5 Commits

Author SHA1 Message Date
Adolf Belka
fefd0cb849 p11-kit: Update to version 0.25.3
- Update from version 0.25.2 to 0.25.3
- Update of rootfile
- Changelog
    0.25.3
	rpc: fix serialization of NULL mechanism pointer [PR#601]
	fix meson build failure in macOS (appleframeworks not found) [PR#603]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-12-30 07:25:59 +00:00
Adolf Belka
cbd2a2ee3b p11-kit: Update to version 0.25.2
- Update from version 0.24.1 to 0.25.2
- Update of rootfile not required
- Changelog
    0.25.2 (stable)
	 * fix error code checking of readpassphrase for --login option [PR#595]
	 * build fixes [PR#594]
	 * test fixes [PR#596]
    0.25.1 (stable)
	 * fix probing of C_GetInterface [PR#535]
	 * p11-kit: add command to list tokens [PR#581]
	 * p11-kit: add command to list mechanisms supported by a token [PR#576]
	 * p11-kit: add command to generate private-public keypair on a token [PR#551,
	   PR#582]
	 * p11-kit: add commands to import/export certificates and public keys into/from
	   a token [PR#543, PR#549, PR#568, PR#588]
	 * p11-kit: add commands to list and delete objects of a token [PR#533, PR#544,
	   PR#571]
	 * p11-kit: add --login option to login into a token with object and profile
	   management commands [PR#587]
	 * p11-kit: adjust behavior of PKCS#11 profile management commands [PR#558,
	   PR#560, PR#583, PR#591]
	 * p11-kit: print PKCS#11 URIs in list-modules [PR#532]
	 * bug and build fixes [PR#528 PR#529, PR#534, PR#537, PR#540, PR#541, PR#545,
	   PR#547, PR#550, PR#557, PR#572, PR#575, PR#579, PR#585, PR#586, PR#590]
	 * test fixes [PR#553, PR#580]
    0.25.0 (stable)
	 * add PKCS#11 3.0 support [PR#458, PR#461, PR#462, PR#463, PR#464, PR#467,
	   PR#469, PR#470, PR#475, PR#485, PR#486]
	 * add support for profile objects [PR#479]
	 * add ability to adjust module and config paths at run-time via system
	   environmental exports [PR#442]
	 * make terminal output nicer [PR#509, PR#510]
	 * p11-kit: add command to print merged configuration [PR#446, PR#489]
	 * p11-kit: add commands to list, add and delete profiles of a token [PR#500,
	   PR#503, PR#506]
	 * trust: add command to check format of .p11-kit files [PR#476, PR#483]
	 * virtual: fix libffi type signatures for PKCS#11 3.0 functions [PR#492]
	 * server: fix umask setting when --group is specified [PR#478]
	 * server: check SHELL only when neither --sh nor --csh is specified [PR#438]
	 * rpc: use space string in C_InitToken [PR#514]
	 * rpc: fix two off-by-one errors identified by asan [PR#456]
	 * modules: make logging message more translatable [PR#436]
	 * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms [PR#421]
	 * pkcs11.h: add IBM specific mechanism and attributes [PR#415]
	 * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms [PR#487]
	 * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption [PR#481]
	 * po: update translations from Transifex [PR#439]
	 * bug and build fixes [PR#412, PR#414, PR#417, PR#418, PR#420, PR#426, PR#427,
	   PR#428, PR#448, PR#451, PR#459, PR#496, PR#505, PR#511, PR#512, PR#513,
	   PR#516, PR#517, PR#524, PR#521]
	 * test fixes [PR#424, PR#441, PR#444, PR#443, PR#460, PR#472, PR#474, PR#465,
	   PR#473, PR#487, PR#499, PR#519, PR#525, PR#526]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-11-21 19:18:31 +00:00
Peter Müller
9a7e4d8506 Switch checksums from MD5 to BLAKE2
Historically, the MD5 checksums in our LFS files serve as a protection
against broken downloads, or accidentally corrupted source files.

While the sources are nowadays downloaded via HTTPS, it make sense to
beef up integrity protection for them, since transparently intercepting
TLS is believed to be feasible for more powerful actors, and the state
of the public PKI ecosystem is clearly not helping.

Therefore, this patch switches from MD5 to BLAKE2, updating all LFS
files as well as make.sh to deal with this checksum algorithm. BLAKE2 is
notably faster (and more secure) than SHA2, so the performance penalty
introduced by this patch is negligible, if noticeable at all.

In preparation of this patch, the toolchain files currently used have
been supplied with BLAKE2 checksums as well on
https://source.ipfire.org/.

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremeripfire.org>
2022-04-02 14:19:25 +00:00
Adolf Belka
0778de9200 p11-kit: Update to version 0.24.1
- Update from 0.24.0 to 0.24.1
- Update of rootfile not required
- Changelog
   0.24.1 (stable)
    * rpc: Support protocol version negotiation [PR#371, PR#385]
    * proxy: Support copying attribute array recursively [PR#368]
    * Link libp11-kit so that it cannot unload [PR#383]
    * Translation improvements [PR#381]
    * Build fixes [PR#372, PR#373, PR#375, PR#377, PR#384, PR#407]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-05 11:58:04 +00:00
Adolf Belka
fbd7a03e78 p11-kit: New program required for python3 compatibility of ca-certificates
- creation of lfs and rootfile for implementation of p11-kit

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00