Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• 4ce0ee4641 EP11: Move EP11 session code into separate source file Ingo Franzki 2023-05-16 10:49:23 +02:00
• f8ddcd5ba7 p11sak: Fix segfault in PEM_write_bio() on OpenSSL 1.1.1 Ingo Franzki 2023-05-23 15:07:02 +02:00
• 4c47f8b159 testcases: fix p11sak_test.sh to find dsa-param.pem file Ingo Franzki 2023-05-23 14:40:53 +02:00
• 85fd0a7560 travis: Disable -Wunused-but-set-variable error for x86 Ingo Franzki 2023-05-22 14:04:03 +02:00
• bd40bb884a pkcsstats: Fix handling of user name Ingo Franzki 2023-05-22 13:31:21 +02:00
• 43a4dc59a5 p11sak: Fix user confirmation prompt behavior when stdin is closed Ingo Franzki 2023-05-22 11:40:01 +02:00
• eeed5b5ef4 common: Correctly set default attributes for certificates Ingo Franzki 2023-05-16 15:38:43 +02:00
• 18934529e7 Bumping up to version-3.21.0 v3.21.0 Ingo Franzki 2023-05-05 10:03:51 +02:00
• e551f1dfe0 rpm: Correct dependency: libitm no longer needed, but libcap Ingo Franzki 2023-05-05 10:14:26 +02:00
• bbd6b1b44f TESTCASES: add and fix test status output Joerg Schmidbauer 2023-05-08 17:23:41 +02:00
• 4a3c54fc2d TESTCASES: use RSA-2048 key in various tests Joerg Schmidbauer 2023-05-08 13:54:47 +02:00
• 9977617764 TESTCASES: fixed typos, no logic change Joerg Schmidbauer 2023-05-08 13:51:56 +02:00
• 4ddfdcb2f5 EP11: Handle RSA clear key import for key with p < q Ingo Franzki 2023-05-08 10:32:45 +02:00
• 1bb730891c testcases: Add RSA testcase for an RSA key p < q Ingo Franzki 2023-05-05 09:18:56 +02:00
• ca685c8623 Fix -Wformat-overflow error Ingo Franzki 2023-05-03 16:51:30 +02:00
• 8d3953e93b common: Fix double free coverty finding Ingo Franzki 2023-05-03 16:45:32 +02:00
• 6be2ce0eca EP11: Make statistics counting constant time Ingo Franzki 2023-04-11 15:03:25 +02:00
• 600b09022a common/EP11/CCA/ICSF: make RSA decrypt code path constant time Ingo Franzki 2023-04-11 12:02:17 +02:00
• 365a200827 common: Make decode_eme_oaep() constant time Ingo Franzki 2023-03-28 14:25:17 +02:00
• bf73a0d73e common: Make rsa_parse_block() constant time for format 2 Ingo Franzki 2023-03-28 13:19:17 +02:00
• 1aba660bb3 ica: Support RSA blinding for private key performed via libica Ingo Franzki 2023-03-27 15:53:59 +02:00
• 52c208ea0e ica: Cache libica key object as data attached to key object Ingo Franzki 2023-03-27 13:35:02 +02:00
• 600fd151bf soft/ica: Cache OpenSSL PKEY object as data attached to key object Ingo Franzki 2023-03-27 11:34:23 +02:00
• f7463ce9d0 common: Allow to attach external data to an object Ingo Franzki 2023-03-27 10:18:56 +02:00
• 9e6d1e7cd3 Remove support for --disable-locks (transactional memory) Ingo Franzki 2023-04-17 11:13:37 +02:00
• 838f0804ce TESTCASES: Add tests for CKM_SHAnnn_KEY_DERIVATION mechanisms Ingo Franzki 2023-04-19 14:40:42 +02:00
• 69fb4966ef EP11: Support CKM_SHAnnn_KEY_DERIVATION mechanisms Ingo Franzki 2023-04-19 08:16:44 +02:00
• cc75663bd9 common: Move pkcs_get_keytype() to utility.c Ingo Franzki 2023-04-19 11:44:46 +02:00
• 30a437198f configure: Don't add libcap to LIBS globally Ingo Franzki 2023-04-24 09:07:39 +02:00
• acd9a81561 travis: Install libcap-dev and other adjustments Ingo Franzki 2023-04-17 08:45:43 +02:00
• ff52d11160 Make pkcsslotd user and pkcs11 group configurable Ingo Franzki 2022-11-15 09:27:35 +01:00
• 64f33c5729 pkcsslotd.service: harden pkcsslotd service unit using sandboxing options Ingo Franzki 2022-10-26 16:27:17 +02:00
• bf7607e531 pkcsslotd: drop all capabilities before becoming a daemon Ingo Franzki 2022-11-02 10:16:58 +01:00
• 9b977a5954 Run pkcsslotd under the pkcsslotd user and not under root Ingo Franzki 2022-10-24 11:15:50 +02:00
• 46b7e485ca HSM MK change: Use define for 'HSM_MK_CHANGE' directory Ingo Franzki 2023-04-17 11:37:26 +02:00
• fd8c8297bc configure: build systemd service unit file by default Ingo Franzki 2022-10-24 10:33:21 +02:00
• 86bae2f23a TESTCASES: add test case for CKM_PBE_SHA1_DES3_EDE_CBC Ingo Franzki 2023-04-18 13:33:29 +02:00
• a098d40f3e common: Support getting key type for PBE mechanisms Ingo Franzki 2023-04-18 13:32:32 +02:00
• 466cdc4463 Common: Check for lock init errors and proper error handling Ingo Franzki 2023-04-14 09:50:34 +02:00
• 061af98e42 CCA: fix in token_specific_init Joerg Schmidbauer 2023-03-24 16:45:03 +01:00
• 6cfda80b71 CCA pkey option: update ciconfig.sh Joerg Schmidbauer 2023-04-11 15:36:33 +02:00
• 7693070c73 CCA pkey option: enforce pkey usage in testcases Joerg Schmidbauer 2023-04-05 14:16:00 +02:00
• 1d87606113 CCA pkey option: handle concurrent MK change Joerg Schmidbauer 2023-03-31 11:41:40 +02:00
• 7f5db03be5 CCA pkey option: check imported token for consistency Joerg Schmidbauer 2023-03-30 16:36:30 +02:00
• d16db15b9c CCA pkey option: add check for minimum card version Joerg Schmidbauer 2023-03-29 12:46:11 +02:00
• 190f458b84 CCA pkey option: support for older kernels Joerg Schmidbauer 2023-03-22 13:44:54 +01:00
• efc689f093 CCA pkey option: enable EC tests for protected key support Joerg Schmidbauer 2023-03-17 17:18:55 +01:00
• 8d9cd51ac6 CCA pkey option: enable AES tests for protected key support Joerg Schmidbauer 2023-03-17 17:17:55 +01:00
• 7cc3034f4e CCA pkey option: handle non-s390x build envs Joerg Schmidbauer 2023-03-21 15:51:01 +01:00
• e40e8778bd CCA pkey option: only enable CCA token if pkey kernel header is available Joerg Schmidbauer 2023-03-17 17:20:58 +01:00
• 6bba0849d8 CCA pkey option: new compile switch NO_PKEY Joerg Schmidbauer 2023-03-21 13:59:27 +01:00
• da10e79e86 CCA pkey option: enable protected key support Joerg Schmidbauer 2023-03-17 17:24:52 +01:00
• 2b0a4a8e06 CCA pkey option: token_specific_set_attrs_for_new_object Joerg Schmidbauer 2023-03-17 17:24:12 +01:00
• 3b3289d87c CCA pkey option: determine firmware wkvp Joerg Schmidbauer 2023-03-17 17:23:17 +01:00
• 3b10f04bf2 CCA pkey option: add protected key related attrs Joerg Schmidbauer 2023-03-17 17:22:34 +01:00
• e8850913d0 CCA pkey option: new config option PKEY_MODE Joerg Schmidbauer 2023-03-17 17:21:46 +01:00
• 5d721023f2 CCA pkey option: token preparation Joerg Schmidbauer 2023-03-17 17:20:10 +01:00
• add762219f CCA: Fix cca_iterate_domains() to ignore non-existing cards Ingo Franzki 2023-04-12 13:45:47 +02:00
• 0cf85c423d CCA: Silence -Wmaybe-uninitialized error Ingo Franzki 2023-04-11 15:19:12 +02:00
• 44c146640f ICA: fix typo Joerg Schmidbauer 2023-04-12 11:30:28 +02:00
• 8d3116af7e testcases: Update testcases README file Ingo Franzki 2023-04-04 15:12:11 +02:00
• 454529c0ee EP11: Re-evaluate if PKEY is supported on APQN online/offline event Ingo Franzki 2023-03-31 11:00:31 +02:00
• f6bd34c0f1 EP11: Fix statistics counting for PKEY-based operations Ingo Franzki 2023-03-20 15:09:12 +01:00
• 4cc159edcf EP11: Fix ep11tok_pkey_update to not fail if no reenc blob is available Ingo Franzki 2023-03-20 09:22:07 +01:00
• 5d3a5d87d6 p11sak: Update testcase Ingo Franzki 2023-01-17 11:55:07 +01:00
• d3ed449328 p11sak: Man page updates Ingo Franzki 2023-01-16 14:22:16 +01:00
• 6b13da0449 p11sak: Implement export-key command Ingo Franzki 2023-02-15 16:41:16 +01:00
• 99f1808d38 p11sak: Implement import-key command Ingo Franzki 2023-02-14 13:53:17 +01:00
• 3c3a896b80 p11sak: Implement copy-key command Ingo Franzki 2023-02-20 08:57:16 +01:00
• 2bcac59b6b p11sak: Implement set-key-attr command Ingo Franzki 2022-12-14 15:16:13 +01:00
• fb6e0fe5a5 p11sak: Implement list-key function Ingo Franzki 2022-12-13 13:54:55 +01:00
• b4160f5b2a p11sak: Implement remove-key command Ingo Franzki 2022-12-13 10:15:00 +01:00
• e52f78503e p11sak: Implement generate-key command Ingo Franzki 2022-12-12 12:48:16 +01:00
• 0e1e7dee7f p11sak: Parse configuration file Ingo Franzki 2022-12-12 10:54:22 +01:00
• 0307eacd11 p11sak: Load PKCS#11 lib and open session if command requires it Ingo Franzki 2022-12-12 10:13:28 +01:00
• f607211dd9 p11sak: Generic options and argument parsing Ingo Franzki 2022-12-06 15:03:33 +01:00
• 0ac7b3a0ce hsm_mk_change: Try to open existing lock file before creating it Ingo Franzki 2023-03-15 10:14:42 +01:00
• f54f84f40f COMMON: Create HSM_MK_CHANGE directory in RPM and at pkcsslotd startup Ingo Franzki 2023-03-14 17:23:41 +01:00
• b1a9e1e65b CCA: Fix typos Ingo Franzki 2023-03-14 13:49:13 +01:00
• d3784744f5 CCA: Lock against CCA domain selection Ingo Franzki 2023-02-27 08:44:40 +01:00
• c57fc2f0c8 CCA: HSM MK change: Retry logic for special case Ingo Franzki 2022-09-14 16:30:38 +02:00
• 7052aa8f64 CCA: HSM MK change: re-encipher newly created or imported keys Ingo Franzki 2022-09-07 09:04:23 +02:00
• 21a0e0e8fc common/soft/ICA/CCA/TPM: Pass template to AES and DES key gen function Ingo Franzki 2022-09-06 10:15:56 +02:00
• ee969fb92a CCA: HSM MK change: refresh token keys of active sessions on finalize Ingo Franzki 2022-09-05 15:15:03 +02:00
• 449a016006 CCA: HSM MK change: finalize/cancel key objects Ingo Franzki 2022-09-05 13:40:16 +02:00
• 262fc17ec5 CCA: HSM MK change: re-encipher key objects Ingo Franzki 2022-09-05 11:57:40 +02:00
• 39124dde8b CCA: HSM MK change: handle MK change event: finalize/cancel query Ingo Franzki 2022-09-01 16:29:48 +02:00
• 02fb329107 CCA: HSM MK change: Allow new MKs for new keys if operation active Ingo Franzki 2022-09-01 15:44:44 +02:00
• 769faf4541 CCA: HSM MK change: Allow and check new MKs if operation is active Ingo Franzki 2022-09-01 13:32:47 +02:00
• 82857990d6 CCA: HSM MK change: Check for pending operations at token init Ingo Franzki 2022-09-01 10:15:39 +02:00
• c115dcaa56 CCA: HSM MK change: handle MK change event: Initial query Ingo Franzki 2022-08-31 10:48:12 +02:00
• 44cee63578 CCA: HSM MK change: Lock API functions against HSM MK change state changes Ingo Franzki 2022-08-31 10:27:50 +02:00
• f6adf9a0de CCA: Extract helper functions to get MK state and MKVPs Ingo Franzki 2022-08-31 13:48:03 +02:00
• 981adbff56 CCA: Extract helper function to iterate over adapters/domains Ingo Franzki 2022-08-30 13:50:42 +02:00
• 57e30f6b24 EP11: HSM MK change: re-encipher newly created keys Ingo Franzki 2022-08-01 17:05:43 +02:00
• c2ad13696b EP11: HSM MK change: Re-encipher state blobs and handle state WK mismatch Ingo Franzki 2022-08-01 13:09:27 +02:00
• 78ca3e7803 EP11: HSM MK change: Retry logic for special case Ingo Franzki 2022-08-01 10:55:51 +02:00
• 6b3a28361c EP11: HSM MK change: Re-encipher keyblob after set attributes Ingo Franzki 2022-07-29 13:04:44 +02:00
• 75b113d0c5 EP11: HSM MK change: Retry key operation for WK mismatch Ingo Franzki 2022-07-28 15:18:16 +02:00
• 28b118f457 EP11: HSM MK change: handle C_SetOperationState when mk change is active Ingo Franzki 2022-06-14 16:17:16 +02:00