-
opencryptoki (3.18.0+dfsg-0ubuntu2.1) kinetic; urgency=medium
* Add d/p/lp-2022088-fix-p11sak-failure-to-find-libopencryptoki.so.patch
to fix the failure that p11sak is not able to find libopencryptoki as
plugin, by adjusting 'default_pkcs11lib'. (LP: #2022088)
* d/opencryptoki.install: install full set of etc/opencryptoki build
folder to esp. catch all generated conf files and on top make the arch-
specific file 'opencryptoki.install.s390x' obsolete. (LP: #2018911)
* d/opencryptoki.postinst: change strength.conf file permissions to 640
which is checked/forced by the opencryptoki code. (LP: #2018908)
-- Frank Heimes <email address hidden> Thu, 29 Jun 2023 09:39:27 +0200
-
opencryptoki (3.18.0+dfsg-0ubuntu2) kinetic; urgency=medium
* Add quilt patch
d/p/lp-1989558-common-fix-memory-leak-in-save_private_token_object.patch
to fix a failure of opencryptoki C_GenerateKeyPair() that occurs after
having generated more that 500 RSA keys with CEX7 and CEX8 crypto cards.
(LP: #1989558)
-- Frank Heimes <email address hidden> Wed, 14 Sep 2022 15:01:02 +0200
-
opencryptoki (3.18.0+dfsg-0ubuntu1) kinetic; urgency=medium
* New upstream release, with:
- minor adjustment in 01-disable-testcases.patch due to different context
- remove of d/p/6759faed-EP11-Fix-host-library-version-query.patch
since it's now included in 3.18 upstream
- remove file AUTHORS from debian/opencryptoki.docs
since it got removed in 3.18 upstream
This new version solves LP bugs (feature requests):
- "openCryptoki: PKCS #11 3.1 - support CKA_DERIVE_TEMPLATE" (LP: #1982842)
- "openCryptoki: support crypto profiles" (LP: #1959549)
- "openCryptoki: add crypto counters" (LP: #1959551)
- Assign pkcs11 group to p11sak_defined_attrs.conf and strength.conf
in debian/opencryptoki.postinst rather than of Makefile.am
to solve "invalid group ‘pkcs11’" issues during build.
Also extend debian/opencryptoki.install and
debian/opencryptoki.install.s390x to pick up
/etc/opencryptoki/p11sak_defined_attrs.conf and
/etc/opencryptoki/strength.conf.
-- Frank Heimes <email address hidden> Mon, 15 Aug 2022 12:29:35 +0200
-
opencryptoki (3.17.0+dfsg+20220202.b40982e-0ubuntu2) kinetic; urgency=medium
* d/p/6759faed-EP11-Fix-host-library-version-query.patch
fixing fix inavailability of Dilithium support in OpenCryptoki >= 3.13
with upgraded EP11 host library
Thanks to Ingo Franzki (LP: #1973296)
-- Frank Heimes <email address hidden> Fri, 13 May 2022 19:56:35 +0200
-
opencryptoki (3.17.0+dfsg+20220202.b40982e-0ubuntu1) jammy; urgency=medium
* New upstream release LP: #1959419
based on 3.17 + master (b40982e) at date 20220202
- Update d/p/01-disable-testcases.patch
- Refresh d/p/03-dlopen-soname.patch
- Update and Refresh d/p/04-pkcsslotd-cmdline-args.patch
- Drop lp1928780-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
- Add libudev-dev to d/control Build-Depends
- Remove 'BSD' entry for usr/lib/pkcs11/aep_stdll/* from d/copyright,
since this (sub-)folder got removed
- Update relevant IBM license years in d/copyright
- Remove testcases/crypto/abfunc.c from Files-Excluded in d/copyright,
since it's clearly under IBM copyright, that is listed further down
- Upstream 'doc' folder is now required and cannot be excluded anymore,
hence changed Files-Excluded from doc to more specific doc/README.*
- New version expands key management tool p11sak functionality,
hence solves LP: #1959577
-- Frank Heimes <email address hidden> Tue, 15 Feb 2022 09:30:48 +0100
