From: Paul W. <no...@gi...> - 2023-03-06 12:58:20
|
Branch: refs/heads/master Home: https://github.com/OpenSC/pam_pkcs11 Commit: f526e27a10e3661faf111f56b4f85d6992bb00e0 https://github.com/OpenSC/pam_pkcs11/commit/f526e27a10e3661faf111f56b4f85d6992bb00e0 Author: Paul Wolneykien <wol...@gm...> Date: 2018-08-20 (Mon, 20 Aug 2018) Changed paths: M src/common/cert_vfy.c M src/common/uri.c Log Message: ----------- Merge pull request #26 from gkloepfer/master Fixed segfault and fetch problems when checking CRLs Commit: 85bd663909027a21f4e804931e3b2c105d4c9a33 https://github.com/OpenSC/pam_pkcs11/commit/85bd663909027a21f4e804931e3b2c105d4c9a33 Author: Frank Morgner <fra...@gm...> Date: 2018-08-27 (Mon, 27 Aug 2018) Changed paths: M README.md Log Message: ----------- Update README.md - project is maintained - as wiki is empty, we use its main description (converted to MD) here Commit: 24987f09a729dbb4c12450de084b1343ac20b54c https://github.com/OpenSC/pam_pkcs11/commit/24987f09a729dbb4c12450de084b1343ac20b54c Author: Frank Morgner <fra...@gm...> Date: 2018-08-27 (Mon, 27 Aug 2018) Changed paths: M README.md Log Message: ----------- README.md: removed license section ... we have a COPYING file anyway fixes some formatting Commit: 81e4d4be87253d04fe960f3c9c3caae191bbb946 https://github.com/OpenSC/pam_pkcs11/commit/81e4d4be87253d04fe960f3c9c3caae191bbb946 Author: Paul Wolneykien <ma...@al...> Date: 2018-09-11 (Tue, 11 Sep 2018) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fixed extra "0" argument passed to `cleanse()` Commit: 4250344e6694b918848f1064e5bf1341794caeff https://github.com/OpenSC/pam_pkcs11/commit/4250344e6694b918848f1064e5bf1341794caeff Author: Paul Wolneykien <ma...@al...> Date: 2018-09-12 (Wed, 12 Sep 2018) Changed paths: M ChangeLog M NEWS M README M configure.ac Log Message: ----------- 0.6.10 - Fixed some security issues (thx @frankmorgner): (https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/) -- fixed buffer overflow with long home directory; -- fixed wiping secrets (now using OpenSSL_cleanse()); -- verify using a nonce from the system, not the card. Commit: ebf11498a47834bb3f63f95959fbd16e70f6878e https://github.com/OpenSC/pam_pkcs11/commit/ebf11498a47834bb3f63f95959fbd16e70f6878e Author: Andrea Scarpino <me...@an...> Date: 2018-12-04 (Tue, 04 Dec 2018) Changed paths: M src/common/cert_vfy.c Log Message: ----------- Support openssl 1.1.0 Commit: 367dd22f5580339b0aef510cd2e162b8a527529b https://github.com/OpenSC/pam_pkcs11/commit/367dd22f5580339b0aef510cd2e162b8a527529b Author: alexandr nedvedicky - Sun Microsystems - Prague Czech Republic <ale...@or...> Date: 2019-01-23 (Wed, 23 Jan 2019) Changed paths: M doc/Makefile.am Log Message: ----------- - Solaris runs build process outside of srcdir this small tweak makes our life easier and should not harm other pam_pkcs11 users. Our build process generates makefiles and objects in dedicated build directory. without this patch it fails with error as follows: xsltproc \ --stringparam section.autolabel 1 \ --stringparam section.label.includes.component.label 1 \ -o pam_pkcs11.html pam_pkcs11.xsl /scratch/sashan/userland/components/pam_pkcs11/pam_pkcs11-0.6.10/doc/pam_pkcs11.xml warning: failed to load external entity "pam_pkcs11.xsl" cannot parse pam_pkcs11.xsl make[3]: *** [Makefile:644: pam_pkcs11.html] Error 4 make[3]: Leaving directory '/scratch/sashan/userland/components/pam_pkcs11/build/i86/doc' make[2]: *** [Makefile:464: all-recursive] Error 1 make[2]: Leaving directory '/scratch/sashan/userland/components/pam_pkcs11/build/i86' make[1]: *** [Makefile:396: all] Error 2 change in this pull request makes my build happy. Commit: d89237dbd858b0441a31b6a98ce92d0ee13e6385 https://github.com/OpenSC/pam_pkcs11/commit/d89237dbd858b0441a31b6a98ce92d0ee13e6385 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-16 (Thu, 16 May 2019) Changed paths: M src/common/debug.c Log Message: ----------- Use green instead of blue for log lines Blue text on black background is unreadable. This is the case for login on the console. Green text is readable on a black background and also a white background. Commit: 00c9684b37304be6797f8a267df10f6680971d0c https://github.com/OpenSC/pam_pkcs11/commit/00c9684b37304be6797f8a267df10f6680971d0c Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M doc/Makefile.am Log Message: ----------- Merge pull request #34 from Sashan/doc-build - Solaris runs build process outside of srcdir Commit: 64ad8e2f86802bdfc46eb306f94bf40b12e2bc9a https://github.com/OpenSC/pam_pkcs11/commit/64ad8e2f86802bdfc46eb306f94bf40b12e2bc9a Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/common/cert_vfy.c Log Message: ----------- Merge pull request #32 from ilpianista/openssl-110 Support openssl 1.1.0 Commit: d712ac3d52ef92efff93620d796ffb20b9a7d74d https://github.com/OpenSC/pam_pkcs11/commit/d712ac3d52ef92efff93620d796ffb20b9a7d74d Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/tools/card_eventmgr.c Log Message: ----------- Fix compiler warning card_eventmgr.c: In function ‘main’: card_eventmgr.c:336:8: warning: format ‘%ld’ expects argument of type ‘long int’, but argument 5 has type ‘pid_t’ {aka ‘int’} [-Wformat=] DBG1("Killing process: %ld", pid); ^~~~~~~~~~~~~~~~~~~~~~ ~~~ Commit: db0d957310e3d26d7a59af2c1f823cca00d3697b https://github.com/OpenSC/pam_pkcs11/commit/db0d957310e3d26d7a59af2c1f823cca00d3697b Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fix potential buffer overflow by 1 pam_pkcs11.c:753:34: warning: ‘snprintf’ output may be truncated before the last format character [-Wformat-truncation=] "PKCS11_LOGIN_TOKEN_NAME=%.*s", ^ pam_pkcs11.c:752:3: note: ‘snprintf’ output between 25 and 256 bytes into a destination of size 255 snprintf(env_temp, sizeof(env_temp) - 1, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "PKCS11_LOGIN_TOKEN_NAME=%.*s", ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ (int)((sizeof(env_temp) - 1) - strlen("PKCS11_LOGIN_TOKEN_NAME=")), ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ get_slot_tokenlabel(ph)); ~~~~~~~~~~~~~~~~~~~~~~~~ pam_pkcs11.c:770:35: warning: ‘snprintf’ output may be truncated before the last format character [-Wformat-truncation=] "PKCS11_LOGIN_CERT_ISSUER=%.*s", ^ pam_pkcs11.c:769:5: note: ‘snprintf’ output between 26 and 256 bytes into a destination of size 255 snprintf(env_temp, sizeof(env_temp) - 1, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "PKCS11_LOGIN_CERT_ISSUER=%.*s", ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ (int)((sizeof(env_temp) - 1) - strlen("PKCS11_LOGIN_CERT_ISSUER=")), ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ issuer[0]); ~~~~~~~~~~ pam_pkcs11.c:792:35: warning: ‘snprintf’ output may be truncated before the last format character [-Wformat-truncation=] "PKCS11_LOGIN_CERT_SERIAL=%.*s", ^ pam_pkcs11.c:791:5: note: ‘snprintf’ output between 26 and 256 bytes into a destination of size 255 snprintf(env_temp, sizeof(env_temp) - 1, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "PKCS11_LOGIN_CERT_SERIAL=%.*s", ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ (int)((sizeof(env_temp) - 1) - strlen("PKCS11_LOGIN_CERT_SERIAL=")), ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ serial[0]); ~~~~~~~~~~ Commit: 8b426b6364e3650a3c1b09000d05f1fb527d6525 https://github.com/OpenSC/pam_pkcs11/commit/8b426b6364e3650a3c1b09000d05f1fb527d6525 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/common/pam-pkcs11-ossl-compat.h M src/mappers/openssh_mapper.c Log Message: ----------- Fix openssh_mapper_match_keys() for OpenSSL 1.0 & 1.1 The code was incorrect since the addition of OpenSSL 1.1 support in release 0.6.10. Commit: b86eee946bcd6808cf0f9df38ad7f2107cb67ae2 https://github.com/OpenSC/pam_pkcs11/commit/b86eee946bcd6808cf0f9df38ad7f2107cb67ae2 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/mappers/mail_mapper.c Log Message: ----------- Fix compiler warning mail_mapper.c: In function ‘compare_email’: mail_mapper.c:100:27: warning: comparison of integer expressions of different signedness: ‘long int’ and ‘size_t’ {aka ‘long unsigned int’} [-Wsign-compare] return (at - c_email) == strlen(c_user) && !strncmp(c_email, c_user, strlen(c_user)); ^~ Commit: e251dcb3317089fe1ad6fd716647f0181f7fccc4 https://github.com/OpenSC/pam_pkcs11/commit/e251dcb3317089fe1ad6fd716647f0181f7fccc4 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/mappers/ldap_mapper.c Log Message: ----------- Fix compiler warning ldap_mapper.c:844:33: warning: pointer targets in passing argument 1 of ‘ldap_encode_escapes’ differ in signedness [-Wpointer-sign] escaped = ldap_encode_escapes(login, strlen(login)); ^~~~~ ldap_mapper.c:622:1: note: expected ‘const unsigned char *’ but argument is of type ‘const char *’ ldap_encode_escapes(const unsigned char *binary, size_t length) ^~~~~~~~~~~~~~~~~~~ Commit: 03cbe348ea7b38faa5fcd7ff4417619b633c902c https://github.com/OpenSC/pam_pkcs11/commit/03cbe348ea7b38faa5fcd7ff4417619b633c902c Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/mappers/ldap_mapper.c Log Message: ----------- Fix compiler warning ldap_mapper.c: In function ‘ldap_build_filter’: ldap_mapper.c:836:31: warning: declaration of ‘filter’ shadows a global declaration [-Wshadow] ldap_build_filter(const char *filter, const char *login, const char *map, ~~~~~~~~~~~~^~~~~~ ldap_mapper.c:107:20: note: shadowed declaration is here static const char *filter="(&(objectClass=posixAccount)(uid=%s)"; ^~~~~~ Commit: 754c37edf8b1e0afc0d995a92f2551b7adcd5f20 https://github.com/OpenSC/pam_pkcs11/commit/754c37edf8b1e0afc0d995a92f2551b7adcd5f20 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/scconf/parse.c Log Message: ----------- Fix compiler warning parse.c: In function ‘scconf_parse’: parse.c:389:3: warning: ‘strncpy’ output may be truncated copying 255 bytes from a string of length 255 [-Wstringop-truncation] strncpy(buffer, p.emesg, sizeof(buffer)-1); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ parse.c: In function ‘scconf_parse_string’: parse.c:416:3: warning: ‘strncpy’ output may be truncated copying 255 bytes from a string of length 255 [-Wstringop-truncation] strncpy(buffer, p.emesg, sizeof(buffer)-1); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Commit: 86d9a8107ae16ff505f25fc3203153adcf50b8e9 https://github.com/OpenSC/pam_pkcs11/commit/86d9a8107ae16ff505f25fc3203153adcf50b8e9 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/common/strings.c Log Message: ----------- Fix compiler warning and optimize speed memcpy() should be faster than strncpy(). ./strings.h: In function ‘clone_str’: strings.c:53:2: warning: ‘strncpy’ output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation] strncpy(dst,str,len); ^~~~~~~~~~~~~~~~~~~~ strings.c:50:14: note: length computed here size_t len= strlen(str); ^~~~~~~~~~~ Commit: f6b4365520781ccd12b97ce0af096ab42d986757 https://github.com/OpenSC/pam_pkcs11/commit/f6b4365520781ccd12b97ce0af096ab42d986757 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/common/strings.c Log Message: ----------- Fix compiler warning The function split_static() is not used anywhere in the code. I could have removed the code but maybe some external mapper are using it? strings.c:158:9: warning: ‘strncpy’ specified bound depends on the length of the source argument [-Wstringop-overflow=] strncpy(dst,str,1+strlen(str)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ strings.c:158:27: note: length computed here strncpy(dst,str,1+strlen(str)); ^~~~~~~~~~~ Commit: f64d27a7796b9fc721704fd3f225eeb95cb22aa3 https://github.com/OpenSC/pam_pkcs11/commit/f64d27a7796b9fc721704fd3f225eeb95cb22aa3 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fix compiler warning pkcs11_lib.c: In function ‘refresh_slots’: pkcs11_lib.c:1111:11: warning: declaration of ‘rv’ shadows a previous local [-Wshadow] CK_RV rv; ^~ pkcs11_lib.c:1056:9: note: shadowed declaration is here CK_RV rv; ^~ Commit: 03150494e6ac246c1bcf70f7cdf65875aca03284 https://github.com/OpenSC/pam_pkcs11/commit/03150494e6ac246c1bcf70f7cdf65875aca03284 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fix compiler warning pkcs11_lib.c: In function ‘init_pkcs11_module’: pkcs11_lib.c:1148:12: warning: unused variable ‘i’ [-Wunused-variable] CK_ULONG i; ^ Commit: dce544ead7730a9540ec8964141cdeb92ecb5837 https://github.com/OpenSC/pam_pkcs11/commit/dce544ead7730a9540ec8964141cdeb92ecb5837 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/mappers/null_mapper.c Log Message: ----------- Fix compiler warning null_mapper.c: In function ‘mapper_match_user’: mapper.h:206:6: warning: declaration of ‘match’ shadows a global declaration [-Wshadow] int match = 0; \ ^~~~~ null_mapper.c:60:1: note: in expansion of macro ‘_DEFAULT_MAPPER_MATCH_USER’ _DEFAULT_MAPPER_MATCH_USER ^~~~~~~~~~~~~~~~~~~~~~~~~~ null_mapper.c:43:12: note: shadowed declaration is here static int match=0; ^~~~~ Commit: 269d6c9acaeee2bd23fa7e4a099c9b6e141bce0e https://github.com/OpenSC/pam_pkcs11/commit/269d6c9acaeee2bd23fa7e4a099c9b6e141bce0e Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/mappers/openssh_mapper.c Log Message: ----------- Fix compiler warning openssh_mapper.c: In function ‘openssh_mapper_match_keys’: openssh_mapper.c:297:27: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers] authrsa_e = RSA_get0_e(authrsa); ^ openssh_mapper.c:298:23: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers] rsa_e = RSA_get0_e(rsa); ^ openssh_mapper.c:301:27: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers] authrsa_n = RSA_get0_n(authrsa); ^ openssh_mapper.c:302:23: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers] rsa_n = RSA_get0_n(rsa); ^ Commit: e9d0c4ed016cc774ff1ed07f5be4c822b2ef4f2e https://github.com/OpenSC/pam_pkcs11/commit/e9d0c4ed016cc774ff1ed07f5be4c822b2ef4f2e Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/common/cert_info.c Log Message: ----------- Fix 64-bit pkcs11_inspect(1) fails on SPARC with a SIBGUS due to misaligned access A cast has been added in fa5b394b0523fd9254ddc2a8dea7a984699bceac (in 2005) and the problem was hidden. It was the wrong solution to fix a compiler warning. Fixes https://github.com/OpenSC/pam_pkcs11/issues/28 Commit: 751eed9b5d6c96760798cb6399f43771b1d66b4d https://github.com/OpenSC/pam_pkcs11/commit/751eed9b5d6c96760798cb6399f43771b1d66b4d Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Get the key type from the private key This will allow to add support of non-RSA keys. Thanks to sovaeta for the patch https://github.com/OpenSC/pam_pkcs11/issues/23 Commit: 4a89cf3dc481425bfb9e31f91039afc5bd30c0e5 https://github.com/OpenSC/pam_pkcs11/commit/4a89cf3dc481425bfb9e31f91039afc5bd30c0e5 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/common/cert_vfy.c M src/common/cert_vfy.h M src/common/pam-pkcs11-ossl-compat.h M src/common/pkcs11_lib.c M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Add support of ECDSA signature in addition to RSA Thanks to sovaeta got the patch https://github.com/OpenSC/pam_pkcs11/issues/23 Commit: a78af08b2471323faac83d38f1f449933e97ed78 https://github.com/OpenSC/pam_pkcs11/commit/a78af08b2471323faac83d38f1f449933e97ed78 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-17 (Fri, 17 May 2019) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fix signature length computation The correct length to use is returned by C_Sign() so no need to manually increase the signature length. Thanks to sovaeta for the patch https://github.com/OpenSC/pam_pkcs11/issues/23 Commit: bc95a748470d84ff443c9d81292d40c1676fb080 https://github.com/OpenSC/pam_pkcs11/commit/bc95a748470d84ff443c9d81292d40c1676fb080 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-19 (Sun, 19 May 2019) Changed paths: M README.md Log Message: ----------- Do not use a specific version in README.md Commit: 04f8b09080d7f48ec5ecd91a3d549aa134e016c4 https://github.com/OpenSC/pam_pkcs11/commit/04f8b09080d7f48ec5ecd91a3d549aa134e016c4 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-20 (Mon, 20 May 2019) Changed paths: M src/common/cert_vfy.c Log Message: ----------- Fix support of NSS after ECDSA addition Fix compiler error: cert_vfy.c: At top level: cert_vfy.c:44:5: error: conflicting types for ‘verify_signature’ int verify_signature(X509 * x509, unsigned char *data, int data_length, ^~~~~~~~~~~~~~~~ In file included from cert_vfy.c:18:0: cert_vfy.h:81:20: note: previous declaration of ‘verify_signature’ was here CERTVFY_EXTERN int verify_signature(X509 * x509, unsigned char *data, int data_length, unsigned char **signature, int *signature_length); ^~~~~~~~~~~~~~~~ Commit: f4a9ac19b069789a5b2f4f7e674690d0f0a50686 https://github.com/OpenSC/pam_pkcs11/commit/f4a9ac19b069789a5b2f4f7e674690d0f0a50686 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-20 (Mon, 20 May 2019) Changed paths: M src/common/cert_vfy.c M src/common/cert_vfy.h Log Message: ----------- Fix verify_signature() API Fix compiler warning: pam_pkcs11.c:729:62: warning: passing argument 5 of ‘verify_signature’ from incompatible pointer type [-Wincompatible-pointer-types] random_value, sizeof(random_value), &signature, &signature_length); ^ In file included from pam_pkcs11.c:45:0: ../common/cert_vfy.h:81:20: note: expected ‘int *’ but argument is of type ‘long unsigned int *’ CERTVFY_EXTERN int verify_signature(X509 * x509, unsigned char *data, int data_length, unsigned char **signature, int *signature_length); ^~~~~~~~~~~~~~~~ Commit: 2d860c0e91fb99a3ceb600673c34fa0824f5500a https://github.com/OpenSC/pam_pkcs11/commit/2d860c0e91fb99a3ceb600673c34fa0824f5500a Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-20 (Mon, 20 May 2019) Changed paths: M src/tools/pkcs11_eventmgr.c Log Message: ----------- Fix DBG1() use pkcs11_eventmgr.c: In function ‘main’: pkcs11_eventmgr.c:482:9: warning: too many arguments for format [-Wformat-extra-args] DBG1("Malloc failed when allocating module spec", ^ ../common/debug.h:55:54: note: in definition of macro ‘DBG1’ #define DBG1(f,a) debug_print(1, __FILE__, __LINE__, f , a ) ^ pkcs11_eventmgr.c:510:26: warning: statement with no effect [-Wunused-value] for (; modList; modList->next) ~~~~~~~^~~~~~ In file included from pkcs11_eventmgr.c:33:0: pkcs11_eventmgr.c:531:9: warning: too many arguments for format [-Wformat-extra-args] DBG1("Error in daemon() call", strerror(errno)); ^ ../common/debug.h:55:54: note: in definition of macro ‘DBG1’ #define DBG1(f,a) debug_print(1, __FILE__, __LINE__, f , a ) ^ Commit: 2ce043bcbf9a4a083fec7c00da0c21fabca9a9d0 https://github.com/OpenSC/pam_pkcs11/commit/2ce043bcbf9a4a083fec7c00da0c21fabca9a9d0 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-20 (Mon, 20 May 2019) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fix DBG2() use In file included from pkcs11_lib.c:31:0: pkcs11_lib.c: In function ‘find_module_by_library’: pkcs11_lib.c:265:10: warning: format ‘%x’ expects argument of type ‘unsigned int’, but argument 5 has type ‘SECMODModuleList * {aka struct SECMODModuleListStr *}’ [-Wformat=] DBG2("modList = 0x%x next = 0x%x\n", modList, modList->next); ^ debug.h:56:56: note: in definition of macro ‘DBG2’ #define DBG2(f,a,b) debug_print(1, __FILE__, __LINE__, f , a , b ) ^ pkcs11_lib.c:265:10: warning: format ‘%x’ expects argument of type ‘unsigned int’, but argument 6 has type ‘SECMODModuleList * {aka struct SECMODModuleListStr *}’ [-Wformat=] DBG2("modList = 0x%x next = 0x%x\n", modList, modList->next); ^ debug.h:56:56: note: in definition of macro ‘DBG2’ #define DBG2(f,a,b) debug_print(1, __FILE__, __LINE__, f , a , b ) ^ Commit: d853d94dc2cf02eb4d75d9bf23122e0d3f7a52c7 https://github.com/OpenSC/pam_pkcs11/commit/d853d94dc2cf02eb4d75d9bf23122e0d3f7a52c7 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-20 (Mon, 20 May 2019) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fix DBG1() use In file included from pkcs11_lib.c:31:0: pkcs11_lib.c:306:10: warning: too many arguments for format [-Wformat-extra-args] DBG1("Malloc failed when allocating module spec", strerror(errno)); ^ debug.h:55:54: note: in definition of macro ‘DBG1’ #define DBG1(f,a) debug_print(1, __FILE__, __LINE__, f , a ) ^ Commit: 716303b97e4111beb15e7b6da3b090fe9aeb53c1 https://github.com/OpenSC/pam_pkcs11/commit/716303b97e4111beb15e7b6da3b090fe9aeb53c1 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-20 (Mon, 20 May 2019) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fix compiler warning pkcs11_lib.c: In function ‘load_pkcs11_module’: pkcs11_lib.c:295:35: warning: passing argument 1 of ‘find_module_by_library’ discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers] module = find_module_by_library(pkcs11_module); ^~~~~~~~~~~~~ pkcs11_lib.c:255:22: note: expected ‘char *’ but argument is of type ‘const char *’ static SECMODModule *find_module_by_library(char *pkcs11_module) ^~~~~~~~~~~~~~~~~~~~~~ Commit: c02ad0ecb9573a924d3a63e42b2a2c4557329fe0 https://github.com/OpenSC/pam_pkcs11/commit/c02ad0ecb9573a924d3a63e42b2a2c4557329fe0 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-20 (Mon, 20 May 2019) Changed paths: M src/common/cert_info.c Log Message: ----------- Fix DBG1() use In file included from cert_info.c:26:0: cert_info.c: In function ‘cert_info_digest’: cert_info.c:123:10: warning: too many arguments for format [-Wformat-extra-args] DBG1("Invalid digest algorithm, using 'sha1'",algorithm); ^ debug.h:55:54: note: in definition of macro ‘DBG1’ #define DBG1(f,a) debug_print(1, __FILE__, __LINE__, f , a ) ^ Commit: b4f1fdde48293cb27abed4e1772e6e6a3c8d4793 https://github.com/OpenSC/pam_pkcs11/commit/b4f1fdde48293cb27abed4e1772e6e6a3c8d4793 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-20 (Mon, 20 May 2019) Changed paths: M src/tools/pkcs11_eventmgr.c Log Message: ----------- pkcs11_eventmgr: Fix NSS module iteration pkcs11_eventmgr.c: In function ‘main’: pkcs11_eventmgr.c:510:26: warning: statement with no effect [-Wunused-value] for (; modList; modList->next) ~~~~~~~^~~~~~ Commit: bed38a565b505b167ee365153e468cf683a222ec https://github.com/OpenSC/pam_pkcs11/commit/bed38a565b505b167ee365153e468cf683a222ec Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-20 (Mon, 20 May 2019) Changed paths: M src/common/cert_vfy.c Log Message: ----------- Fix DBG1() use cert_vfy.c: In function ‘verify_signature’: cert_vfy.c:519:8: warning: format ‘%lx’ expects argument of type ‘long unsigned int’, but argument 5 has type ‘int’ [-Wformat=] DBG1("public key type: 0x%08lx", EVP_PKEY_base_id(pubkey)); ^ debug.h:55:54: note: in definition of macro ‘DBG1’ #define DBG1(f,a) debug_print(1, __FILE__, __LINE__, f , a ) ^ cert_vfy.c:520:8: warning: format ‘%lx’ expects argument of type ‘long unsigned int’, but argument 5 has type ‘int’ [-Wformat=] DBG1("public key bits: 0x%08lx", EVP_PKEY_bits(pubkey)); ^ debug.h:55:54: note: in definition of macro ‘DBG1’ #define DBG1(f,a) debug_print(1, __FILE__, __LINE__, f , a ) ^ Commit: 3b3f6876d89f937efbace83613e620675f15f476 https://github.com/OpenSC/pam_pkcs11/commit/3b3f6876d89f937efbace83613e620675f15f476 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-20 (Mon, 20 May 2019) Changed paths: M src/common/cert_vfy.c Log Message: ----------- Fix compiler warning cert_vfy.c: In function ‘verify_signature’: cert_vfy.c:508:7: warning: unused variable ‘sig_der_len’ [-Wunused-variable] int sig_der_len; ^~~~~~~~~~~ Commit: d681296215c4a4988accf9236045749addd1ef57 https://github.com/OpenSC/pam_pkcs11/commit/d681296215c4a4988accf9236045749addd1ef57 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-22 (Wed, 22 May 2019) Changed paths: M README Log Message: ----------- README: remove the release number Commit: 33072ec36631c884b09c545058551675bf22e199 https://github.com/OpenSC/pam_pkcs11/commit/33072ec36631c884b09c545058551675bf22e199 Author: Ludovic Rousseau <lud...@fr...> Date: 2019-05-22 (Wed, 22 May 2019) Changed paths: M ChangeLog M NEWS M configure.ac Log Message: ----------- Release 0.6.11 Signed-off-by: Ludovic Rousseau <lud...@fr...> Commit: 372a676635b9237b39d4e7116475f2797c24aeb6 https://github.com/OpenSC/pam_pkcs11/commit/372a676635b9237b39d4e7116475f2797c24aeb6 Author: Paul Wolneykien <ma...@al...> Date: 2020-07-10 (Fri, 10 Jul 2020) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fixed double free() in refresh_slots() Commit: ae3a851dfe5e990897dfc6c104bdc8afb917bea6 https://github.com/OpenSC/pam_pkcs11/commit/ae3a851dfe5e990897dfc6c104bdc8afb917bea6 Author: AngusMcGyver <568...@us...> Date: 2020-08-07 (Fri, 07 Aug 2020) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- change for issue 46 see https://github.com/OpenSC/pam_pkcs11/issues/46 Commit: 3c559ab4c90c73dc23982538ce33bc4f030e25d3 https://github.com/OpenSC/pam_pkcs11/commit/3c559ab4c90c73dc23982538ce33bc4f030e25d3 Author: Paul Wolneykien <ma...@al...> Date: 2020-08-11 (Tue, 11 Aug 2020) Changed paths: M ChangeLog M NEWS M README M README.md M configure.ac M doc/Makefile.am M src/common/cert_info.c M src/common/cert_vfy.c M src/common/cert_vfy.h M src/common/debug.c M src/common/pam-pkcs11-ossl-compat.h M src/common/pkcs11_lib.c M src/common/strings.c M src/mappers/ldap_mapper.c M src/mappers/mail_mapper.c M src/mappers/null_mapper.c M src/mappers/openssh_mapper.c M src/pam_pkcs11/pam_pkcs11.c M src/scconf/parse.c M src/tools/card_eventmgr.c M src/tools/pkcs11_eventmgr.c Log Message: ----------- Merge branch 'devel/base' into devel/fixes Commit: 6d33a04b4a3631f3b9579be80faa1cad7688d1a8 https://github.com/OpenSC/pam_pkcs11/commit/6d33a04b4a3631f3b9579be80faa1cad7688d1a8 Author: Paul Wolneykien <ma...@al...> Date: 2020-08-14 (Fri, 14 Aug 2020) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fixed the format strings for error code values Signed-off-by: Paul Wolneykien <ma...@al...> Commit: e4705f01b52629092e71fb71e70bd39a9cfc7e72 https://github.com/OpenSC/pam_pkcs11/commit/e4705f01b52629092e71fb71e70bd39a9cfc7e72 Author: Paul Wolneykien <ma...@al...> Date: 2020-08-14 (Fri, 14 Aug 2020) Changed paths: M src/common/cert_vfy.c Log Message: ----------- Fixed some reference type errors for OpenSSL objects Signed-off-by: Paul Wolneykien <ma...@al...> Commit: 64dfbd188a7f794de916a414bb3cbf1adf1db227 https://github.com/OpenSC/pam_pkcs11/commit/64dfbd188a7f794de916a414bb3cbf1adf1db227 Author: Paul Wolneykien <ma...@al...> Date: 2020-08-14 (Fri, 14 Aug 2020) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Merge branch 'devel/formats' into devel/fixes Commit: 15e80f474be3304ca9d18824ea5b637d5549029f https://github.com/OpenSC/pam_pkcs11/commit/15e80f474be3304ca9d18824ea5b637d5549029f Author: Paul Wolneykien <ma...@al...> Date: 2020-08-14 (Fri, 14 Aug 2020) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fix: Cast pointers for pam_get_item() Commit: ee9839bb35a41f8f6bb136799941e6563273ee38 https://github.com/OpenSC/pam_pkcs11/commit/ee9839bb35a41f8f6bb136799941e6563273ee38 Author: Paul Wolneykien <ma...@al...> Date: 2020-08-14 (Fri, 14 Aug 2020) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fixed format for CK_RV error code Signed-off-by: Paul Wolneykien <ma...@al...> Commit: 3fa30a241bf5f1e32cafb38edf7c82bab9b5ed2d https://github.com/OpenSC/pam_pkcs11/commit/3fa30a241bf5f1e32cafb38edf7c82bab9b5ed2d Author: Paul Wolneykien <ma...@al...> Date: 2020-08-15 (Sat, 15 Aug 2020) Changed paths: M configure.ac Log Message: ----------- Disable pointer-sign warnings for a while... Commit: 17d05841d94b4d35f40fada78b11b4d41ed3a661 https://github.com/OpenSC/pam_pkcs11/commit/17d05841d94b4d35f40fada78b11b4d41ed3a661 Author: Paul Wolneykien <ma...@al...> Date: 2020-08-15 (Sat, 15 Aug 2020) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fix: Cast more pointers for pam_get_item() Commit: 996dc857da9eb454d7d75736e6c54b61bb121bb6 https://github.com/OpenSC/pam_pkcs11/commit/996dc857da9eb454d7d75736e6c54b61bb121bb6 Author: Paul Wolneykien <ma...@al...> Date: 2020-08-15 (Sat, 15 Aug 2020) Changed paths: M src/tools/card_eventmgr.c Log Message: ----------- Fix: Use the return values of fscanf() and write() Commit: 3cb362e3c23b9917360bd5864f3882d5e3da9a1d https://github.com/OpenSC/pam_pkcs11/commit/3cb362e3c23b9917360bd5864f3882d5e3da9a1d Author: Paul Wolneykien <ma...@al...> Date: 2020-08-15 (Sat, 15 Aug 2020) Changed paths: M src/common/pkcs11_lib.c M src/common/pkcs11_lib.h Log Message: ----------- Fix: Remove `const` from `get_X509_certificate()` as OpenSSL functions have non-const arguments Commit: 1e7fb31032eaca6ece258ce4f5bd266dcda93ddf https://github.com/OpenSC/pam_pkcs11/commit/1e7fb31032eaca6ece258ce4f5bd266dcda93ddf Author: Paul Wolneykien <ma...@al...> Date: 2020-08-16 (Sun, 16 Aug 2020) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fixed more format for CK_RV error code Commit: ab0319f7e6609c5fa542fbc07db243a2564e294d https://github.com/OpenSC/pam_pkcs11/commit/ab0319f7e6609c5fa542fbc07db243a2564e294d Author: Paul Wolneykien <ma...@al...> Date: 2020-09-03 (Thu, 03 Sep 2020) Changed paths: M src/common/cert_vfy.c Log Message: ----------- Fix: Use X509_CRL_get0_lastUpdate() and X509_CRL_get0_nextUpdate() Use X509_CRL_get0_lastUpdate(crl) and X509_CRL_get0_nextUpdate(crl) in new OpenSSL versions instead of X509_CRL_get_lastUpdate(crl) and X509_CRL_get_nextUpdate(crl). Commit: 6c49136417ba523a27a30fe765537a78e43ec8c4 https://github.com/OpenSC/pam_pkcs11/commit/6c49136417ba523a27a30fe765537a78e43ec8c4 Author: Paul Wolneykien <ma...@al...> Date: 2020-09-03 (Thu, 03 Sep 2020) Changed paths: M src/common/cert_vfy.c Log Message: ----------- Use ECDSA_SIG_set0() instead of ECDSA_SIG_get0_r() + ECDSA_SIG_get0_s() FIXME: Why not to use d2i_ECDSA_SIG() ??? Commit: 285a2d66ca166591fa72fa07f6aaf9c8e148c0d2 https://github.com/OpenSC/pam_pkcs11/commit/285a2d66ca166591fa72fa07f6aaf9c8e148c0d2 Author: Paul Wolneykien <wol...@gm...> Date: 2021-03-23 (Tue, 23 Mar 2021) Changed paths: M configure.ac M src/common/pkcs11_lib.c M src/common/pkcs11_lib.h M src/pam_pkcs11/pam_pkcs11.c M src/tools/card_eventmgr.c Log Message: ----------- Merge pull request #52 from wolneykien/devel/fixes I've just tested it with RSA cert and the `generic` mapper. Commit: 6b55908ca57114793607c3e150249ba2941f87b2 https://github.com/OpenSC/pam_pkcs11/commit/6b55908ca57114793607c3e150249ba2941f87b2 Author: Paul Wolneykien <wol...@gm...> Date: 2021-03-23 (Tue, 23 Mar 2021) Changed paths: M src/common/cert_vfy.c Log Message: ----------- Merge pull request #51 from wolneykien/devel/opensslfix Tested with RSA certificate, `opensc` and `generic` mappers. Commit: a4f0311f2ce6f02fa1482a2df03df470634bf53d https://github.com/OpenSC/pam_pkcs11/commit/a4f0311f2ce6f02fa1482a2df03df470634bf53d Author: Paul Wolneykien <wol...@gm...> Date: 2021-03-23 (Tue, 23 Mar 2021) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Merge pull request #47 from AngusMcGyver/master Seems rational. Commit: 289f3b8bcfc821a19312f7390e3c651e647fd102 https://github.com/OpenSC/pam_pkcs11/commit/289f3b8bcfc821a19312f7390e3c651e647fd102 Author: Paul Wolneykien <ma...@al...> Date: 2021-03-25 (Thu, 25 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fix: Don't stuck if wait_for_card=false and ignore the token not found error when the auth isn't restricted to card only (either by option or by PKCS11_LOGIN_TOKEN_NAME env.var.) Commit: 6d0e9b81945df6298233766b319b19d55aad3195 https://github.com/OpenSC/pam_pkcs11/commit/6d0e9b81945df6298233766b319b19d55aad3195 Author: Paul Wolneykien <ma...@al...> Date: 2021-03-25 (Thu, 25 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Allow to pass to the next module if the auth isn't restricted to card only. Commit: 1bb036a630d6dc49d0b652fa78919d5a05dea4fb https://github.com/OpenSC/pam_pkcs11/commit/1bb036a630d6dc49d0b652fa78919d5a05dea4fb Author: Paul Wolneykien <ma...@al...> Date: 2021-03-25 (Thu, 25 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fix: Make wait-for-card work when the user is not logged in Commit: 5bcf25150fa50a6f67b9428d873619d973972ceb https://github.com/OpenSC/pam_pkcs11/commit/5bcf25150fa50a6f67b9428d873619d973972ceb Author: Paul Wolneykien <ma...@al...> Date: 2021-03-25 (Thu, 25 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fix: Return PAM_AUTH_ERR for login error Commit: 88a87d54ff0a9f1c425906bb1fe260e40bd7751c https://github.com/OpenSC/pam_pkcs11/commit/88a87d54ff0a9f1c425906bb1fe260e40bd7751c Author: Paul Wolneykien <ma...@al...> Date: 2021-03-25 (Thu, 25 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fail if no token found only when it is strictly required 1. card_only = true AND PKCS11_LOGIN_TOKEN_NAME isn't set. 2. card_only = true AND wait_for_card = true This fixes/improves commit b08ec3b095d4fa143d046783cb010cc0f34f7c92. Commit: 503dd3206a13d54df19b8b8520bd2cb1c84bb38c https://github.com/OpenSC/pam_pkcs11/commit/503dd3206a13d54df19b8b8520bd2cb1c84bb38c Author: Paul Wolneykien <ma...@al...> Date: 2021-03-25 (Thu, 25 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fix the layout a little bit Commit: 0c6fcc159413f1c3fd1ad64ce82845a8f6f00caa https://github.com/OpenSC/pam_pkcs11/commit/0c6fcc159413f1c3fd1ad64ce82845a8f6f00caa Author: Paul Wolneykien <ma...@al...> Date: 2021-03-25 (Thu, 25 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fix: Exit quietly only if card_only is false Commit: 9938b5fe59eb387fc57a135396c44e872f6cba0e https://github.com/OpenSC/pam_pkcs11/commit/9938b5fe59eb387fc57a135396c44e872f6cba0e Author: Paul Wolneykien <ma...@al...> Date: 2021-03-25 (Thu, 25 Mar 2021) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fix: Do not return error when there are no slots Commit: 806e46625f7144be9de1b33c8c77bef1be1c962e https://github.com/OpenSC/pam_pkcs11/commit/806e46625f7144be9de1b33c8c77bef1be1c962e Author: Paul Wolneykien <ma...@al...> Date: 2021-03-25 (Thu, 25 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Output "no token" errors only when wait-for-card mode is off Commit: ba24e532b637072c309408be0a50b606aad22c43 https://github.com/OpenSC/pam_pkcs11/commit/ba24e532b637072c309408be0a50b606aad22c43 Author: Paul Wolneykien <ma...@al...> Date: 2021-03-25 (Thu, 25 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fixed cleanup of the old password Commit: 097ff87538995152e1f96ea2189b1731d7516c6e https://github.com/OpenSC/pam_pkcs11/commit/097ff87538995152e1f96ea2189b1731d7516c6e Author: Paul Wolneykien <ma...@al...> Date: 2021-03-26 (Fri, 26 Mar 2021) Changed paths: M po/pam_pkcs11.pot M po/ru.po M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fix/improve: Write a message when the token authentication is cancelled Commit: 26a9f81b4f5026e0804639334fd378e103dcbf25 https://github.com/OpenSC/pam_pkcs11/commit/26a9f81b4f5026e0804639334fd378e103dcbf25 Author: Paul Wolneykien <ma...@al...> Date: 2021-03-26 (Fri, 26 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Improve more: Write a message when the token authentication is cancelled (no card case) Commit: e3ebe576c3bb98b3ab1b4a69b1e6a8b4ffcef5b3 https://github.com/OpenSC/pam_pkcs11/commit/e3ebe576c3bb98b3ab1b4a69b1e6a8b4ffcef5b3 Author: Paul Wolneykien <ma...@al...> Date: 2021-03-26 (Fri, 26 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fix/improve: Output the "no token" debug message even when `wait_for_card` is set Commit: 4a7a3ea8c1145e78adbb5cddaab829cfd05271c3 https://github.com/OpenSC/pam_pkcs11/commit/4a7a3ea8c1145e78adbb5cddaab829cfd05271c3 Author: Paul Wolneykien <ma...@al...> Date: 2021-03-26 (Fri, 26 Mar 2021) Changed paths: M etc/Makefile.am A etc/system-auth-pkcs11_strict A etc/system-auth-use_first_pass-pkcs11_strict Log Message: ----------- Added the exmple PAM configuration which uses the ignore result The configuration allows users in the group "wheel" to login without token when "card_only=false". Commit: b1ea66dad88672daef8b2e2ef171830c5808d7c4 https://github.com/OpenSC/pam_pkcs11/commit/b1ea66dad88672daef8b2e2ef171830c5808d7c4 Author: Paul Wolneykien <ma...@al...> Date: 2021-03-26 (Fri, 26 Mar 2021) Changed paths: M etc/Makefile.am A etc/pam.d_ignore_no_card.example R etc/system-auth-pkcs11_strict R etc/system-auth-use_first_pass-pkcs11_strict Log Message: ----------- Rename "pkcs11_strict" PAM config to "ignore_no_card" and install it in the docs as an example Commit: e05600c88d1a673d9f69211af6dd99adb16f7279 https://github.com/OpenSC/pam_pkcs11/commit/e05600c88d1a673d9f69211af6dd99adb16f7279 Author: Alexey I. Froloff <ra...@al...> Date: 2021-03-26 (Fri, 26 Mar 2021) Changed paths: M etc/pam_pkcs11.conf.example.in Log Message: ----------- Add card_only and wait_for_card to example config. Commit: d3a9e2eae721da3fb501c29468423bd45ea115c8 https://github.com/OpenSC/pam_pkcs11/commit/d3a9e2eae721da3fb501c29468423bd45ea115c8 Author: Alexey I. Froloff <ra...@al...> Date: 2021-03-26 (Fri, 26 Mar 2021) Changed paths: M etc/pam_pkcs11.conf.example.in Log Message: ----------- Add screen_savers to example config Commit: a2495ecff9cbcb3e165cecc09ef693d6b635840a https://github.com/OpenSC/pam_pkcs11/commit/a2495ecff9cbcb3e165cecc09ef693d6b635840a Author: Paul Wolneykien <ma...@al...> Date: 2021-03-26 (Fri, 26 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Use the single fail exit point Commit: bcf31ad533233f3d37a65e4f384e4e5f1ba937e6 https://github.com/OpenSC/pam_pkcs11/commit/bcf31ad533233f3d37a65e4f384e4e5f1ba937e6 Author: Paul Wolneykien <ma...@al...> Date: 2021-03-26 (Fri, 26 Mar 2021) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Fix: Cast the &user pointer for pam_get_item() Commit: a1abb33dddc2df1876f371d6e5869f544b7e63c9 https://github.com/OpenSC/pam_pkcs11/commit/a1abb33dddc2df1876f371d6e5869f544b7e63c9 Author: Paul Wolneykien <wol...@gm...> Date: 2021-05-08 (Sat, 08 May 2021) Changed paths: M etc/Makefile.am A etc/pam.d_ignore_no_card.example M etc/pam_pkcs11.conf.example.in M po/pam_pkcs11.pot M po/ru.po M src/common/pkcs11_lib.c M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- Merge pull request #54 from wolneykien/devel/ignore-no-card Merged the `ignore-no-card` patch. Commit: 0ddd3a7bd32d697790b1bc5b00e59147de352d5a https://github.com/OpenSC/pam_pkcs11/commit/0ddd3a7bd32d697790b1bc5b00e59147de352d5a Author: Michał Skalski <msk...@en...> Date: 2021-05-09 (Sun, 09 May 2021) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Workaround for buggy PKCS#11 C_Sign() implementation Add workaround for buggy implementation of PKCS#11 library when it does not update signature_length parameter if it returns CKR_BUFFER_TOO_SMALL. It handles also (hypotetical) reducing by PKCS#11 library returned signature length. Additionally speeds up signature using larger buffer (of 1024 bytes) at beginning which should result for most of cases calling C_Sign() only once. Commit: bae6bed9fc8b4c2c78f0f46e5247b78e7cbc518c https://github.com/OpenSC/pam_pkcs11/commit/bae6bed9fc8b4c2c78f0f46e5247b78e7cbc518c Author: Olivier Martin <ol...@la...> Date: 2021-05-20 (Thu, 20 May 2021) Changed paths: M src/pam_pkcs11/pam_config.c Log Message: ----------- pam_config: Handle 'card_only' option from command line Commit: 8bda0205f3f448b79ccb56fc63efae69bbb38dfd https://github.com/OpenSC/pam_pkcs11/commit/8bda0205f3f448b79ccb56fc63efae69bbb38dfd Author: Paul Wolneykien <wol...@gm...> Date: 2021-05-20 (Thu, 20 May 2021) Changed paths: M src/pam_pkcs11/pam_config.c Log Message: ----------- Merge pull request #55 from labapart/card-only-from-command-line pam_config: Handle 'card_only' option from command line Commit: 4b020263b91c626f083e4c3bff55d0f3e334f4e8 https://github.com/OpenSC/pam_pkcs11/commit/4b020263b91c626f083e4c3bff55d0f3e334f4e8 Author: Paul Wolneykien <wol...@gm...> Date: 2021-05-31 (Mon, 31 May 2021) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Merge pull request #40 from mskalski/signature-size-workaround Workaround for buggy PKCS#11 C_Sign() implementation Commit: 2e7e4b880cd17b06d4633d1f1b5eb21190e0365b https://github.com/OpenSC/pam_pkcs11/commit/2e7e4b880cd17b06d4633d1f1b5eb21190e0365b Author: Paul Wolneykien <ma...@al...> Date: 2021-05-31 (Mon, 31 May 2021) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Limit signature length to 65536 bytes This protects the C_Sign() loop from infinite looping in the case of a buggy PKCS#11 implementation (see commit f81e22c). Commit: 8647c7cde99c8cf3a8df910c0185d3997f5c56e2 https://github.com/OpenSC/pam_pkcs11/commit/8647c7cde99c8cf3a8df910c0185d3997f5c56e2 Author: Paul Wolneykien <ma...@al...> Date: 2021-05-31 (Mon, 31 May 2021) Changed paths: M AUTHORS M ChangeLog M README M configure.ac Log Message: ----------- Release 0.6.12 Signed-off-by: Paul Wolneykien <ma...@al...> Commit: e8c26d01e1b9c8eb3bb8d965505d682b151a4775 https://github.com/OpenSC/pam_pkcs11/commit/e8c26d01e1b9c8eb3bb8d965505d682b151a4775 Author: Paul Wolneykien <ma...@al...> Date: 2021-08-27 (Fri, 27 Aug 2021) Changed paths: M src/common/cert_vfy.c Log Message: ----------- Fixed missing X509_CRL_free() in check_for_revocation Fixed missing X509_CRL_free() in check_for_revocation (thx Komarov Egor). Commit: faa8a2f09f2eda1d39e2d60f2cd9830f023e2e73 https://github.com/OpenSC/pam_pkcs11/commit/faa8a2f09f2eda1d39e2d60f2cd9830f023e2e73 Author: Dimitri Papadopoulos <323...@us...> Date: 2021-09-15 (Wed, 15 Sep 2021) Changed paths: M AUTHORS M ChangeLog M README M README.md M doc/README.autologin M doc/README.eventmgr M doc/README.mappers M doc/mappers_api.xml M doc/pam_pkcs11.xml M doc/pkcs11_eventmgr.1 M etc/pam_pkcs11.conf.example.in M pam_pkcs11.spec M src/common/cert_info.c M src/common/cert_vfy.c M src/common/cert_vfy.h M src/common/pam-pkcs11-ossl-compat.h M src/common/pkcs11_lib.c M src/common/rsaref/pkcs11.h M src/common/strings.h M src/common/uri.c M src/common/uri.h M src/mappers/ldap_mapper.c M src/mappers/mail_mapper.c M src/mappers/mapper.h M src/mappers/null_mapper.c M src/pam_pkcs11/mapper_mgr.h M src/pam_pkcs11/pam_pkcs11.c M src/scconf/README.scconf M src/tools/card_eventmgr.c M src/tools/pkcs11_eventmgr.c Log Message: ----------- Fix typos found by codespell Commit: 85c5b9707b2dfc0c4c4a37be0ec06ad9ec7fc1d1 https://github.com/OpenSC/pam_pkcs11/commit/85c5b9707b2dfc0c4c4a37be0ec06ad9ec7fc1d1 Author: Dimitri Papadopoulos <323...@us...> Date: 2021-09-15 (Wed, 15 Sep 2021) Changed paths: A .github/workflows/codespell.yml A codespell_ignore_words.txt Log Message: ----------- Add codespell to CI to find typos early Commit: d09ae6efb672dba32e772a176abec20eb8979cbb https://github.com/OpenSC/pam_pkcs11/commit/d09ae6efb672dba32e772a176abec20eb8979cbb Author: Dimitri Papadopoulos <323...@us...> Date: 2021-09-15 (Wed, 15 Sep 2021) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Fix LGTM.com errors Wrong type of arguments to formatting function Commit: 4a6a7fcede56385fd2d63cbef13e8b2c8f0f0717 https://github.com/OpenSC/pam_pkcs11/commit/4a6a7fcede56385fd2d63cbef13e8b2c8f0f0717 Author: Ludovic Rousseau <lud...@fr...> Date: 2021-10-05 (Tue, 05 Oct 2021) Changed paths: A .github/workflows/codespell.yml M AUTHORS M ChangeLog M README M README.md A codespell_ignore_words.txt M doc/README.autologin M doc/README.eventmgr M doc/README.mappers M doc/mappers_api.xml M doc/pam_pkcs11.xml M doc/pkcs11_eventmgr.1 M etc/pam_pkcs11.conf.example.in M pam_pkcs11.spec M src/common/cert_info.c M src/common/cert_vfy.c M src/common/cert_vfy.h M src/common/pam-pkcs11-ossl-compat.h M src/common/pkcs11_lib.c M src/common/rsaref/pkcs11.h M src/common/strings.h M src/common/uri.c M src/common/uri.h M src/mappers/ldap_mapper.c M src/mappers/mail_mapper.c M src/mappers/mapper.h M src/mappers/null_mapper.c M src/pam_pkcs11/mapper_mgr.h M src/pam_pkcs11/pam_pkcs11.c M src/scconf/README.scconf M src/tools/card_eventmgr.c M src/tools/pkcs11_eventmgr.c Log Message: ----------- Merge pull request #60 from DimitriPapadopoulos/codespell Codespell Commit: fc9307503a125da6ae434807690e5e6f7f4d43d1 https://github.com/OpenSC/pam_pkcs11/commit/fc9307503a125da6ae434807690e5e6f7f4d43d1 Author: Ludovic Rousseau <lud...@fr...> Date: 2021-10-05 (Tue, 05 Oct 2021) Changed paths: M src/common/pkcs11_lib.c Log Message: ----------- Merge pull request #61 from DimitriPapadopoulos/lgtm Fix LGTM.com errors Commit: 91c9d59101aedf341544b27a4271d5e4886d4567 https://github.com/OpenSC/pam_pkcs11/commit/91c9d59101aedf341544b27a4271d5e4886d4567 Author: Ludovic Rousseau <lud...@fr...> Date: 2021-10-05 (Tue, 05 Oct 2021) Changed paths: M src/common/cert_vfy.c Log Message: ----------- Merge pull request #58 from wolneykien/devel/moresslfix Fixed missing X509_CRL_free() in check_for_revocation Commit: dfe124c0be7ef1fab8389aaab4cf0407c75d2ab5 https://github.com/OpenSC/pam_pkcs11/commit/dfe124c0be7ef1fab8389aaab4cf0407c75d2ab5 Author: krolikov <kro...@gm...> Date: 2022-03-22 (Tue, 22 Mar 2022) Changed paths: M tools/pkcs11_make_hash_link Log Message: ----------- Making changes to pkcs11_make_hash_link to support whitespaces in file names Commit: c886c4cc7f1a4a76fdccda6c50a1e45bd108ee47 https://github.com/OpenSC/pam_pkcs11/commit/c886c4cc7f1a4a76fdccda6c50a1e45bd108ee47 Author: krolikov <kro...@gm...> Date: 2022-04-07 (Thu, 07 Apr 2022) Changed paths: M tools/pkcs11_make_hash_link Log Message: ----------- Change IFS variable inside a subshell to accomodate for whitespaces in file names Commit: df9257e0173215f66cb8fc25e91f994aba0a20da https://github.com/OpenSC/pam_pkcs11/commit/df9257e0173215f66cb8fc25e91f994aba0a20da Author: Paul Wolneykien <wol...@gm...> Date: 2022-04-07 (Thu, 07 Apr 2022) Changed paths: M tools/pkcs11_make_hash_link Log Message: ----------- Merge pull request #64 from krolikov/krolikov_make_hash_whitespace Making changes to pkcs11_make_hash_link to support whitespaces in file names Commit: cf14bf97c55a8c442d46d1f4970922049a2b8652 https://github.com/OpenSC/pam_pkcs11/commit/cf14bf97c55a8c442d46d1f4970922049a2b8652 Author: Bowb <618...@us...> Date: 2022-06-07 (Tue, 07 Jun 2022) Changed paths: M src/mappers/mapper.c Log Message: ----------- Update mapper.c Check if *from has value before passing to strchr Commit: d1fc946597207750b9d5a93a63ebb77c7c343967 https://github.com/OpenSC/pam_pkcs11/commit/d1fc946597207750b9d5a93a63ebb77c7c343967 Author: Truman H Lackey <th...@sa...> Date: 2022-06-08 (Wed, 08 Jun 2022) Changed paths: M src/common/pkcs11_lib.c M src/mappers/mapper.c M src/mappers/subject_mapper.c M src/pam_pkcs11/mapper_mgr.c M src/pam_pkcs11/pam_config.c M src/pam_pkcs11/pam_config.h M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- cleanup memory leaks. Commit: f8e7d85aa3ca4fd2e2a8c2dfe601d1224debe372 https://github.com/OpenSC/pam_pkcs11/commit/f8e7d85aa3ca4fd2e2a8c2dfe601d1224debe372 Author: bowb <618...@us...> Date: 2022-06-09 (Thu, 09 Jun 2022) Changed paths: M src/mappers/mapper.c M src/pam_pkcs11/pam_config.c M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- memory leak fixes. Commit: 5e7dd640498047682d485cb57d24f767a902747c https://github.com/OpenSC/pam_pkcs11/commit/5e7dd640498047682d485cb57d24f767a902747c Author: bowb <618...@us...> Date: 2022-06-09 (Thu, 09 Jun 2022) Changed paths: M src/common/pkcs11_lib.c M src/mappers/mapper.c M src/mappers/subject_mapper.c M src/pam_pkcs11/mapper_mgr.c M src/pam_pkcs11/pam_config.c M src/pam_pkcs11/pam_config.h M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- merge in memory leak fixes into master. Commit: db03519dcd8de95538074da06260636003c23ce6 https://github.com/OpenSC/pam_pkcs11/commit/db03519dcd8de95538074da06260636003c23ce6 Author: bowb <618...@us...> Date: 2022-06-09 (Thu, 09 Jun 2022) Changed paths: M src/mappers/mapper.c Log Message: ----------- check from bounds. Commit: a7553612563b6fdd3e55507751d25f41e72411d3 https://github.com/OpenSC/pam_pkcs11/commit/a7553612563b6fdd3e55507751d25f41e72411d3 Author: bowb <618...@us...> Date: 2022-06-09 (Thu, 09 Jun 2022) Changed paths: M src/common/pkcs11_lib.c M src/mappers/mapper.c M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- formatting fixes. Commit: fcceff3eeef0cb8cf7f054054d1593ca00b9b797 https://github.com/OpenSC/pam_pkcs11/commit/fcceff3eeef0cb8cf7f054054d1593ca00b9b797 Author: bowb <618...@us...> Date: 2022-06-09 (Thu, 09 Jun 2022) Changed paths: M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- free memory returned by cert_info Commit: 345b22721fd97848e2d20ddca4a3df91e9fc0b14 https://github.com/OpenSC/pam_pkcs11/commit/345b22721fd97848e2d20ddca4a3df91e9fc0b14 Author: bowb <618...@us...> Date: 2022-06-10 (Fri, 10 Jun 2022) Changed paths: M src/common/cert_vfy.c M src/pam_pkcs11/pam_pkcs11.c Log Message: ----------- cleanup formatting. fix memory leak check_for_revocation Commit: bdad577afc434b20420f6c4a1fa8a33b9cc7693a https://github.com/OpenSC/pam_pkcs11/commit/bdad577afc434b20420f6c4a1fa8a33b9cc7693a Author: bowb <618...@us...> Date: 2022-06-10 (Fri, 10 Jun 2022) Changed paths: M src/common/algorithm.c M src/common/base64.c M src/common/cert_info.c M src/common/cert_vfy.c M src/common/pkcs11_lib.c M src/common/strings.c M src/common/strndup.c M src/common/uri.c Log Message: ----------- initialize unitialized variables. Commit: ecdce1afad21ea6126160f49cc11d581b8a3cd03 https://github.com/OpenSC/pam_pkcs11/commit/ecdce1afad21ea6126160f49cc11d581b8a3cd03 Author: Bowb <618...@us...> Date: 2022-06-10 (Fri, 10 Jun 2022) Changed paths: M src/common/base64.c Log Message: ----------- Update base64.c Commit: 0cbc9627bbdb4ee73e405acd3266fce854637118 https://github.com/OpenSC/pam_pkcs11/commit/0cbc9627bbdb4ee73e405acd3266fce854637118 Author: bowb <618...@us...> Date: 2022-06-13 (Mon, 13 Jun 2022) Changed paths: M src/common/cert_info.c M src/common/cert_info.h M src/mappers/subject_mapper.c Log Message: ----------- add free_entries. only used by subject_mapper Commit: ab78e02119ebe29bbd6860eed7154ed676cd1957 https://github.com/OpenSC/pam_pkcs11/commit/ab78e02119ebe29bbd6860eed7154ed676cd1957 Author: bowb <618...@us...> Date: 2022-06-13 (Mon, 13 Jun 2022) Changed paths: M src/common/cert_info.c M src/common/cert_info.h M src/mappers/subject_mapper.c Log Message: ----------- Merge branch 'changes' Commit: 6d0a4bcafb34b2835135739f0b3cc16e7290715c https://github.com/OpenSC/pam_pkcs11/commit/6d0a4bcafb34b2835135739f0b3cc16e7290715c Author: bowb <618...@us...> Date: 2022-06-13 (Mon, 13 Jun 2022) Changed paths: M src/mappers/subject_mapper.c Log Message: ----------- fix return type. Commit: 54d6e48dc583f8a0be01e2b228cbfbb247b8f1e2 https://github.com/OpenSC/pam_pkcs11/commit/54d6e48dc583f8a0be01e2b228cbfbb247b8f1e2 Author: Paul Wolneykien <ma...@al...> Date: 2022-08-03 (Wed, 03 Aug 2022) Changed paths: M src/common/cert_info.c Log Message: ----------- Initialize the entries ar... [truncated message content] |