-------------------------------------------------------------------

Tue May  7 15:19:11 UTC 2024 - Davide Benini <davide.benini@suse.com>

​

- Fix for bsc#1221255:

  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch

​

-------------------------------------------------------------------

Tue Jan 29 22:45:28 CET 2019 - sbrabec@suse.com

​

- Update to version 0.6.10:

  * Fix some security issues (thx @frankmorgner):

    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/

    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,

    0002-fixed-buffer-overflow-with-long-home-directory.patch,

    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).

  * Fix buffer overflow with long home directory.

  * Fix wiping secrets (now using OpenSSL_cleanse()).

  * Verify using a nonce from the system, not the card.

  * Fix segfalt when checking CRLs

    (drop pam_pkcs11-crl-check.patch).

- Add rcpkcs11_eventmgr service symlink.

​

-------------------------------------------------------------------

Fri Aug 17 10:12:31 UTC 2018 - vcizek@suse.com

​

- Address security issues found by X41 D-Sec audit (bsc#1105012)

  * Authentication Replay

  * Buffer Overflow

  * Memory not cleaned properly before free()

- add patches:

  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch

  * 0002-fixed-buffer-overflow-with-long-home-directory.patch

  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch

​

-------------------------------------------------------------------

Mon Jul 23 17:36:18 CEST 2018 - sbrabec@suse.com

​

- Fix segfault and fetch problems when checking CRLs

  (pam_pkcs11-crl-check.patch).

​

-------------------------------------------------------------------

Sun Sep 10 00:08:17 UTC 2017 - jengelh@inai.de

​

- Repair bulletpoint that skidded in description.

  Trim description of %name-devel-doc, it does not cotain

  the programs.

​

-------------------------------------------------------------------

Wed Aug  9 15:08:07 UTC 2017 - astieger@suse.com

​

- add service file bsc#1049219

​

-------------------------------------------------------------------

Thu Jul 20 18:02:57 CEST 2017 - sbrabec@suse.com

​

- Updated to version 0.6.9:

  * Upstream web moved.

  * pkcs11_listcerts: Do not fail on certificate error.

  * Do not fail if card was already unlocked.

  * Other bug fixes.

  * Translation updates.

- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.

- Work around incorrect upstream release process not calling

  "make dist".

- Split API documentation into a separate package

  pam_pkcs11-devel-doc.

- Add pam_pkcs11-fsf-address.patch.

​

-------------------------------------------------------------------

Tue Feb  9 19:02:43 UTC 2016 - antoine.belvire@laposte.net

​

- Fix build for Tumbleweed:

  * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch

  * Rebuild configure with the bootstrap script (add libtool as

    build dependency)

​

-------------------------------------------------------------------

Tue Jul 10 17:24:56 CEST 2012 - sbrabec@suse.cz

​

- Updated to version 0.6.8:

  * Code cleanup.

  * Bug fixes.

  * Translation updates.

​

-------------------------------------------------------------------

Tue Feb 28 19:54:16 CET 2012 - sbrabec@suse.cz

​

- Change nssdb path to /etc/pki/nssdb (bnc#463469).

- Make libdir paths in pam_pkcs11.conf biarch-wise.

​

-------------------------------------------------------------------

Wed Jan  5 18:40:44 CET 2011 - sbrabec@suse.cz

​

- Updated to version 0.6.6:

  * Compatible with pcsc-lite-1.6.

  * New mapper API.

  * Minor fixes.

  * Translaton updates.

​

-------------------------------------------------------------------

Mon Feb  1 12:20:03 UTC 2010 - jengelh@medozas.de

​

- package baselibs.conf

​

-------------------------------------------------------------------

Wed Aug  5 15:55:31 CEST 2009 - sbrabec@suse.cz

​

- Updated to version 0.6.1:

  * Added functions to API.

  * Fixes from openSUSE packages upstreamed.

  * Minor fixes.

  * Translaton updates.

​

-------------------------------------------------------------------

Thu Jun 25 12:41:19 CEST 2009 - sbrabec@suse.cz

​

- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).

​

-------------------------------------------------------------------

Wed Oct 15 18:30:29 CEST 2008 - sbrabec@suse.cz

​

- Fixed all implicit declarations.

​

-------------------------------------------------------------------

Tue Sep 23 17:49:42 CEST 2008 - sbrabec@suse.cz

​

- Fixed uninitialized variable (bnc#351207).

​

-------------------------------------------------------------------

Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de

​

- added baselibs.conf file to build xxbit packages

  for multilib support

​

-------------------------------------------------------------------

Thu Sep  6 21:08:43 CEST 2007 - jberkman@novell.com

​

- use the same directory for nssdb as the kerberos pkinit plugin

​

-------------------------------------------------------------------

Tue Jul 31 17:34:21 CEST 2007 - sbrabec@suse.cz

​

- Build with NSS instead of openssl.

- Applied patches from Jacob Berkman: MS UPN OID and NSS

  configuration.

- Fixed implicit declaration.

​

-------------------------------------------------------------------

Thu Jul 26 14:32:24 CEST 2007 - sbrabec@suse.cz

​

- Updated to version 0.6.0:

  * compiler warning fixes

  * I18N support

  * new configuration options

  * support for new environment variables

  * new tool pkcs11_setup

  * support for the NSS crypto libraries (off by default)

  * for more changes see ChangeLog.svn

​

-------------------------------------------------------------------

Fri May 12 16:18:38 CEST 2006 - sbrabec@suse.cz

​

- New SuSE package, version 0.5.3.

​

​