[Opensc-commits] [OpenSC/libp11] c3f226: Workaround for openssl-3.2.0 and 3.2.1

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

  Branch: refs/heads/provider
  Home:   https://github.com/OpenSC/libp11
  Commit: c3f22677c11f64c1b22a029676b88f8bf121f4e6
      https://github.com/OpenSC/libp11/commit/c3f22677c11f64c1b22a029676b88f8bf121f4e6
  Author: olszomal <Mal...@st...>
  Date:   2024-09-30 (Mon, 30 Sep 2024)

  Changed paths:
    M src/eng_front.c

  Log Message:
  -----------
  Workaround for openssl-3.2.0 and 3.2.1

  Commit: ffaab50538dfdf61ee5d5ea0599c0c2b30493f3a
      https://github.com/OpenSC/libp11/commit/ffaab50538dfdf61ee5d5ea0599c0c2b30493f3a
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-09-30 (Mon, 30 Sep 2024)

  Changed paths:
    M .github/workflows/ci.yml

  Log Message:
  -----------
  Fix OSX tests

  Commit: 4ad2d25fb4afea34e85a260383155e6413ce54a8
      https://github.com/OpenSC/libp11/commit/4ad2d25fb4afea34e85a260383155e6413ce54a8
  Author: Niko Mauno <nik...@va...>
  Date:   2024-09-30 (Mon, 30 Sep 2024)

  Changed paths:
    M src/eng_back.c

  Log Message:
  -----------
  eng_back: Fix compiler warning for 32-bit

Amend printf formatter to avoid following compiler warning when
building for 32-bit:

  .../src/eng_back.c:550:85: warning: format '%lu' expects argument of type 'long unsigned int', but argument 4 has type 'size_t' {aka 'unsigned int'} [-Wformat=]

Signed-off-by: Niko Mauno <nik...@va...>

  Commit: fd149ce97066f4c89c95b55caeae2d21a3fc5398
      https://github.com/OpenSC/libp11/commit/fd149ce97066f4c89c95b55caeae2d21a3fc5398
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-10-19 (Sat, 19 Oct 2024)

  Changed paths:
    M NEWS
    M src/libp11-int.h
    M src/p11_ec.c
    M src/p11_load.c
    M src/p11_rsa.c

  Log Message:
  -----------
  Fixed memory leak of RSA/EC methods when releasing PKCS11_CTX

  Commit: 9b20ef7a320737b94304f3c220407e97902e6de4
      https://github.com/OpenSC/libp11/commit/9b20ef7a320737b94304f3c220407e97902e6de4
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-10-20 (Sun, 20 Oct 2024)

  Changed paths:
    M src/p11_ec.c
    M src/p11_front.c
    M src/p11_load.c
    M src/p11_rsa.c

  Log Message:
  -----------
  Style fixes

No intended functional changes

  Commit: 986111b190fb41606635dd48c761d93a669e0daf
      https://github.com/OpenSC/libp11/commit/986111b190fb41606635dd48c761d93a669e0daf
  Author: olszomal <Mal...@st...>
  Date:   2024-10-21 (Mon, 21 Oct 2024)

  Changed paths:
    M src/libp11-int.h
    M src/p11_ec.c
    M src/p11_rsa.c

  Log Message:
  -----------
  Fixed typo in function name and handle dynamic RSA/EC_KEY methods freeing for older OpenSSL versions

  Commit: 1b4e3b6a6df6d786df9fb0f81ed9db917e68f3c9
      https://github.com/OpenSC/libp11/commit/1b4e3b6a6df6d786df9fb0f81ed9db917e68f3c9
  Author: olszomal <Mal...@st...>
  Date:   2024-10-21 (Mon, 21 Oct 2024)

  Changed paths:
    M src/eng_front.c

  Log Message:
  -----------
  Fixed workaround for openssl-3.2.0 and 3.2.1

  Commit: 1bf3114a87a571dfe6ae917e635ad228a491a27b
      https://github.com/OpenSC/libp11/commit/1bf3114a87a571dfe6ae917e635ad228a491a27b
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-10-21 (Mon, 21 Oct 2024)

  Changed paths:
    M src/p11_rsa.c

  Log Message:
  -----------
  Fixed indentation

  Commit: 24636e4c60eb77bd09b02fa01817e4d53c0997ad
      https://github.com/OpenSC/libp11/commit/24636e4c60eb77bd09b02fa01817e4d53c0997ad
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-10-21 (Mon, 21 Oct 2024)

  Changed paths:
    M src/eng_back.c
    M src/eng_front.c
    M src/engine.h
    M src/libp11-int.h
    M src/libp11.h
    M src/p11_attr.c
    M src/p11_cert.c
    M src/p11_ec.c
    M src/p11_key.c
    M src/p11_rsa.c
    M src/p11_slot.c
    M src/pkcs11.h

  Log Message:
  -----------
  Unify formatting

  Commit: 54671782df85a3b98f056afb115dc94f354e7888
      https://github.com/OpenSC/libp11/commit/54671782df85a3b98f056afb115dc94f354e7888
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-10-21 (Mon, 21 Oct 2024)

  Changed paths:
    M NEWS
    M src/eng_back.c
    M src/p11_key.c

  Log Message:
  -----------
  Increase maximum PIN length

Fix #547

  Commit: 6deb30f48f5315c5fd4100c7ef037eb3dcc9a0ed
      https://github.com/OpenSC/libp11/commit/6deb30f48f5315c5fd4100c7ef037eb3dcc9a0ed
  Author: olszomal <Mal...@st...>
  Date:   2024-10-25 (Fri, 25 Oct 2024)

  Changed paths:
    M tests/dup-key.c

  Log Message:
  -----------
  Improved dup-key test

  Commit: cec62fb7588dd7053c50b09913421cbd3e521c35
      https://github.com/OpenSC/libp11/commit/cec62fb7588dd7053c50b09913421cbd3e521c35
  Author: olszomal <Mal...@st...>
  Date:   2024-10-25 (Fri, 25 Oct 2024)

  Changed paths:
    M src/p11_key.c

  Log Message:
  -----------
  Fixed EVP_PKEY handling and full key duplication

  Commit: 3873b4517257e9aed194e16842335b3ce4735321
      https://github.com/OpenSC/libp11/commit/3873b4517257e9aed194e16842335b3ce4735321
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-10-25 (Fri, 25 Oct 2024)

  Changed paths:
    M src/eng_front.c

  Log Message:
  -----------
  Workaround for conflicting atexit() callbacks

PKCS#11 modules that register their own atexit() callbacks may already
have been cleaned up by the time OpenSSL's atexit() callback is
executed. As a result, a crash occurs with certain versions of OpenSSL
and SoftHSM2. The workaround skips the execution of ctx_finish() during
OpenSSL's cleanup, converting the crash into a harmless memory leak at
exit.

  Commit: bc44450dd6f3d86c981b98aec62c5fef33a05930
      https://github.com/OpenSC/libp11/commit/bc44450dd6f3d86c981b98aec62c5fef33a05930
  Author: olszomal <Mal...@st...>
  Date:   2024-10-25 (Fri, 25 Oct 2024)

  Changed paths:
    M src/eng_front.c

  Log Message:
  -----------
  Removed deadlock avoidance workaround to prevent crashes during OpenSSL and SoftHSM2 cleanup

  Commit: f0d5a0dfc92f341acabf22db42d31bf62614545b
      https://github.com/OpenSC/libp11/commit/f0d5a0dfc92f341acabf22db42d31bf62614545b
  Author: olszomal <Mal...@st...>
  Date:   2024-10-25 (Fri, 25 Oct 2024)

  Changed paths:
    M src/p11_rsa.c

  Log Message:
  -----------
  Fixed condition in pkcs11_rsa_method_free() to properly free RSA method resources

  Commit: 55534b99803debfc1673a3de2e70a78afd8d9e17
      https://github.com/OpenSC/libp11/commit/55534b99803debfc1673a3de2e70a78afd8d9e17
  Author: olszomal <Mal...@st...>
  Date:   2024-10-25 (Fri, 25 Oct 2024)

  Changed paths:
    M src/p11_load.c

  Log Message:
  -----------
  Added check in pkcs11_CTX_unload() to ensure the module is loaded before attempting shutdown

  Commit: 1d23e0cedcd3bd1b579e0b108445292ea29ac8c2
      https://github.com/OpenSC/libp11/commit/1d23e0cedcd3bd1b579e0b108445292ea29ac8c2
  Author: olszomal <Mal...@st...>
  Date:   2024-10-25 (Fri, 25 Oct 2024)

  Changed paths:
    M src/p11_pkey.c

  Log Message:
  -----------
  Enabled OpenSSL to manage and free EVP_PKEY_METHOD resources by removing manual flag handling

  Commit: 86c04043c0e0b3634b753127fd0570e670354214
      https://github.com/OpenSC/libp11/commit/86c04043c0e0b3634b753127fd0570e670354214
  Author: olszomal <Mal...@st...>
  Date:   2024-10-28 (Mon, 28 Oct 2024)

  Changed paths:
    M src/eng_front.c

  Log Message:
  -----------
  Extend existing workaround for segmentation fault in specific OpenSSL versions during load_privkey()

  Commit: ba4ae57f05ed708c4e2b88561893aa9addb9ee47
      https://github.com/OpenSC/libp11/commit/ba4ae57f05ed708c4e2b88561893aa9addb9ee47
  Author: olszomal <Mal...@st...>
  Date:   2024-10-30 (Wed, 30 Oct 2024)

  Changed paths:
    M src/p11_rsa.c

  Log Message:
  -----------
  Ensured proper object freeing in pkcs11_rsa() to prevent memory leaks

  Commit: 715695d2ea0ff69e7757f618884b274491ea5794
      https://github.com/OpenSC/libp11/commit/715695d2ea0ff69e7757f618884b274491ea5794
  Author: olszomal <Mal...@st...>
  Date:   2024-11-12 (Tue, 12 Nov 2024)

  Changed paths:
    M src/eng_back.c

  Log Message:
  -----------
  Fixed re-numeration of slots

  Commit: 155455a46af8a1642d0e39d7b72d38afbb00055a
      https://github.com/OpenSC/libp11/commit/155455a46af8a1642d0e39d7b72d38afbb00055a
  Author: olszomal <Mal...@st...>
  Date:   2024-11-13 (Wed, 13 Nov 2024)

  Changed paths:
    M src/eng_front.c

  Log Message:
  -----------
  Bind helper methods in engine_ctrl() only for OpenSSL versions older than 3.0.

With OpenSSL 3.x, an engine might be used if defined in `openssl.cnf`.
This causes memory leaks when engine control commands are set in the config file.
For OpenSSL 3.0 and newer, add engine routines only after loading keys.

  Commit: 214b271cdd066b40ad08e15ec3c19581c8dcd149
      https://github.com/OpenSC/libp11/commit/214b271cdd066b40ad08e15ec3c19581c8dcd149
  Author: Marouene Boubakri <mar...@nx...>
  Date:   2024-11-19 (Tue, 19 Nov 2024)

  Changed paths:
    M src/Makefile.am

  Log Message:
  -----------
  src/Makefile.am: Build static PKCS#11 engine library (libpkcs11.a)

As discussed in issue #551, an application may statically link against
the OpenSSL library. Consequently, using a dynamically loadable engine
may present challenges. This PR proposes modifying the build system to
enable the creation of a static PKCS11 engine library instead
(libpkcs11.a).

The library exposes the `bind_engine()` function, which allows the
application to load and register the engine directly within the
application:

	extern int bind_engine(ENGINE *e, const char *id);

Below is a sample code snippet demonstrating how to load and register
the engine:

	ENGINE *e = NULL;
	e = ENGINE_new();
	if (e == NULL) {
		error("Error creating new engine instance: %s\n",
		      ERR_reason_error_string(ERR_get_error()));
		return 0;
	}

	/* Bind the engine using the bind_engine function */
	if (!bind_engine(e, "pkcs11")) {
		error("Error binding pkcs11 engine: %s\n",
		      ERR_reason_error_string(ERR_get_error()));
		ENGINE_free(e);
		return 0;
	}

Signed-off-by: Marouene Boubakri <mar...@nx...>

  Commit: 2e14cdbe3d96bd135195b00a2b83255a78d3f607
      https://github.com/OpenSC/libp11/commit/2e14cdbe3d96bd135195b00a2b83255a78d3f607
  Author: olszomal <Mal...@st...>
  Date:   2024-11-25 (Mon, 25 Nov 2024)

  Changed paths:
    M tests/Makefile.am
    M tests/case-insensitive.softhsm
    A tests/common.sh
    M tests/ec-cert-store.softhsm
    M tests/ec-check-privkey.softhsm
    R tests/ec-common.sh
    M tests/ec-copy.softhsm
    M tests/ec-evp-sign.softhsm
    R tests/ec-no-cert.sh
    R tests/ec-no-pubkey.sh
    A tests/ec-privkey.der
    R tests/ec-prvkey.der
    M tests/ec-testfork.softhsm
    M tests/fork-change-slot.softhsm
    M tests/fork-test.c
    A tests/openssl-settings.sh
    M tests/pkcs11-uri-without-token.softhsm
    M tests/rsa-check-privkey.softhsm
    R tests/rsa-common.sh
    M tests/rsa-evp-sign.softhsm
    R tests/rsa-no-pubkey.sh
    M tests/rsa-oaep.softhsm
    A tests/rsa-privkey.der
    R tests/rsa-prvkey.der
    M tests/rsa-pss-sign.softhsm
    M tests/rsa-testfork.softhsm
    M tests/rsa-testlistkeys.softhsm
    M tests/rsa-testlistkeys_ext.softhsm
    M tests/rsa-testpkcs11.softhsm
    M tests/search-all-matching-tokens.softhsm

  Log Message:
  -----------
  Improved tests

Centralized the use of the PKG_CONFIG_PATH environment variable to determine the OpenSSL version required by libp11.
Added flexibility to configure the OpenSSL binary via LD_LIBRARY_PATH for custom shared library locations.
Forced the use of the locally built engine by setting OPENSSL_ENGINES to ../src/.libs/.
Tests rely on pre-installed pkcs11-tool and softhsm2-util, which must be accessible through the default system PATH.
Added a guide for debugging the engine with Valgrind.
Refactored the code to improve clarity, simplify logic, and eliminate redundancies.
Switched from sh to bash to leverage Bash-specific features and ensure compatibility.
Removed legacy support checks for OpenSSL versions older than 1.0.0.
Skipped tests when libsofthsm2.so is built with libcrypto.so.3, as it is incompatible with OpenSSL 1.0.2u.
Update copyright information to Mobi - Com Polska Sp. z o.o.

  Commit: 56f80c3b333e60f2e60db3ac1fd25b0023549fc2
      https://github.com/OpenSC/libp11/commit/56f80c3b333e60f2e60db3ac1fd25b0023549fc2
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-11-25 (Mon, 25 Nov 2024)

  Changed paths:
    M src/p11_load.c

  Log Message:
  -----------
  Fix module safety after fork

fix #500

  Commit: 264a879ab10610b5cf6494020464db1bf0a3584a
      https://github.com/OpenSC/libp11/commit/264a879ab10610b5cf6494020464db1bf0a3584a
  Author: olszomal <Mal...@st...>
  Date:   2024-11-29 (Fri, 29 Nov 2024)

  Changed paths:
    M tests/check-privkey.c
    M tests/evp-sign.c
    M tests/fork-change-slot.c
    M tests/fork-test.c
    M tests/rsa-oaep.c
    M tests/rsa-pss-sign.c
    M tests/store-cert.c

  Log Message:
  -----------
  Added deallocation of allocated structures in tests

  Commit: 7f6eba0f9f14ad21f0937b882ebb30799e4a3f03
      https://github.com/OpenSC/libp11/commit/7f6eba0f9f14ad21f0937b882ebb30799e4a3f03
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-11-29 (Fri, 29 Nov 2024)

  Changed paths:
    M src/libp11-int.h
    M src/p11_ec.c
    M src/p11_key.c
    M src/p11_rsa.c

  Log Message:
  -----------
  Only get PKCS11_OBJECT references for private keys

  Commit: 9f8deafd70ae71b61852880e0fda9070a2a85049
      https://github.com/OpenSC/libp11/commit/9f8deafd70ae71b61852880e0fda9070a2a85049
  Author: olszomal <Mal...@st...>
  Date:   2024-12-02 (Mon, 02 Dec 2024)

  Changed paths:
    M tests/common.sh

  Log Message:
  -----------
  Simplified common.sh

  Commit: 2209d865023f80e419a435f65789a380cefb3efd
      https://github.com/OpenSC/libp11/commit/2209d865023f80e419a435f65789a380cefb3efd
  Author: Mikhail Titov <ml...@gm...>
  Date:   2024-12-02 (Mon, 02 Dec 2024)

  Changed paths:
    M src/Makefile.am

  Log Message:
  -----------
  Don't include libp11.rc VERSIONINFO into pkcs11

  Commit: f2c003de14550ef94f59b9535000f9a3cc8277de
      https://github.com/OpenSC/libp11/commit/f2c003de14550ef94f59b9535000f9a3cc8277de
  Author: olszomal <Mal...@st...>
  Date:   2024-12-06 (Fri, 06 Dec 2024)

  Changed paths:
    M .github/workflows/ci.yml
    M tests/common.sh

  Log Message:
  -----------
  Improved CI workflow

  Commit: 947f6ccbd0b0cba1ddd4d2fd690690c48ee80a85
      https://github.com/OpenSC/libp11/commit/947f6ccbd0b0cba1ddd4d2fd690690c48ee80a85
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-12-08 (Sun, 08 Dec 2024)

  Changed paths:
    M configure.ac

  Log Message:
  -----------
  Drop support for ancient autoconf versions

  Commit: ccf3c7739be2263b2415244104e734dd944246ea
      https://github.com/OpenSC/libp11/commit/ccf3c7739be2263b2415244104e734dd944246ea
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-12-08 (Sun, 08 Dec 2024)

  Changed paths:
    M src/eng_front.c

  Log Message:
  -----------
  Document a nontrivial workaround

Also implement error checking.

  Commit: ae1677ac97fd3e03ce8086d7c57c50e2d2153fd0
      https://github.com/OpenSC/libp11/commit/ae1677ac97fd3e03ce8086d7c57c50e2d2153fd0
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-12-08 (Sun, 08 Dec 2024)

  Changed paths:
    M README.md

  Log Message:
  -----------
  Simplify README.md

The removed statement was too generic to be useful for end-users.

Fix #449

  Commit: ff98ba6d82b589dd0e2f9242aca32711ac68086d
      https://github.com/OpenSC/libp11/commit/ff98ba6d82b589dd0e2f9242aca32711ac68086d
  Author: olszomal <Mal...@st...>
  Date:   2024-12-13 (Fri, 13 Dec 2024)

  Changed paths:
    M src/eng_back.c

  Log Message:
  -----------
  Added trailing characters to "no token" string to preserve proper truncation

  Commit: 57abaf5211b3e9c07536ad6bb45d9e9b6f6e36e5
      https://github.com/OpenSC/libp11/commit/57abaf5211b3e9c07536ad6bb45d9e9b6f6e36e5
  Author: olszomal <Mal...@st...>
  Date:   2024-12-13 (Fri, 13 Dec 2024)

  Changed paths:
    M src/eng_back.c
    M src/p11_slot.c

  Log Message:
  -----------
  Allow objects on uninitialized tokens

  Commit: 32ea9b51b6a96cd0b9f293a0dafe9153778bb4c6
      https://github.com/OpenSC/libp11/commit/32ea9b51b6a96cd0b9f293a0dafe9153778bb4c6
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-12-13 (Fri, 13 Dec 2024)

  Changed paths:
    M .github/workflows/coverity.yml

  Log Message:
  -----------
  Install softhsm2 package for Coverity

  Commit: f2c785dfe933934b86eae771e3ddfc56d37e371c
      https://github.com/OpenSC/libp11/commit/f2c785dfe933934b86eae771e3ddfc56d37e371c
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-12-13 (Fri, 13 Dec 2024)

  Changed paths:
    M .github/workflows/ci.yml
    M NEWS
    M configure.ac
    M src/libp11.rc

  Log Message:
  -----------
  Released 0.4.13

  Commit: 6d669183c7b241ce47ecce28744837ad92814f5c
      https://github.com/OpenSC/libp11/commit/6d669183c7b241ce47ecce28744837ad92814f5c
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-12-13 (Fri, 13 Dec 2024)

  Changed paths:
    M tests/Makefile.am

  Log Message:
  -----------
  Fixed tests in distribution tarball

  Commit: e177b3b4f727e69c5858e0630c8f9a3e05f1ed81
      https://github.com/OpenSC/libp11/commit/e177b3b4f727e69c5858e0630c8f9a3e05f1ed81
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-12-20 (Fri, 20 Dec 2024)

  Changed paths:
    M .github/workflows/ci.yml
    M NEWS
    M configure.ac
    M src/libp11.rc
    M src/pkcs11.rc

  Log Message:
  -----------
  Starting 0.4.14_git

  Commit: 50b13637a2c52f7e5a8e23bd2977519822aa7df6
      https://github.com/OpenSC/libp11/commit/50b13637a2c52f7e5a8e23bd2977519822aa7df6
  Author: Małgorzata Olszówka <Mal...@st...>
  Date:   2024-12-20 (Fri, 20 Dec 2024)

  Changed paths:
    M README.md
    M src/eng_back.c
    M src/eng_front.c
    M src/eng_parse.c
    M src/engine.h
    M src/libp11-int.h
    M src/libp11.exports
    M src/libp11.h
    M src/libpkcs11.c
    M src/p11_front.c
    M src/p11_key.c
    M src/p11_misc.c
    M src/p11_pkey.c
    M tests/check-privkey.c
    M tests/dup-key.c
    M tests/evp-sign.c
    M tests/rsa-oaep.c
    M tests/rsa-pss-sign.c
    M tests/store-cert.c

  Log Message:
  -----------
  Enhance libp11 logging system (#573)

Co-authored-by: Michał Trojnara <Mic...@st...>

  Commit: 2c747ad4b722d82fe2866cfe2a577e808e110b0e
      https://github.com/OpenSC/libp11/commit/2c747ad4b722d82fe2866cfe2a577e808e110b0e
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-12-23 (Mon, 23 Dec 2024)

  Changed paths:
    M src/eng_back.c
    M src/eng_front.c
    M src/engine.h

  Log Message:
  -----------
  Restore the VERBOSE engine control command

While we restore VERBOSE for compatibility with previous releases,
the control command is no longer advertised in README.md.

  Commit: 22832d3838976770570546221212dfa1965e903d
      https://github.com/OpenSC/libp11/commit/22832d3838976770570546221212dfa1965e903d
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-12-23 (Mon, 23 Dec 2024)

  Changed paths:
    M src/eng_back.c

  Log Message:
  -----------
  Simplify implementation of the QUIET control command

  Commit: 5be64220c003d5f948f502a5c191e49dcab6be80
      https://github.com/OpenSC/libp11/commit/5be64220c003d5f948f502a5c191e49dcab6be80
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-12-23 (Mon, 23 Dec 2024)

  Changed paths:
    M src/eng_back.c

  Log Message:
  -----------
  Formatting

  Commit: 7300cb8b06ea4fccb78a6daf832f60b5c71ebe70
      https://github.com/OpenSC/libp11/commit/7300cb8b06ea4fccb78a6daf832f60b5c71ebe70
  Author: mulling <luc...@su...>
  Date:   2024-12-23 (Mon, 23 Dec 2024)

  Changed paths:
    M configure.ac
    M src/Makefile.am

  Log Message:
  -----------
  Add configure option to enable the static PKCS11 engine

  Commit: 4852910824bfc8cfa6b2c7c68590e095bd7153ba
      https://github.com/OpenSC/libp11/commit/4852910824bfc8cfa6b2c7c68590e095bd7153ba
  Author: Michał Trojnara <Mic...@st...>
  Date:   2024-12-23 (Mon, 23 Dec 2024)

  Changed paths:
    M src/p11_ec.c

  Log Message:
  -----------
  Fix from CKK_GENERIC_SECRET keys

According to PKCS#11 version 2.30
(https://www.cryptsoft.com/pkcs11doc/v230/group__SEC__11__6__2__GENERIC__SECRET__KEY__OBJECTS.html)
CKK_GENERIC_SECRET keys are not supposed to support encryption or
decryption.

Fix #499

  Commit: 063b1087d8bcfd4745ae7ae7784bcd2d862ae183
      https://github.com/OpenSC/libp11/commit/063b1087d8bcfd4745ae7ae7784bcd2d862ae183
  Author: Michał Trojnara <Mic...@st...>
  Date:   2025-01-02 (Thu, 02 Jan 2025)

  Changed paths:
    M .github/workflows/ci.yml
    M .github/workflows/coverity.yml
    M NEWS
    M README.md
    M configure.ac
    M src/Makefile.am
    M src/eng_back.c
    M src/eng_front.c
    M src/eng_parse.c
    M src/engine.h
    M src/libp11-int.h
    M src/libp11.exports
    M src/libp11.h
    M src/libp11.rc
    M src/libpkcs11.c
    M src/p11_attr.c
    M src/p11_cert.c
    M src/p11_ec.c
    M src/p11_front.c
    M src/p11_key.c
    M src/p11_load.c
    M src/p11_misc.c
    M src/p11_pkey.c
    M src/p11_rsa.c
    M src/p11_slot.c
    M src/pkcs11.rc
    M src/pkcs11prov.rc
    M tests/Makefile.am
    M tests/case-insensitive.softhsm
    M tests/check-privkey.c
    A tests/common.sh
    M tests/dup-key.c
    M tests/ec-cert-store.softhsm
    M tests/ec-check-privkey.softhsm
    R tests/ec-common.sh
    M tests/ec-copy.softhsm
    M tests/ec-evp-sign.softhsm
    R tests/ec-no-cert.sh
    R tests/ec-no-pubkey.sh
    A tests/ec-privkey.der
    R tests/ec-prvkey.der
    M tests/ec-testfork.softhsm
    M tests/evp-sign.c
    M tests/fork-change-slot.c
    M tests/fork-change-slot.softhsm
    M tests/fork-test.c
    A tests/openssl-settings.sh
    M tests/pkcs11-uri-without-token.softhsm
    M tests/rsa-check-privkey.softhsm
    R tests/rsa-common.sh
    M tests/rsa-evp-sign.softhsm
    R tests/rsa-no-pubkey.sh
    M tests/rsa-oaep.c
    M tests/rsa-oaep.softhsm
    A tests/rsa-privkey.der
    R tests/rsa-prvkey.der
    M tests/rsa-pss-sign.c
    M tests/rsa-pss-sign.softhsm
    M tests/rsa-testfork.softhsm
    M tests/rsa-testlistkeys.softhsm
    M tests/rsa-testlistkeys_ext.softhsm
    M tests/rsa-testpkcs11.softhsm
    M tests/search-all-matching-tokens.softhsm
    M tests/store-cert.c

  Log Message:
  -----------
  Merge branch 'master' into provider

Compare: https://github.com/OpenSC/libp11/compare/2e2d42d731eb...063b1087d8bc

To unsubscribe from these emails, change your notification settings at https://github.com/OpenSC/libp11/settings/notifications

[Opensc-commits] [OpenSC/libp11] c3f226: Workaround for openssl-3.2.0 and 3.2.1

OpenSC - tools and libraries for smart cards

[Opensc-commits] [OpenSC/libp11] c3f226: Workaround for openssl-3.2.0 and 3.2.1