summaryrefslogtreecommitdiff
path: root/security/softhsm/Makefile
AgeCommit message (Collapse)AuthorFilesLines
2021-12-08revbump for icu and libffiadam1-2/+2
2021-04-21revbump for textproc/icuadam1-2/+2
2020-11-05*: Recursive revbump from textproc/icu-68.1ryoon1-2/+2
2020-06-02Revbump for icuadam1-2/+2
2020-04-12Recursive revision bump after textproc/icu updateadam1-2/+2
2019-11-04security: align variable assignmentsrillig1-4/+4
pkglint -Wall -F --only aligned --only indent -r No manual corrections.
2019-05-23all: replace SUBST_SED with the simpler SUBST_VARSrillig1-2/+2
pkglint -Wall -r --only "substitution command" -F With manual review and indentation fixes since pkglint doesn't get that part correct in every case.
2019-04-03Recursive revbump from textproc/icuryoon1-2/+2
2018-12-09revbump after updating textproc/icuadam1-2/+2
2018-07-20Recursive revbump from textproc/icu-62.1ryoon1-2/+2
2018-07-04*: Move SUBST_STAGE from post-patch to pre-configurejperkin1-2/+2
Performing substitutions during post-patch breaks tools such as mkpatches, making it very difficult to regenerate correct patches after making changes, and often leading to substituted string replacements being committed.
2018-04-14revbump after icu updateadam1-2/+2
2017-11-30Revbump after textproc/icu updateadam1-2/+2
2017-09-18revbump for requiring ICU 59.xmaya1-2/+2
2017-09-03Follow some redirects.wiz1-3/+3
2017-04-22Revbump after icu updateadam1-2/+2
2016-12-04Recursive revbump from textproc/icu 58.1ryoon1-2/+2
2016-06-01Tell configure where to look for Botan.joerg1-2/+2
2016-05-19Bump revisions for Botan update.joerg1-2/+2
2016-04-11Recursive revbump from textproc/icu 57.1ryoon1-2/+2
2015-10-10Recursive revbump from textproc/icuryoon1-2/+2
2015-04-06Revbump after updating textproc/icuadam1-2/+2
2014-11-18Adapt a fix for SA59651, similar to CVE-2014-3209 from thehe1-2/+2
code branch fro SoftHSMv2: ensure created pkcs8 file is not group- or world-readable. Rename patch-aa to patch-Makefile.in, and add a comment. Bump PKGREVISION.
2014-10-07Revbump after updating libwebp and icuadam1-1/+2
2014-06-07SoftHSM 1.3.7 - 2014-05-28pettai1-3/+2
Bugfixes: * SOFTHSM-94: umask affecting the calling application. * SOFTHSM-96: Check if Botan has already been initialized.
2014-04-09recursive bump from icu shlib major bump.obache1-1/+2
2014-02-28SoftHSM 1.3.6pettai1-3/+2
* SOFTHSM-51: Call umask to restrict created files. Bugfixes: * Fix malloc(0) warning in clang.
2014-02-25Add upper limit to the botan dependency. Bump revisions as needed.joerg1-2/+2
2013-10-19Revbump after updating textproc/icuadam1-1/+2
2013-10-15SoftHSM 1.3.5pettai1-3/+2
Bugfixes: * SOFTHSM-45: Improved handling of a busy database * SUPPORT-76: Add -Wall -Werror flags and fix the warnings. Fix more warnings on EPEL.
2013-05-09Massive revbump after updating graphics/ilmbase, graphics/openexr, textproc/icu.adam1-2/+2
2013-01-26Revbump after graphics/jpeg and textproc/icuadam1-1/+2
2012-11-26SoftHSM 1.3.4 - 2012-11-24pettai1-2/+2
* SOFTHSM-28: Support RSASSA-PSS signature scheme. * SOFTHSM-29: The default location of the token database is now $localstatedir/lib/softhsm/.
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-3/+1
2012-05-23SoftHSM 1.3.3pettai1-3/+2
* Increased performance by adding more indexes to the database. * Describe the usage of SO and user PIN in the README. Bugfixes: * Detect if a C++ compiler is missing.
2012-04-27Recursive bump from icu shlib major bumped to 49.obache1-1/+2
2012-03-18SoftHSM 1.3.2pettai1-2/+2
* Update the README with information on moving the database between different architectures. Bugfixes: * Fix the destruction order of the Singleton objects.
2012-01-23SoftHSM 1.3.1pettai1-3/+2
* The library is now installed in $libdir/softhsm/. Bugfixes: * Do not give a warning about the schema version if the token has not been initialized yet. * The tools now return the correct exit code.
2011-11-25Recursive bump for Botonjoerg1-1/+2
2011-09-17SoftHSM 1.3.0pettai1-3/+2
* Can now read CKA_ALWAYS_AUTHENTICATE but does not use it. * Encryption and decryption using CKM_RSA_PKCS. * Support X.509 certificates. (Patch from Thomas Calderon) * Updated backup instructions. * Only a Security Officer can set CKA_TRUSTED to true. * The softhsm tool can set the value of CKA_TRUSTED. * Support Botan 1.10.0. * Better signing performance with a single element cache for the PK_Signer object. * Document README.MinGW describes how to build on Windows. (Text and patches contributed by Jaroslav Imrich) Bugfixes: * API changes in Botan created a namespace collision. * API changes in Botan's state handling. * BigInt::to_u32bit was accidently dropped in Botan. Adding it as a compatibility function to SoftHSM. * Better exception handling. * CKF_USER_PIN_COUNT_LOW and CKF_SO_PIN_COUNT_LOW must be set if an incorrect PIN has been entered at least once. * Windows: Detect LoadLibrary. * Windows: Set CRYPTOKI_EXPORTS. * Windows: Load library correctly in softhsm. * Windows: Compatibility function for getpass. * Windows: Use _putenv and not setenv. * Windows: Generate the DLL file. * Windows: The softhsm tool will use the DLL file by default. * Windows: Log to EventLog. * Windows: Fix parsing of configuration file. * Windows: The check program now links with a shared libgcc in order to make the exceptions work. Known issue: * Firefox does improper setting of CKA_DERIVE attribute during PKCS#12 import. See https://bugzilla.mozilla.org/show_bug.cgi?id=515663
2011-06-10recursive bump from textproc/icu shlib major bump.obache1-1/+2
2011-05-04SoftHSM 1.2.1 - 2011-05-03pettai1-4/+2
* Backport mutex handling from v2 for increased multithreaded performance. * Remove signature verification used for debugging purposes. (was enabled with ./configure --enable-sigver) * Added an index to the attribute table in the database. * Optimization of the database handling.
2011-03-31Be consistent in the way we quote the '#' characteragc1-2/+2
2011-03-31The '#' character is kinda special to makefiles - re-work the comment fieldagc1-2/+2
so that we don't have any '#' chars in it. Avoids the following: % grep COMMENT Makefile COMMENT= Cryptographic store accessible through a PKCS#11 interface % pkg_info softhsm Information for softhsm-1.2.0: Comment: Cryptographic store accessible through a PKCS
2010-10-18SoftHSM 1.2.0 - 2010-09-30pettai1-4/+4
* Added mechanism CKM_RSA_X_509 (use Botan 1.9.7 to fix a bug when verifying these signatures) * The softhsm command now have the option --module <path> To use a PKCS#11 library other than SoftHSM. * The softhsm command now import all parts of the RSA key. CKA_EXPONENT_1, CKA_EXPONENT_2, and CKA_COEFFICIENT is not needed by SoftHSM but might be needed by other HSM:s. * Ticket #163: softhsm-keyconv now support BIND format v1.3 * Write message to stderr when the config file cannot be found * CKA_WRAP_WITH_TRUSTED was not handled correctly. But it has not been a problem since wrapping is not supported. * Set CKA_KEY_GEN_MECHANISM to CK_UNAVAILABLE_INFORMATION when importing objects. * C_GetInfo now returns CKR_CRYPTOKI_NOT_INITIALIZED if library is not initialized. * Force clean up if the app does not do C_Finalize (using auto_ptr) * Limit the scope of the session objects to the owner application * softhsm --optimize will clean up leftovers (session objects) from applications that haven't closed down properly. * Do not use CKF_HW, the mechanisms are not performed by a device. * The ulMinKeySize and ulMaxKeySize are not used for the digesting mechanisms, but we set them to zero for applications that forget this. * Used wrong buffer size for signatures. This was only a problem for keys where (key size % 8 == 1), e.g. 1025 bit keys. * C_Login now returns CKR_USER_ANOTHER_ALREADY_LOGGED_IN instead of CKR_USER_TOO_MANY_TYPES
2010-07-16Update HOMEPAGEpettai1-2/+2
2010-05-09SoftHSM 1.1.4 - 2010-04-06pettai1-2/+2
* Respect --disable-64bit * Respect $DESTDIR for config files * The binaries can now show the version number * softhsm-keyconv could not handle --ttl properly * Link softhsm static with libsofthsm * Build libsofthsm.so without version number * libsofthsm.so is now a loadable module
2010-03-13Fixed wip errorspettai1-2/+2
2010-03-13SoftHSM is an implementation of a cryptographic store accessible through apettai1-0/+45
PKCS#11 interface. You can use it to explore PKCS#11 without having a Hardware Security Module. It is being developed as a part of the OpenDNSSEC project. SoftHSM uses Botan for its cryptographic operations.
generated by cgit v1.2.3 (git 2.46.0) at 2026-01-09 11:34:09 +0000