[ol8_baseos_latest] opencryptoki-icsftok-3.16.0-5.el8.x86_64

Name:	opencryptoki-icsftok
Version:	3.16.0
Release:	5.el8
Architecture:	x86_64
Group:	System Environment/Libraries
Size:	828003
License:	CPL
RPM:	opencryptoki-icsftok-3.16.0-5.el8.x86_64.rpm
Source RPM:	opencryptoki-3.16.0-5.el8.src.rpm
Build Date:	Sun Oct 10 2021
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	https://github.com/opencryptoki/opencryptoki
Summary:	ICSF token support for opencryptoki
Description:	Opencryptoki implements the PKCS#11 specification v2.11 for a set of cryptographic hardware, such as IBM 4764 and 4765 crypto cards, and the Trusted Platform Module (TPM) chip. Opencryptoki also brings a software token implementation that can be used without any cryptographic hardware. This package brings the necessary libraries and files to support ICSF token in the opencryptoki stack.

Changelog (Show File list) (Show related packages)

Thu Aug 19 2021 Than Ngo <than@redhat.com> - 3.16.0-5

- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes

Fri Jul 16 2021 Than Ngo <than@redhat.com> - 3.16.0-4

- Resolves: #1964304, Fix detection if pkcsslotd is still running

Tue Jun 15 2021 Than Ngo <than@redhat.com> - 3.16.0-3
```
- Related: #1919223, add conditional requirement
```

Fri Jun 11 2021 Than Ngo <than@redhat.com> - 3.16.0-2

- Related: #1919223, add requirement on selinux-policy >= 3.14.3-70 for using ipsec

Tue Jun 01 2021 Than Ngo <than@redhat.com> - 3.16.0-1

- Resolves: #1919223, rebase to 3.16.0
- Resolves: #1922195, Event Notification Support
- Resolves: #1959936, Soft token does not check if an EC key is valid
- Resolves: #1851104, import and export of secure key objects
- Resolves: #1851106, openCryptoki ep11 token: protected key support
- Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys

Fri Feb 12 2021 Than Ngo <than@redhat.com> - 3.15.1-5

- Resolves: #1928120, Fix problem with C_Get/SetOperationState and digest contexts

Fri Feb 12 2021 Than Ngo <than@redhat.com> - 3.15.1-4

- Resolves: #1927745, pkcscca migration fails with usr/sb2 is not a valid slot ID

Thu Nov 26 2020 Than Ngo <than@redhat.com> - 3.15.1-3

- Resolves: #1902022
   Fix compiling with c++
   Added error message handling for p11sak remove-key command

Thu Nov 26 2020 Than Ngo <than@redhat.com> - 3.15.1-2

- Related: #1847433, Added error message handling for p11sak remove-key command

Mon Nov 02 2020 Than Ngo <than@redhat.com> - 3.15.1-1

- Related: #1847433
  upstream fixes:
    - Free generated key in all error cases
    - CCA: Zeroize key buffer to avoid CCA 8/32 error
    - Do not delete the map-btree entry if destroying an object is not allowed
    - Remove now unused header timeb.h
    - TESTCASES: Use FIPS conforming keys for 3DES CBC-MAC test vectors
    - Fix buffer overrun in C_CopyObject
    - TPM: Fix double free in openssl_gen_key