2 (devel) * Fix forking issues with libffi [#90289 ...] * Updated translations * Build fixes [#90827 #89081 #92434 #92520 #92445 #92551 #92843 #92842 #92807 #93211 ...] 0.23.1 (devel) * Use new PKCS#11 URI draft fields for URIs [#86474 #87582] * Add pem-directory-hash extract format * Build fixes
Revision 1.5 / (download) - annotate - [select for diffs], Thu Aug 24 14:50:19 2017 UTC (5 years, 9 months ago) by jperkin
Branch: MAIN
CVS Tags: pkgsrc-2018Q1-base,
pkgsrc-2018Q1,
pkgsrc-2017Q4-base,
pkgsrc-2017Q4,
pkgsrc-2017Q3-base,
pkgsrc-2017Q3
Changes since 1.4: +5 -1
lines
Diff to previous 1.4 (colored)
Fix build on SunOS. From Thomas Merkel in NetBSD/pkgsrc#13.
Revision 1.4 / (download) - annotate - [select for diffs], Mon Apr 4 17:34:56 2016 UTC (7 years, 1 month ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2017Q2-base,
pkgsrc-2017Q2,
pkgsrc-2017Q1-base,
pkgsrc-2017Q1,
pkgsrc-2016Q4-base,
pkgsrc-2016Q4,
pkgsrc-2016Q3-base,
pkgsrc-2016Q3,
pkgsrc-2016Q2-base,
pkgsrc-2016Q2,
pkgsrc-2016Q1-base,
pkgsrc-2016Q1
Changes since 1.3: +6 -1
lines
Diff to previous 1.3 (colored)
Explicitly depend on the mozilla CA list for providing a trust anchor. NetBSD doesn't ship a CA bundle by default.
Revision 1.3 / (download) - annotate - [select for diffs], Sun Mar 13 03:10:36 2016 UTC (7 years, 2 months ago) by ryoon
Branch: MAIN
Changes since 1.2: +9 -3
lines
Diff to previous 1.2 (colored)
Update to 0.22.1 Changelog: 0.22.1 (stable) * Use SubjectKeyIdentifier for CKA_ID when available [#84761] * Allow 'BEGIN PuBLIC KEY' PEM blocks in .p11-kit files * Bump libtool library version * Build fixes [#84665 ...] 0.22.0 (stable) * Remove the 'isolated = yes' option due to unclear semantics replacement forth coming in later versions. * Use secure_getenv() where necessary * Run separate binary for 'p11-kit remote' command 0.21.3 (unstable) * New public pkcs11x.h header containing extensions [#83495] * Export necessary defines to lookup attached extensions [#83495] * Use term 'attached extensions' rather than 'stabled extensions' * Make proxy module respect 'critical = no' [#83651] * Show public-key-info in 'trust list --details' * Build fixes [#75674 ...] 0.21.2 (unstable) * Don't use invalid keys for looking up stapled extensions [#82328] * Better error messages when invalid certificate extensions * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files * Fix some leaks, and memory issues * Silence some clang scanner warnings * Fix build against older pthread implementations [#82617] * Move to a non-recursive Makefile * Can now specify which tests to run on command line 0.21.1 (unstable) * Add new 'isolate' pkcs11 config option [#80472] * Add 'p11-kit remote' command for isolating modules [#54105] * Don't complain about C_Finalize after a fork * Other minor fixes 0.20.3 (stable) * Fix problems reinitializing managed modules after fork * Fix bad bookeeping when fail initializing one of the modules * Fix case where module would be unloaded while in use [#74919] * Remove assertions when module used before initialized [#74919] * Fix handling of mmap failure and mapping empty files [#74773] * Stable p11_kit_be_quiet() and p11_kit_be_loud() functions * Require automake 1.12 or later * Build fixes for Windows [#76594 #74149] 0.20.2 (stable) * Fix bug where blacklist didn't affect extracted ca-anchors if the anchor and blacklist were not in the same trust path (regression) [#73558] * Check for race in BasicConstraints stapled extension [#69314] * autogen.sh now runs configure as srcdir != builddir by default * Build fixes and cleanup 0.20.1 (stable) * Extract compat trust data after we've changes * Skip compat extraction if running as non-root * Better failure messages when removing anchors * Build cleanup 0.20.0 (stable) * Doc fixes 0.19.4 (unstable) * 'trust anchor' now adds/removes certificate anchors * 'trust list' lists trust policy stuff * 'p11-kit extract' is now 'trust extract' * 'p11-kit extract-trust' is now 'trust extract-compat' * Workarounds for working on broken zfsonlinux.org [#68525] * Add --with-module-config parameter to the configure script [#68122] * Add support for removing stored PKCS#11 objects in trust module * Various debugging tweaks 0.19.3 (unstable) * Fix up problems with automake testing * Fix a bunch of memory leaks in newly refactored code * Don't use _GNU_SOURCE and the unportability it brings * Testing fixes 0.19.2 (unstable) * Add basic 'trust anchor' command to store a new anchor * Support for writing out trust token objects * Port to use CKA_PUBLIC_KEY_INFO and updated trust store spec * Add option to use freebl for hashing * Implement reloading of token data * Fix warnings and possible minor bugs higlighted by code scanners * Don't load configs in home directories when running setuid or setgid * Support treating ~/.config as $XDG_CONFIG_HOME * Use $XDG_DATA_HOME/pkcs11 as default user config directory * Use $TMPDIR instead of $TEMP while testing * Open files and fds with O_CLOEXEC * Abort initialization if a critical module fails to load * Don't use thread-unsafe functions: strerror, getpwuid * Fix p11_kit_space_strlen() result when empty string * Refactoring of where various components live * Build fixes 0.19.1 (unstable) * Refactor API to be able to handle managed modules * Deprecate much of old p11-kit API * Implement concept of managed modules * Make C_CloseAllSessions function work for multiple callers * New dependency on libffi * Fix possible threading problems reported by hellgrind * Add log-calls option * Mark p11_kit_message() as a stable function * Use our own unit testing framework 0.18.3 (stable) * Fix reinitialization of trust module [#65401] * Fix crash in trust module C_Initialize * Mac OS fixes [#57714] 0.18.2 (stable) * Build fixes [#64378 ...] 0.18.1 (stable) * Put the external tools in $libdir/p11-kit * Documentation build fixes 0.18.0 (stable) * Fix use of trust module with gcr and empathy [#62896] * Further tweaks to trust module date parsing * Fix unaligned memory reads [#62819] * Win32 fixes [#63062, #63046] * Debug and logging tweaks [#62874] * Other build fixes 0.17.5 (unstable) * Don't try to guess at overflowing time values on 32-bit systems [#62825] * Test fixes [#927394] 0.17.4 (unstable) * Check for duplicate certificates in a token, warn and discard [#62548] * Implement a proper index so we have decent load performance 0.17.3 (unstable) * Use descriptive labels for the trust module tokens [#62534] * Remove the temporary built in distrust objects * Make extracted output directories and files read-only [#61898] * Don't export unneccessary ABI * Build fixes [#62479] 0.17.2 (unstable) * Fix build on 32-bit linux * Fix several crashers 0.17.1 (unstable) * Support a p11-kit specific PKCS#11 attribute persistance format [#62156] * Use the SHA1 hash of SPKI as the CKA_ID in the trust module by default [#62329] * Refactor a trust builder which builds objects out of parsed data [#62329] * Combine trust policy when extracting certificates [#61497] * The extract --comment option adds comments to PEM bundles [#62029] * A new 'priority' config option for ordering modules [#61978] * Make each configured path its own trust module token [#61499] * Use --with-trust-paths to configure trust module [#62327] * Fix bug decoding some PEM files * Better debug output for trust module lookups * Work around bug in NSS when doing serial number lookups * Work around broken strndup() function in firefox * Fix the nickname for the distrusted attribute * Build fixes 0.16.4 (stable) * Display per command help again [#62153] * Don't always print tools debug output [#62152] 0.16.3 (stable) * When iterating don't skip tokens without the CKF_TOKEN_INITIALIZED flag * Hardcode some distrust records for NSS temporarily * Parse global options better in the p11-kit command * Better debugging 0.16.2 (stable) * Fix regression in 'p11-kit extract --purpose' option [#62009] * Documentation updates * Build fixes [#62001, ...] 0.16.1 (stable) * Don't break when cA field of BasicConstraints is missing [#61975] * Documentation fixes and updates * p11-kit extract-trust is a placeholder script now 0.16.0 (stable) * Update the pkcs11.h header for new mechanisms * Fix build and tests on mingw64 (ie: win32) * Relicense LGPL code to BSD license * Documentation tweaks * Pull translations from Transifex [#60792] * Build fixes [#61739, #60894, #61740] 0.15.2 (unstable) * Add German and Finish translations * Better define the libtasn1 dependency * Crasher and bug fixes * Build fixes 0.15.1 (unstable) * Fix some memory leaks * Add a location for packages to drop module configs * Documentation updates and fixes * Add command line tool manual page * Remove unused err() function and friends * Move more code into common/ directory and refactor * Add a system trust policy module * Refactor how the p11-kit command line tool works * Add p11-kit extract and extract-trust commands * Don't complain if we cannot access ~/.pkcs11/pkcs11.conf * Refuse to load the p11-kit-proxy.so as a registered module * Don't fail initialization if last initialized module fails 0.14 * Change default for user-config to merge * Always URI-encode the 'id' attribute in PKCS#11 URIs * Expect a .module extension on module configs * Windows compatibility fixes * Testing fixes * Build fixes 0.13 * Don't allow reading of PIN files larger than 4096 bytes * If a module is not marked as critical then ignore init failure * Use preconditions to check for input problems and out of memory * Add enable-in and disable-in options to module config * Fix the flags in pin.h * Use gcc extensions to check varargs during compile * Fix crasher when a duplicate module is present * Fix broken hashmap behavior * Testing fixes * Win32 build fixes * 'p11-kit -h' now works * Documentation fixes 0.12 * Build fix 0.11 * Remove automatic reinitialization of PKCS#11 after fork
Revision 1.2 / (download) - annotate - [select for diffs], Tue Oct 23 18:16:39 2012 UTC (10 years, 7 months ago) by asau
Branch: MAIN
CVS Tags: pkgsrc-2015Q4-base,
pkgsrc-2015Q4,
pkgsrc-2015Q3-base,
pkgsrc-2015Q3,
pkgsrc-2015Q2-base,
pkgsrc-2015Q2,
pkgsrc-2015Q1-base,
pkgsrc-2015Q1,
pkgsrc-2014Q4-base,
pkgsrc-2014Q4,
pkgsrc-2014Q3-base,
pkgsrc-2014Q3,
pkgsrc-2014Q2-base,
pkgsrc-2014Q2,
pkgsrc-2014Q1-base,
pkgsrc-2014Q1,
pkgsrc-2013Q4-base,
pkgsrc-2013Q4,
pkgsrc-2013Q3-base,
pkgsrc-2013Q3,
pkgsrc-2013Q2-base,
pkgsrc-2013Q2,
pkgsrc-2013Q1-base,
pkgsrc-2013Q1,
pkgsrc-2012Q4-base,
pkgsrc-2012Q4
Changes since 1.1: +1 -3
lines
Diff to previous 1.1 (colored)
Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.
Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Fri Feb 3 14:43:12 2012 UTC (11 years, 3 months ago) by drochner
Branch: TNF
CVS Tags: pkgsrc-base,
pkgsrc-2012Q3-base,
pkgsrc-2012Q3,
pkgsrc-2012Q2-base,
pkgsrc-2012Q2,
pkgsrc-2012Q1-base,
pkgsrc-2012Q1
Changes since 1.1: +0 -0
lines
Diff to previous 1.1 (colored)
add p11-kit-0.10, a PKCS#11 module manager, needed by gnome3 components
Revision 1.1 / (download) - annotate - [select for diffs], Fri Feb 3 14:43:12 2012 UTC (11 years, 3 months ago) by drochner
Branch: MAIN
Initial revision