libp11-kit0-32bit-0.23.22-150500.8.3.1 < > , Y e:;Xp9|1=mEsk
y<ǓZJL
{Wө95/i%>O@ #b=8(\V} p ǵE|$MitC
7"6$8 ]衜Q}O ;nT|Yxv#D
m`I[gq,-Ց[rTfR(IM͐BT0cK7wwUPa%7m'OQ(]m8ӰmVq 43/ > > 3 ? 3 d ) N - N [ q
3
\ h w ( B 8 L
9 t
:
> 0P G 0X H 0d I 0p X 0t Y 0 \ 0 ] 0 ^ 0 b 0 c 1 d 2; e 2@ f 2C l 2E u 2X v 2d w 2 x 3 y 3 3| 3 3 3 C libp11-kit0-32bit 0.23.22 150500.8.3.1 Library to work with PKCS#11 modules p11-kit provides a way to load and enumerate PKCS#11 modules, as well
as a standard configuration setup for installing PKCS#11 modules in
such a way that they're discoverable. e:;Xh01-ch2c xSUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause https://www.suse.com/ System/Libraries https://p11-glue.freedesktop.org/p11-kit.html linux x86_64 /sbin/ldconfig x e:;Xe:;Xe:;X fb44a92775ccdafc43b3cdf490bbb700202fb2f071bcca3f9ef7bceda34e1dc4 libp11-kit.so.0.3.0 libp11-kit.so.0.3.0 root root root root root root p11-kit-0.23.22-150500.8.3.1.src.rpm libp11-kit.so.0 libp11-kit.so.0(LIBP11_KIT_1.0) libp11-kit0-32bit libp11-kit0-32bit(x86-32) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh ld-linux.so.2 ld-linux.so.2(GLIBC_2.3) libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1.2) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.16) libc.so.6(GLIBC_2.2) libc.so.6(GLIBC_2.26) libc.so.6(GLIBC_2.28) libc.so.6(GLIBC_2.3) libc.so.6(GLIBC_2.3.2) libc.so.6(GLIBC_2.3.4) libc.so.6(GLIBC_2.4) libc.so.6(GLIBC_2.6) libc.so.6(GLIBC_2.8) libdl.so.2 libdl.so.2(GLIBC_2.0) libdl.so.2(GLIBC_2.1) libffi.so.7 libffi.so.7(LIBFFI_BASE_7.0) libffi.so.7(LIBFFI_CLOSURE_7.0) libpthread.so.0 libpthread.so.0(GLIBC_2.0) libpthread.so.0(GLIBC_2.3.2) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 e7ca^ @]Γ@ZX43@V@T9T;pmonreal@suse.com lnussel@suse.com scabrero@suse.de lnussel@suse.de lnussel@suse.de kukuk@suse.de sbrabec@suse.com mpluskal@suse.com p.drouand@gmail.com lnussel@suse.de - Ensure that programs using can be compiled
with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
* Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch - Backport IBM specific mechanism and attributes (Jira#PED-584)
0001-Add-IBM-specific-mechanism-and-attributes.patch
0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
0009-rpc-Handle-special-cases-for-buffer-and-length.patch
0010-Add-support-for-CKM_AES_CTR.patch
0011-Add-support-for-CKM_AES_GCM.patch
0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch - Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
* Fix memory-safety issues that affect the RPC protocol
(CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
and fixed by David Cook
* anchor: Prefer persistent format when storing anchor [PR#329]
* common: Fix infloop in p11_path_build [PR#326, PR#327]
* proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
* common: Check for a NULL locale before freeing it [PR#321]
* Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
* proxy: Do not assign duplicate slot IDs [PR#282]
* common: Get program name based on executable path if possible [PR#307]
* anchor: Exit with non-zero code, if any error occurs [PR#304]
* Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
* Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
* common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
* Add simple bash completion for provided commands [PR#258]
* Unbreak list matching in enable-in and disable-in [PR#262]
* Fix RPC when length-s are 0 [PR#259]
* rpc: Add vsock transport support [PR#270]
* trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
* Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
* rpc: Allow empty CK_DATE value [PR#253]
* build: Meson fixes [PR#245]
* build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
* common: Fix uClibc-ng compilation [PR#237]
* trust: do not allow daylight to invalidate date validation [PR#236]
* build: Port to meson build system [PR#231, PR#234]
* rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
* doc: Add 'server' command in help [PR#229]
* Build and test fixes [PR#230]
- Changes for version 0.23.16:
* proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
* conf: Ignore user configuration if the program is running as root [PR#226]
* proxy: Refresh slot list on every C_GetSlotList call [PR#224]
* modules: Fix index used in call to p11_dict_remove() [PR#219]
* Fix Win32 p11_dl_error crash [PR#218]
* modules: check gl.modules before iterates on it when freeing [PR#217]
* trust: Ignore unreadable content in anchors [PR#215]
* extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
* trust: Improve error handling if backed trust file is corrupted [PR#206]
* url: Prefer upper-case letters in hex characters when encoding [PR#193]
* trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
* virtual: Prefer fixed closures to libffi closures [PR#196]
* Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
* Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
* proxy: Avoid invalid memory access when unloading proxy module [PR#180]
* Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
* build: Restore libpthread dependency [PR#183]
* Build fixes [PR#188]
- Changes for version 0.23.13:
* server: Enable socket activation through systemd [PR#173]
* rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
[PR#174]
* proxy: Fail early if there is no slot mapping [PR#175]
* Remove hard dependency on libpthread [PR#177]
* Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
* Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
* Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
* Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
* trust: Add extractor for edk2/cacerts.bin [PR#139]
* modules: Add option to control module visibility from proxy [PR#140]
* trust: Prevent trust module being loaded by proxy module [PR#142]
* library: Use dedicated locale object for printing error [PR#148]
* Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
* Improve const correctness for P11KitUri [PR#152]
* PKCS#11 URI scheme comparison is now case insensitive [PR#156]
* Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
* filter: Respect "write-protected" vendor-specific attribute in
PKCS#11 URI [PR#129]
* server: Improve shell integration and documentation [PR#107, PR#108]
* proxy: Reuse existing slot ID mapping in after fork() [PR#120]
* trust: Forcibly mark "Default Trust" read-only [PR#123]
* New function p11_kit_override_system_files() which can be used for
testing [PR#110]
* trust: Filter out duplicate extensions [PR#69]
* Update translations [PR#128]
* Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
* Fix p11-kit server regressions [PR#103, PR#104]
* trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
* Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
* Improve vendor query attributes handling in PKCS#11 URI [PR#92]
* Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
* New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
configurations [PR#87]
* Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
* Fix memory issues with "p11-kit server" [PR#78]
* Build fixes [PR#77 ...]
- Changes for version 0.23.6
* Port "p11-kit server" to Windows and portability fixes of the RPC
protocol [PR#67, PR#72, PR#74]
* Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
* Build fixes [PR#63 ...]
- Changes for version 0.23.5
* Fix license notice of common/unix-peer.c [PR#58]
* Remove systemd unit files for now [PR#60]
* Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
* Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
PR#37, PR#52]
* The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
attribute, used by Firefox [#99453, PR#46]
* Add 'trust dump' command to dump all PKCS#11 objects in the
persistence format [PR#44]
* New experimental 'p11-kit server' command that allows PKCS#11
forwarding through a Unix domain socket. A client-side module
p11-kit-client.so is also provided [PR#15]
* Add systemd unit files for exporting the proxy module through a
Unix domain socket [PR#35]
* New P11KitIter API to iterate over slots, tokens, and modules in
addition to objects [PR#28]
* libffi dependency is now optional [PR#9]
* Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
* Install private executables in libexecdir [fdo#98817]
* Fix link error of proxy module on macOS [fdo#98022]
* Use new PKCS#11 URI specification for URIs [fdo#97245]
* Support x-init-reserved argument of C_Initialize() in remote modules
[fdo#80519]
* Incorporate changes from PKCS#11 2.40 specification
* Bump libtool library version
* Documentation fixes
* Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
* p11-kit-biarch.patch
* 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
* 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch - Also build documentation (boo#1013125) - support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
detects built in certificates (boo#1154871,
0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch) - Use %license instead of %doc [bsc#1082318] - 32-bit compatibility fixes:
* Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
* Add p11-kit-nss-trust-32bit NSS module
* Fix potential bi-arch issue with private binaries
(fdo#98817, p11-kit-biarch.patch) - Update to 0.23.2
* Fix forking issues with libffi
* Fix various crashes in corner cases
* Updated translations
* Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner - Update to version 0.23.1 (stable)
* Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
* Add pem-directory-hash extract format
* Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section - remove patches:
* trust-Print-label-of-certificate-when-complaining-.patch
* trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
* New public pkcs11x.h header containing extensions [fdo#83495]
* Export necessary defines to lookup attached extensions [fdo#83495]
* Build fixes
- new version 0.20.6 (stable)
* Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
* Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
* Don't use invalid keys for looking up stapled extensions [fdo#82328]
* Better error messages when invalid certificate extensions
* Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
* Fix some leaks, and memory issues
* Silence some clang scanner warnings
- new version 0.20.4 (stable)
* Don't complain about C_Finalize after a fork
* Fix typo /bin/sh 0.23.22-150500.8.3.1 0.23.22-150500.8.3.1 libp11-kit.so.0 libp11-kit.so.0.3.0 p11-kit-proxy.so /usr/lib/ -fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31290/SUSE_SLE-15-SP5_Update/d2461017bafa557a22e90431a0c28c1a-p11-kit.SUSE_SLE-15-SP5_Update drpm xz 5 x86_64-suse-linux ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d50a375d4452bf8f20eb99fcc244bc5a6fe4fed3, stripped P P R R R R R R R R R
R R R R R R R R R
R R R R R R R utf-8 92f2841c7fdc18dd3cf1046abe2c9ab53725ed1103cbf570dd3ea2a8a7a6b55d ? 7zXZ
! t/3!g] "k%fk&=$ZAxT5*{Ȍ~ N_^* kB r&>i5FadF 4n+`cKv n!~6\M՞3C
3k. )'LPSxRnRr f*:
x u#0ALiжI74i%/i;Eh2+ >D@ym{ 3H&Q59!7_N4G4:`+2VF֦W-gCUyfIwA0GzT6sR 8]x4// byF^-YtṂ ه ="EYlcYNQ A[[ӓ9>Ǹݥz aJz㤽 vKN z$m~ M#vmR\L^%\2UqezBhm$< +/"Z2w"NPRt]Aah}2N4LLJDz?]3.y J5g,}A,o%Ft+ RR:nXdO{Uq>s
ə$d5ۙ.x*D}BB0-PXCܨLw5I=e~>05 `e|8^
oC )|K$~Ե6AljF7Ov7p?S¦: 3d^|'ϭřd)SPMy>cZ$ -c`tݻaA#'>A^+TfzvS 5(,ίN ūπb} (,gJ r#uRH{a᪄6`@܁MJTpz?ōޭ`.RN}s5v d-Cn
G녺dk@ot
OU
zC_6Hlxr@ahՍV
C՞~V
INL &:Vu
Z-zkZvB-ZnMs&RXG
J8LJAyM^1 S6+AޙaĔ=\rՑ]QAq:Qs;r2 ǿF+괿=9*66%[P=pWCui ;p|{kI@]Nl-pJtc +RťX) > W]&e6MN+ƶ"!}G7 bR:2QL3jNA Yokr 6V#p Z?!s1 <Wl{|wb ~I=sfx]d~,]i e ,alPf˛zBm^; !Dsžz})]tƮ AzFܶTui͞\+i80@b54
Y %z?_t5 RIq:^?ça+1Cӫxq
iPL5cc奼Ae˟z
d}pj |cA1K6iJ *'mwN,.,&ՇL7 Ixu[xܞf
GB +gqWxC2I!һp`, Nh'SF *ld@bv/tzuKy!x
qŊ(uKO2A=FL4_q_P#r7>rHq?[ !4*Èig)u8 XW"kһmu͈j\|bjo)q*Cפ=k
z\x?W`2n8mk>vJ3= KM{2O F ]a_ihʄFeX)^֞Qr3YF K
H ."뷘{
Ilqo6`Rw[eV)p\:>Bn;1Qz| o :tV#FQh@ ).|tc^sU8I HS$LQ_sjJh7O:D8S-}t m ]7_+
6+XRh5R*z:R&0fBvDu1G\ xR
%r亡"ޗѓBcd4Qy|R
s3A-+zwpL
!ub,K6FtTxb%L%8;K H *mGgB-XɢО
7+%trZ7'KG0a.qj$~ ̠qqƪfV)5Jfn
k1oʛo1g٘+` DdGx M H җ4S6gҖϙv?)?b !&NAm4
!i(\ru|a5μ֨8- Aw Tr>oS$7l/2x*͍'i Yȏyt~}
qj e C]hAu74{/19IaU~2LB~EU{OY N fYbJWd|ZwQuET1+Ė9"x"sFLaqJz$%#`, :=+5T8 "F ɾ*a;=q,UT|RXFס4NOZ(ˎKa|VJ (v
e߅\"U'vβ7dК&U<,eV|P ި7ܡ
c^Zz^Xju=mz8pNCاomHK
ߠ;di}Eӧ@^b.fD}s 50@`G t\R-3e݀Ƚ4/z (ޏLCOG㾮U2?N^T Q 0]>|'lOBzӣ ]/2^ ֏hfUI 0<_IzA(2 9ZwJ]OyKVߺ_
4L!kflp[ o ?;A`g0ݬ; aQN{(b-cˮI] h|RMDk-m ڟWM.xocτhB5 dZ1 ,2 8M&rzV^sٍ+_*gY7 :(c.=9
aɘ`Wh$jOώKtYX wWâ^҂0.seO;]_ _= WJԦ`57V."f?\>7 Zd xf䏏Eӟ,ޘ[ݢN=~" Gv}}ojojf#&f^mk { K e0PW[gBpVi pXR.^LiSq>V %qwꮗ?(E`RLW,NY/TqbnT$C"܃ cRٸCAҘiqs+ڛu{lH
[2R l2o;|mtj]we
sQMǞ0Q8k5~?u
@98NvǦ HtCS ax/ dg#JtHH-8X =w s SAW!ÏX _5:dEdv.Ղ<݃e=|* yK%.
9iU 82(4Gmv Űs3ʪ_Bmߞ3}P"(
ouy.8N1#,OaB)6elo
wO'u)䙛H֖ `m
bMJh&8{{?":n[sUm 9AR JS$-o/ hOQ J|"cz-xUX#)3 ʟWHfkݛ"\
\2-ʿ$7#,ƔaW1BN|xkv*.LOw#<[L7¥πX A[OK箢qZI&jf. !
Ν?Yn = /M? z. 6^x@끿 VSljyyu֓N":JʍgMu 63] oKlwB#w2+B/宋TQܮNqr9Ȼu|8Dn-[uF2U:D=pMg+rK)jG:4*p7#xL(vt\JBQҹ<Ա
3[ܻ3am̡&`f!> .6
[@wWhE7HG[c ' vHV
PZJS! i D֪m[ʱ "ievg@ƿr1Mk" Oz X
XC7 ) Obπt1w (v ^Mjj*tqcXЉ=حOq1CI%.!M!XIdPOIM 2]݅އ~4;_! >Cs
G_'ޗ6qD]qkހށ$|j@1;) _#:|{VOP iY %ڼ"/>'xf~(X @Wy- h)⊸D@<\FD@}8\2zmeДR\T_s2$Ġ1piSJCsY$܄Lz
/ENwg xN $%_>3+m
6 \ O| l[_r=w0cMJJ~GKtkL:m8!O!-IAL&~:RvK ʠFDcE.X 0F0BrYa偰Kb8>חzkEo{9vԝS,ISM{c'.C ^c-~ wE-[`CYT8 Ũ,2ip *RfGKL*n$IlQ|XW.b )a[בzUԪ`E u1M FՐS
X5ڿl Sx?ϹW>=#Ú{IlIbMewp 318oU'-& y LsDtHc._m÷z% m 0 q%Ҩd ~nR0q::3' 07ѳg@e0n,HC|vqAH\eQ{Rڀ+puz
K~ܭ}*6$n_\{!:RaZ[ L0nO`j:o 9?Me -@$g$L oB0.ԖsdPZ#`W9x na%؆#AdBċStb5e&}ߠddN0-2i, (7ʌ(l"C^nL%'S 5Ixvz2B2iR4O^eϝBw 4hruCpՋ !Qo GSLd ǩВNE`$rxd71sE̩m< +O/ZHl+30r]}2Yn f
d%cP9{ \ja&} b.u!4Nx7³a|= |C \n v|r*<*C*
_Zdm |d
r%} ^^aQtAljѥ_J9:)vdž& VWukLOۤe59D]^m{fAW'S˒" |ɝP$KC \
E}7T7At"$(@ņ+o҇dH/'I MO۪ AZq2bF\ %Ξ" JO>9 plʲ:e> k/Z*q 2@0eoVpܰ\:w|mJrr}qG
{S.AmE$Ŝ*҇^ b+e7
7ŏL>ş!0>F6>x4LGS-a\/B%^Qj=m;KHI_+ Wi ݷN횰ѮS7 ]G=OhYF'sfwR rVhN I3)9d/S2J"'H/ @*4mjzva RoB ww2KdV l$]
c ePVc} RXID䝊5%Y!v/bVpחNڎ