Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
Name: opencryptoki | Distribution: Fedora Project |
Version: 3.25.0 | Vendor: Fedora Project |
Release: 2.fc43 | Build date: Tue Jun 10 16:31:04 2025 |
Group: Unspecified | Build host: buildvm-a64-07.iad2.fedoraproject.org |
Size: 1108400 | Source RPM: opencryptoki-3.25.0-2.fc43.src.rpm |
Packager: Fedora Project | |
Url: https://github.com/opencryptoki/opencryptoki | |
Summary: Implementation of the PKCS#11 (Cryptoki) specification v3.0 and partially v3.1 |
Opencryptoki implements the PKCS#11 specification v3.0 and partially v3.1 for a set of cryptographic hardware, such as IBM 4767, 4768, 4769 and 4770 crypto cards, and the Trusted Platform Module (TPM) chip. Opencryptoki also brings a software token implementation that can be used without any cryptographic hardware. This package contains the Slot Daemon (pkcsslotd) and general utilities.
CPL-1.0
* Tue Jun 10 2025 Than Ngo <than@redhat.com> - 3.25.0-2 - Enable testsuite * Tue Jun 10 2025 Than Ngo <than@redhat.com> - 3.25.0-1 - Update to 3.25.0 - Drop patches which are included in upstream - Adapt p11sak patch - Fix RPM build warnings - Add jq and openssl in Build Requirement, required for testcases * Tue Apr 29 2025 Than Ngo <than@redhat.com> - 3.24.0-9 - Fix, opencryptoki doesn't work in image mode * Wed Mar 12 2025 Than Ngo <than@redhat.com> - 3.24.0-8 - Fix rpminspect issue * Thu Feb 27 2025 Than Ngo <than@redhat.com> - 3.24.0-7 - Fix, opencryptoki tokens are deleted on reboot * Tue Feb 11 2025 Than Ngo <than@redhat.com> - 3.24.0-6 - Remove call to * Tue Feb 04 2025 Than Ngo <than@redhat.com> - 3.24.0-5 - Use tmpfiles to change file ownership for image mode * Tue Feb 04 2025 Than Ngo <than@redhat.com> - 3.24.0-4 - Fix opencryptoki for image mode * Fri Jan 17 2025 Fedora Release Engineering <releng@fedoraproject.org> - 3.24.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Fri Sep 13 2024 Than Ngo <than@redhat.com> - 3.24.0-2 - build with --enable-pkcscca_migrate - fix build error due to incompatible pointer types * Fri Sep 13 2024 Than Ngo <than@redhat.com> - 3.24.0-1 - Update to 3.24.0 * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * EP11: Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * CCA: Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later * CCA: Add support for IBM Dilithium (CKM_IBM_DILITHIUM). On Linux on IBM Z: Requires CCA v7.1 or later for Round2-65, and CCA v8.0 for the Round 3 variants. On other platforms: Requires CCA v7.2.43 or later for Round2-65, the Round 3 variants are currently not supported * CCA: Add support for RSA-OAEP with SHA224, SHA384, and SHA512 on en-/decrypt. Requires CCA v8.1 or later on Linux on IBM Z, not supported on other platforms * CCA: Add support for PKCS#11 v3.0 SHA3 mechanisms. Requires CCA v8.1 on Linux on IBM Z, not supported on other platforms * ICA: Support new libica AES-GCM api using the KMA instruction on z14 and later * ICA/Soft/ICSF: Add support for PKCS#11 v3.0 SHA3 mechanisms * ICA/Soft: Add support for SHA based key derivation mechanisms * ICA/Soft: Add support for CKD_*_SP800 KDFs for ECDH * EP11/CCA/ICA/Soft: Add support for CKA_ALWAYS_AUTHENTICATE * EP11/CCA: Support live guest relocation for protected key (PKEY) operations * Soft: Experimental support for IBM Dilithium via OpenSSL OQS provider * ICSF: Add support for SHA-2 mechanisms * ICSF: Performance improvements for attribute retrieval * p11sak: Add support for exporting a key or certificate as URI-PEM file * p11sak: Import/export of IBM Dilithium keys in 'oqsprovider' format PEM files * p11sak: Add option to show the master key verification patterns of secure keys * Bug fixes - Remove i686 support as upsrtream will get rid of 32-bit support, https://github.com/opencryptoki/opencryptoki/issues/174 - Remove lockdir.patch * Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 3.23.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Wed Feb 07 2024 Than Ngo <than@redhat.com> - 3.23.0-1 - 3.23.0 * EP11: Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Bug fixes * Tue Jan 30 2024 Dan HorĂ¡k <dan[at]danny.cz> - 3.22.0-4 - fix all errors and warnings (rhbz#2261419) * Thu Jan 25 2024 Fedora Release Engineering <releng@fedoraproject.org> - 3.22.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering <releng@fedoraproject.org> - 3.22.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Sep 21 2023 Than Ngo <than@redhat.com> - 3.22.0-1 - update to 3.22.0 * Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.21.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Mon Jul 17 2023 Than Ngo <than@redhat.com> - 3.21.0-5 - p11sak tool: slot option does not accept argument 0 for slot index 0 - p11sak fails as soon as there reside non-key objects
/etc/opencryptoki /etc/opencryptoki/opencryptoki.conf /etc/opencryptoki/p11kmip.conf /etc/opencryptoki/p11sak_defined_attrs.conf /etc/opencryptoki/strength.conf /run/lock/opencryptoki /run/lock/opencryptoki/* /run/opencryptoki /usr/bin/p11kmip /usr/bin/p11sak /usr/bin/pkcsconf /usr/bin/pkcshsm_mk_change /usr/bin/pkcsslotd /usr/bin/pkcsstats /usr/bin/pkcstok_admin /usr/bin/pkcstok_migrate /usr/lib/.build-id /usr/lib/.build-id/26 /usr/lib/.build-id/26/410809ebee844863648d6d6632f9bac9ec0722 /usr/lib/.build-id/37 /usr/lib/.build-id/37/8c325d4531536f3c62a98dd985d15820024f18 /usr/lib/.build-id/3d /usr/lib/.build-id/3d/c96a322a2d51345b391ce91f0b35d19183793f /usr/lib/.build-id/44 /usr/lib/.build-id/44/135ea4b92718a7e532f2b5a503e5c7a135eb09 /usr/lib/.build-id/4a /usr/lib/.build-id/4a/44730d1923e17b40915607352763e3540eaeb2 /usr/lib/.build-id/4b /usr/lib/.build-id/4b/9c6d9646c5e13f61d0650778a914e8fcc89cff /usr/lib/.build-id/70 /usr/lib/.build-id/70/6923d7764a81a1f3486dc5641bab511ad9f2ab /usr/lib/.build-id/cd /usr/lib/.build-id/cd/2947d4caf06036f03e2b39b23ada6137551bfa /usr/lib/systemd/system/pkcsslotd.service /usr/lib/tmpfiles.d/opencryptoki.conf /usr/lib64/opencryptoki/methods /usr/lib64/pkcs11/methods /usr/share/doc/opencryptoki /usr/share/doc/opencryptoki/ChangeLog /usr/share/doc/opencryptoki/FAQ /usr/share/doc/opencryptoki/README.md /usr/share/doc/opencryptoki/README.token_data /usr/share/doc/opencryptoki/opencryptoki-howto.md /usr/share/doc/opencryptoki/policy-example.conf /usr/share/doc/opencryptoki/strength-example.conf /usr/share/man/man1/p11kmip.1.gz /usr/share/man/man1/p11sak.1.gz /usr/share/man/man1/pkcsconf.1.gz /usr/share/man/man1/pkcshsm_mk_change.1.gz /usr/share/man/man1/pkcsstats.1.gz /usr/share/man/man1/pkcstok_admin.1.gz /usr/share/man/man1/pkcstok_migrate.1.gz /usr/share/man/man5/opencryptoki.conf.5.gz /usr/share/man/man5/p11kmip.conf.5.gz /usr/share/man/man5/p11sak_defined_attrs.conf.5.gz /usr/share/man/man5/policy.conf.5.gz /usr/share/man/man5/strength.conf.5.gz /usr/share/man/man7/opencryptoki.7.gz /usr/share/man/man8/pkcsslotd.8.gz /var/lib/opencryptoki /var/lib/opencryptoki/HSM_MK_CHANGE
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Jun 26 00:45:26 2025