Importing private keys into a PKCS#11 token is broken with OpenSC 0.23.0
and OpenSSL 3. Fix it by backporting the corresponding upstream fixes.
Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
Support signing of data with a length of more than 512 bytes (#2314)
By default, disable support for old card drivers (#2391) and remove support for old drivers MioCOS and JCOP (#2374)
Bump minimal required OpenSSL version to 1.1.1 and add support for OpenSSL 3.0 (#2438, #2506)
Compatibility with LibreSSL (#2495, #2595)
Remove support for DSA (#2503)
Extend p11test to support symmetric keys (#2430)
Notice detached reader on macOS (#2418)
Support for OAEP padding (#2475, #2484)
Fix for PSS salt length (#2478)
Improve fuzzing by adding new tests (#2417, #2500, #2520, #2550, #2637)
Fixed various issues reported by OSS-Fuzz and Coverity regarding card drivers, PKCS#11 and PKCS#15 init
Fix issues with OpenPACE (#2472)
Containers support for local testing
Add support for encryption and decryption using symmetric keys (#2473, #2607)
Stop building support for Gost algorithms with OpenSSL 3.0 as they require deprecated API (#2586)
Fix detection of disconnected readers in PCSC (#2600)
Add configuration option for on-disk caching of private data (#2588)
Skip building empty binaries when dependencies are missing and remove needless linking (#2617)
Define arm64 as a supported architecture in the Installer package (#2610)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Use standard paths for file cache on Linux and OSX
Various issues of memory/buffer handling in legacy drivers mostly
reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc,
westcos, gpk, flex, dnie, mcrd, authentic, belpic)
Add threading test to pkcs11-tool
Add support to generate generic secret keys
opensc-explorer: Print information about LCS (Life cycle status byte)
Add support for Apple's arm64 (M1) binaries, removed TokenD.
A seperate installer with TokenD (and without arm64 binaries) will be available.
Support for gcc11 and its new strict aliasing rules
Initial support for building with OpenSSL 3.0
pkcs15-tool: Write data objects in binary mode
Avoid limited size of log messages
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is the result of automated script (0.9.1) conversion:
oe-core/scripts/contrib/convert-overrides.py .
converting the metadata to use ":" as the override character instead of "_".
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The corresponding version number of commit 30180986a08cf71fe4af4b50251a8bb5b1ab95af is 0.21.0.
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
-License-Update: The address is updated as follows
You should have received a copy of the GNU Lesser General Public
License along with this library; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
OpenSC depends on pcsc-lite's systemd service and pkcs11 library at
runtime.
Signed-off-by: Laurent Bonnans <laurent.bonnans@here.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is needed as a dependency when using SoftHSM from the PKCS#11
OpenSSL engine for code singing.
Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
OpenCT upstream maintenance seems to have stopped and OpenSC upstream
uses pcsc-lite by default in their configure script. Add PACKAGECONFIGs
for each and select pcsc by default.
As the openct package depends on pcsc-lite by itself, this avoids an
unnecessary package in the default case.
Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
OpenSC provides a set of libraries and utilities to work with smart cards.
Its main focus is on cards that support cryptographic operations, and
facilitate their use in security applications such as authentication,
mail encryption and digital signatures.
Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Lee Chee Yang
Jan Luebbe
Wang Mingyu
Khem Raj
Richard Purdie
Alexander Kanavin
Martin Jansa
Zheng Ruoqin
Zang Ruochen
Laurent Bonnans
Armin Kuster
Derek Straka
Li xin