opencryptoki

crypt/opencryptoki

Fork 0

mirror of https://github.com/opencryptoki/opencryptoki.git synced 2026-10-25 17:39:16 +03:00

Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

30fdb2786f OPENCRYPTOKI.PC: Don't shadow libdir variable Ingo Franzki 2026-08-24 11:25:32 +02:00
9a8d1b7a36 PKCSSLOTD.SERVICE: Add rundir to ReadWritePaths Ingo Franzki 2026-08-24 11:24:49 +02:00
767376e898 Editorial updates and fixes in the documentation files Ingo Franzki 2026-08-24 11:12:54 +02:00
36f8e32c93 Editorial updates and fixes in the README.md and CONTRIBUTING.md files Ingo Franzki 2026-08-24 10:58:26 +02:00
f78b6ddb8c Editorial updates and fixes in the FAQ and INSTALL files Ingo Franzki 2026-08-24 10:58:01 +02:00
fe7c91f007 CONFIGURE: Fix default for --enable-p11kmip in help output Ingo Franzki 2026-08-24 10:57:21 +02:00
a2b89d9f85 Editorial updates and fixes in the p11sak man page Ingo Franzki 2026-08-24 10:27:14 +02:00
ab54a6c29e Editorial updates and fixes in the pkcstok_migrate man page Ingo Franzki 2026-08-24 10:19:34 +02:00
62f7c18d10 Editorial updates and fixes in the pkcstok_admin man page Ingo Franzki 2026-08-24 10:09:50 +02:00
e02ffd49e9 Editorial updates and fixes in the pkcsstats man page Ingo Franzki 2026-08-24 09:55:13 +02:00
67200ebf42 PKCSSTATS: Fix typos in messages Ingo Franzki 2026-08-24 09:54:48 +02:00
4c5f37ee6f Editorial updates and fixes in the pkcsicsf man page Ingo Franzki 2026-08-24 09:42:15 +02:00
0bdb7099fb PKCSICSF: Fix SASL login for the initial connection by the tool Ingo Franzki 2026-08-24 09:41:46 +02:00
1beeeb7b0c Editorial updates and fixes in the pkcshsm_mk_change man page Ingo Franzki 2026-08-24 09:29:03 +02:00
0f2ee12f0a Editorial updates and fixes in the pkcsep11_session man page Ingo Franzki 2026-08-24 09:22:28 +02:00
cdb49602e3 PKCSEP11_SESSION: Fix error message about PIN length Ingo Franzki 2026-08-24 09:21:28 +02:00
59ff51966c Editorial updates and fixes in the pkcsep11_migrate man page Ingo Franzki 2026-08-24 09:15:41 +02:00
7a847e186d PKCSEP11_MIGRATE: Allow hex and decimal for adapter and domain arguments Ingo Franzki 2026-08-24 09:15:10 +02:00
80ca460806 Editorial updates and fixes in the pkcscca man page Ingo Franzki 2026-08-24 09:01:08 +02:00
84342a9f97 PKCSCCA: Fix verbose option argument parsing Ingo Franzki 2026-08-24 09:00:32 +02:00
e610db80a9 Editorial updates and fixes in the p11kmip man page Ingo Franzki 2026-08-24 10:43:02 +02:00
200c54f21d P11KMIP: Fix config file parsing and checking Ingo Franzki 2026-08-21 15:03:09 +02:00
9afc131a49 Editorial updates and fixes in the p11kmip.conf man page Ingo Franzki 2026-08-21 15:01:35 +02:00
8db57cd33e P11SAK: Fix typo in error message Ingo Franzki 2026-08-21 14:46:20 +02:00
8e83dc87b4 Editorial updates and fixes in the p11sak_defined_attrs.conf man page Ingo Franzki 2026-08-21 14:46:00 +02:00
ee5058b216 Editorial updates and fixes in the strength.conf and policy.conf man pages Ingo Franzki 2026-08-21 14:39:50 +02:00
db3547c92b Editorial updates and fixes in the opencryptoki.conf man page Ingo Franzki 2026-08-21 14:18:48 +02:00
3c59b0e81e Editorial updates and fixes in the opencryptoki man page Ingo Franzki 2026-08-21 14:09:17 +02:00
c7f9ddb72e PKCSSLOTD: Editorial updates and fixes in the man page Ingo Franzki 2026-08-21 13:59:45 +02:00
126cd749c4 PKCSCONF: Editorial updates and fixes in the man page Ingo Franzki 2026-08-21 13:35:28 +02:00
8a252633d0 PKCSSLOTD: Reduce the number of admin connections to 32 Ingo Franzki 2026-08-24 15:52:05 +02:00
9632dc1196 EP11: Verify the master key state on a REENCIPHER and FINALIZE event Ingo Franzki 2026-08-24 15:21:35 +02:00
2fe43b67e1 CCA: Verify the master key state on a REENCIPHER and FINALIZE event Ingo Franzki 2026-08-24 15:19:39 +02:00
9915205e93 CCA: Enable SHA3 mechanisms conditionally for Linux on x64/Power/AIX Ingo Franzki 2026-05-22 08:27:40 +02:00
e253305186 EP11: Update the CP filter config file Ingo Franzki 2026-08-20 15:15:46 +02:00
9682c0e17c EP11: Clarify comment in ep11tok.conf about PKEY_MODE option Ingo Franzki 2026-08-20 15:08:58 +02:00
922ea4bf9e PKCSICSF: Make adding all ICSF tokens usable Ingo Franzki 2026-08-14 09:18:36 +02:00
b66ca61651 PKCSICSF: Also create the token lock directory Ingo Franzki 2026-08-14 08:34:15 +02:00
327b8fb955 ICSF: Correct C_FindObjectsInit handling to handle public and SO sessions Ingo Franzki 2026-08-13 15:19:54 +02:00
2878387eaf ICSF: Remove global slot_data variable Ingo Franzki 2026-08-13 10:42:36 +02:00
655139c885 ICSF/PKCSICSF: Fix SO PIN handling for token creation and initialization Ingo Franzki 2026-08-12 15:41:29 +02:00
d8dafd7470 ICSF: Enhance token initialization Ingo Franzki 2026-08-12 15:18:12 +02:00
356c144b9e TESTCASES: Detect if the fork child was killed by a signal Ingo Franzki 2026-08-14 11:26:58 +02:00
d0a34343a8 ICSF: Fix fork handling Ingo Franzki 2026-08-12 16:51:35 +02:00
6e3f77a8dc ICSF: Fix session state handling for multipart operations Ingo Franzki 2026-08-12 16:43:15 +02:00
5eef9e4bc0 SOFT: Only show trace msg about OQS provider if < OpenSSL 3.5.0 Ingo Franzki 2026-08-13 15:44:47 +02:00
3720edf4fd TESTCASES: Recognize the ICSF token in ock_tests.sh Ingo Franzki 2026-08-12 15:11:21 +02:00
144abab9d8 PKCSTOK_MIGRATE: Use file descriptor operations relative to the directory Ingo Franzki 2026-08-11 16:25:10 +02:00
134cf16c57 PKCSTOK_ADMIN: Use file descriptor operations relative to the directory Ingo Franzki 2026-08-11 16:24:57 +02:00
643a646201 COMMON: Use file descriptor operations relative to the directory Ingo Franzki 2026-08-11 14:26:40 +02:00
dba13f348f TESTCASES: Better error checking in p11kmip_test.sh Ingo Franzki 2026-08-11 13:36:13 +02:00
10f48c5cb0 COMMON: Allow CKA_EXTRACTABLE and CKA_SENSITIVE to be set during unwrap Ingo Franzki 2026-08-11 11:13:34 +02:00
b7a6619456 P11KMIP: Fix memory leak on error path Ingo Franzki 2026-08-10 17:14:23 +02:00
83b55b175a P11KMIP: Fix return code confusion Ingo Franzki 2026-08-10 17:11:44 +02:00
4ea74bacb9 P11KMIP: Fix error handling in p11kmip_check_certificate() Ingo Franzki 2026-08-10 16:59:03 +02:00
ad60ede409 P11KMIP: Don't use hard coded file names for temporary files Ingo Franzki 2026-08-10 16:52:41 +02:00
513647b3f4 P11KMIP: Check length value received from KMIP before using it Ingo Franzki 2026-08-10 16:43:09 +02:00
3b97757967 P11KMIP: Use strtoul() instead of atoi() for slot number parsing Ingo Franzki 2026-08-10 16:39:04 +02:00
91e698c220 P11KMIP: Fix p11kmip_retrieve_remote_public_key() with transparent public key Ingo Franzki 2026-08-10 16:31:43 +02:00
153300dd28 P11KMIP: Prevent unchecked memcpy for boolean attributes Ingo Franzki 2026-08-10 16:21:40 +02:00
df37804a2d P11KMIP: Check for NULL pointer after malloc Ingo Franzki 2026-08-10 16:18:25 +02:00
15bf1bbc3b P11SAK: Fix memory leak with importing or exporting ML-DSA/ML-KEM keys Ingo Franzki 2026-08-11 10:06:36 +02:00
5db10858aa P11SAK: Don't leak memory on error in p11tool_get_attribute() Ingo Franzki 2026-08-10 16:05:56 +02:00
8db20c8f42 P11SAK: Cleanse sensitive data on attribute values Ingo Franzki 2026-08-10 15:47:09 +02:00
51d6e19d3b P11SAK: Fix possible memory leak when C_WrapKey fails Ingo Franzki 2026-08-10 15:35:51 +02:00
38d5252fac P11SAK: Limit the size of a wrapped key read from disk Ingo Franzki 2026-08-10 15:25:46 +02:00
96fd7989e6 P11SAK: Fix an out-of-bounds access on an empty OpenSSL error message Ingo Franzki 2026-08-10 15:21:52 +02:00
11ceab5334 P11SAK: Fix a TOCTOU issue when reading symmetric keys for importing Ingo Franzki 2026-08-10 15:19:39 +02:00
1cc1d5e2bb P11SAK: Fix attribute length in p11tool_get_class_and_type_values() Ingo Franzki 2026-08-10 15:13:42 +02:00
46be5d94b3 PKCSTOK_MIGRATE: Fix TOCTOU issue when removing a folder Ingo Franzki 2026-08-10 14:50:05 +02:00
27749f3cb4 PKCSTOK_MIGRATE: Fix possible buffer overrun in remove_shared_memory Ingo Franzki 2026-08-10 14:28:17 +02:00
44f2cc830b PKCSTOK_MIGRATE: Avoid out-of-bounds write on empty files Ingo Franzki 2026-08-10 14:24:36 +02:00
d88d943944 PKCSTOK_MIGRATE: Prevent integer overflow when creating token objects Ingo Franzki 2026-08-10 14:21:58 +02:00
fbcc04d0b6 PKCSTOK_MIGRATE: Cleanse sensitive data on stack Ingo Franzki 2026-08-10 14:18:40 +02:00
7174f72dc6 PKCSTOK_ADMIN: Validate token name for allowed characters Ingo Franzki 2026-08-10 13:33:17 +02:00
3d77d38be8 PKCSTOK_ADMIN: Fix error handling of getgrnam_r() Ingo Franzki 2026-08-10 13:27:19 +02:00
a50e0e473b PKCSTOK_ADMIN: getline() returns a ssize_t, not an int Ingo Franzki 2026-08-10 13:19:55 +02:00
d2a9db9add PKCSTOK_ADMIN: Skip, but warn about unexpected dot-files being skipped Ingo Franzki 2026-08-10 13:18:01 +02:00
49fb3f926b PKCSTOK_ADMIN: Better error checking on PID file parsing Ingo Franzki 2026-08-10 13:10:57 +02:00
ae479b9328 PKCSEP11_SESSION: Avoid integer overflow for extended capabilities query Ingo Franzki 2026-08-10 11:38:57 +02:00
ebca0b7752 PKCSEP11_SESSION: Update program argument parsing Ingo Franzki 2026-08-10 11:32:28 +02:00
53d6375a0a PKCSEP11_SESSION: Validate CK_DATE Attribute contents before using it Ingo Franzki 2026-08-10 11:25:44 +02:00
37101696c5 PKCSEP11_SESSION: Fix typo in error message Ingo Franzki 2026-08-10 11:21:36 +02:00
3012205a5c PKCSEP11_SESSION: Validate the contents of CKA_APPLICATION before using it Ingo Franzki 2026-08-10 11:14:01 +02:00
8ae19d7ce0 PKCSEP11_SESSION: Fix unbounded sprintf in is_process_running Ingo Franzki 2026-08-10 11:11:12 +02:00
d4bfbb3520 PKCSEP11_SESSION: Fix EP11 host library version decoding Ingo Franzki 2026-08-10 11:08:25 +02:00
ac890a353a PKCSEP11_SESSION: Cleanse sensitive data on stack Ingo Franzki 2026-08-10 11:07:01 +02:00
5b387b66a0 PKCSEP11_SESSION: Fix off-by-one heap/stack overread Ingo Franzki 2026-08-10 11:02:56 +02:00
1563464d72 PKCSEP11_MIGRATE: Logout and close Sessions on error path Ingo Franzki 2026-08-10 10:53:47 +02:00
a6eef66407 PKCSEP11_MIGRATE: Fix check for _m_rm_module() before calling it Ingo Franzki 2026-08-10 10:44:38 +02:00
64c325d391 PKCSEP11_MIGRATE: Fix EP11 host library version decoding Ingo Franzki 2026-08-10 10:32:45 +02:00
954eda45ee PKCSEP11_MIGRATE: Cleanse sensitive data left on stack Ingo Franzki 2026-08-10 10:30:07 +02:00
07745d04ad PKCSEP11_MIGRATE: Fix NULL pointer dereference after failing malloc Ingo Franzki 2026-08-10 10:27:57 +02:00
f306646788 PKCSEP11_MIGRATE: Update program argument parsing Ingo Franzki 2026-08-10 10:25:40 +02:00
f2ca5c7394 COMMON/PKCSCCA: Check fwrite() failures when saving old token objects Ingo Franzki 2026-08-10 10:10:12 +02:00
b6daf4cdea PKCSCCA: Use strtoul() instead of atoi() for parsing the slot id Ingo Franzki 2026-08-10 10:03:31 +02:00
4aff40dbe6 PKCSCCA: Check errors on dlsym and show user friendly error message Ingo Franzki 2026-08-10 09:56:30 +02:00
dcd39b1265 PKCSCCA: Avoid out-of-bounds write on empty files Ingo Franzki 2026-08-10 09:53:10 +02:00
fcbda52ded PKCSCCA: Avoid NULL pointer dereference on key migration Ingo Franzki 2026-08-10 09:50:35 +02:00
f528cf57ac PKCSCCA: Fix memory leak on key migration Ingo Franzki 2026-08-10 09:42:46 +02:00

1 2 3 4 5 ...