22ada1251f- Resolves: RHEL-50064, update to 3.24.0 - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium - Resolves: RHEL-50056, openCryptoki cca token SHA3 support - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support
Than Ngo
2024-10-22 12:13:04 +0200
00d5074a2cRelated: RHEL-58996, fix gating issue
Than Ngo
2024-10-21 20:11:24 +0200
d536f5aa50- Resolves: RHEL-58996, update to 3.24.0 - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium - Resolves: RHEL-43676, openCryptoki cca token SHA3 support - Resolves: RHEL-24036, support protected keys for extractable keys
imports/c10s/opencryptoki-3.24.0-1.el10
Than Ngo
2024-10-16 21:31:55 +0200
f632fbe906- Resolves: RHEL-23671, ep11 token support protected keys for extractable keys - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys - Resolves: RHEL-23673, update to 3.23.0
Than Ngo
2024-05-22 12:13:14 +0200
d1348bb71cRelated: RHEL-24038, backport - ep11 token: support protected keys for extractable keys
Than Ngo
2024-05-22 09:40:25 +0200
0fd47dc915Sync with stable
Eduard Abdullin
2024-03-11 10:24:05 +0300
d8e7a71882- Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22792
Than Ngo
2024-02-16 13:35:05 +0100
5dccb92199- Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791
c8s-private-than
c8s
Than Ngo
2024-02-16 12:24:04 +0100
39b1da5188timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
Than Ngo
2024-02-11 23:43:53 +0100
3e961f4d0a- timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22792
Than Ngo
2024-02-11 23:31:51 +0100
14c339d15b- update to 3.23.0 * EP11: Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Bug fixes
Than Ngo
2024-02-07 11:41:50 +0100
dfefb523ca- fix all errors and warnings (rhbz#2261419)
Dan Horák
2024-01-30 16:31:32 +0100
c390af2f87Related: #2222595, add triggerun to reload daemon
Than Ngo
2023-07-18 12:16:24 +0200
7ae4b00524- p11sak tool: slot option does not accept argument 0 for slot index 0 - p11sak fails as soon as there reside non-key objects
Than Ngo
2023-07-17 15:51:40 +0200
517add43b1Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 Resolves: #2222594, p11sak fails as soon as there reside non-key objects
Than Ngo
2023-07-14 16:51:30 +0200
e1ae1255d0Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0 Resolves: #2222596, p11sak fails as soon as there reside non-key objects
Than Ngo
2023-07-14 15:12:46 +0200
19af14b3a5- add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741
Than Ngo
2023-07-05 10:00:16 +0200
0f8dad3102- fix short description of ep11tok package (fixes#2196750)
Holger Dengler
2023-06-19 12:13:06 +0200
62e92e9764- add requirement on selinux-policy >= 38.1.14-1 for pkcsslotd policy sandboxing Related: #2160061
Than Ngo
2023-06-13 13:18:52 +0200
a4b916ba16- add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #215969
Than Ngo
2023-06-13 12:11:05 +0200
c89d9c9606- add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697
Than Ngo
2023-06-13 12:10:11 +0200
1edbc18df4- add verify attributes for opencryptoki.conf to ignore the verification
Than Ngo
2023-05-26 12:36:35 +0200
5bc4f8b724- add verify attributes for opencryptoki.conf to ignore the verification - drop unnecessary opencryptoki-3.11.0-group.patch
Than Ngo
2023-05-25 18:03:03 +0200
a222ec300d- add verify attributes for opencryptoki.conf to ignore the verification
Than Ngo
2023-05-25 14:10:14 +0200
2b264aa21a- Resolves: #2110497, concurrent MK rotation for cca token - Resolves: #2110498, concurrent MK rotation for ep11 token - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS - Resolves: #2111010, cca token: protected key support - Resolves: #2160061, rebase to 3.21.0 - Resolves: #2160105, pkcsslotd hardening - Resolves: #2160107, p11sak support Dilithium and Kyber keys - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS
Than Ngo
2023-05-22 21:01:35 +0200
e6fc48bed6- drop p11_kit_support - fix handling of user name - fix user confirmation prompt behavior when stdin is closed
Than Ngo
2023-05-22 20:57:47 +0200
4c8aef5468- pkcsstats: Fix handling of user name - p11sak: Fix user confirmation prompt behavior when stdin is closed Related: #2159697
Than Ngo
2023-05-22 16:04:07 +0200
5ddc3c6763Enable CI testing for c8s branch.
Karel Srot
2023-05-19 09:26:13 +0200
25187255f5add missing /var/lib/opencryptoki/HSM_MK_CHANGE disable unsupported sandbox options and add /run to ReadWritePaths to exclude /run directory from being made read-only on rhel8 Related: #2159697
Than Ngo
2023-05-17 13:41:18 +0200
056d16af13Enable CI testing for c9s branch.
Karel Srot
2023-05-17 12:23:48 +0200
1232683448Bring gating.yaml over from Brew dist-git
Troy Dawson
2023-03-10 11:09:33 -0800
4d2f097f20Import rpm: c8s
James Antill
2023-02-27 14:37:06 -0500
e211a280d5migrated to SPDX license
Than Ngo
2023-02-14 19:59:38 +0100
4d69833004drop unnecessary opencryptoki-3.11.0-group.patch, problem with root run all the pkcs11 commands without the need to be a member of the pkcs11 group was fixed long ago
Than Ngo
2023-02-13 18:36:55 +0100
bca00e7abdupdate to 3.20.0
Than Ngo
2023-02-13 14:24:17 +0100
Than Ngo
Troy Dawson
eabdullin
Andrew Lukoshko
Eduard Abdullin
Dan Horák
Fedora Release Engineering
eabdullin
Karel Srot
Holger Dengler
CentOS Sources
James Antill
Florian Weimer