Commit Graph

28 Commits (master)

Author SHA1 Message Date
Daniel Golle 49eb8e86b9 opensc: update to version 0.25.1
* New in 0.25.1; 2024-04-05
** General improvements
* Add missing file to dist tarball to build documentation (#3063)

** minidriver
* Fix RSA decryption with PKCS#1 v1.5 padding (#3077)
* Fix crash when app is not set (#3084)

* New in 0.25.0; 2024-03-06
** Security
* [CVE-2023-5992](https://github.com/OpenSC/OpenSC/wiki/CVE-2023-5992): Side-channel leaks while stripping encryption PKCS#1.5 padding in OpenSC (#2948)
* [CVE-2024-1454](https://github.com/OpenSC/OpenSC/wiki/CVE-2024-1454): Potential use-after-free in AuthentIC driver during card enrollment in pkcs15init (#2962)

** General improvements
* Update OpenSSL 1.1.1 to 3.0 in MacOS build (#2930)
* Remove support for old card drivers Akis, GPK, Incrypto34 and Westcos, disable Cyberflex driver (#2885)
* Fix 64b to 32b conversions (#2993)
* Improvements for the p11test (#2991)
* Fix reader initialization without SCardControl (#3007)
* Make RSA PKCS#1 v1.5 depadding constant-time (#2948)
* Add option for disabling PKCS#1 v1.5 depadding (type 01 and 02) on the card (#2975)
* Enable MSI signing via Signpath CI integration for Windows (#2799)
* Fixed various issues reported by OSS-Fuzz and Coverity in drivers, PKCS#11 and PKCS#15 layer

** minidriver
* Fix wrong hash selection (#2932)

** pkcs11-tool
* Simplify printing EC keys parameters (#2960)
* Add option to import GENERIC key (#2955)
* Add support for importing Ed25518/448 keys (#2985)
** drust-tool
* Add tool for D-Trust cards (#3026, #3051)
** IDPrime
* Support uncompressed certificates on IDPrime 940 (#2958)
* Enhance IDPrime logging (#3003)
* Add SafeNet 5110+ FIPS token support (#3048)
** D-Trust Signature Cards
* Add support for RSA D-Trust Signature Card 4.1 and 4.4 (#2943)
** EstEID
* Remove expired EstEID 3.* card support (#2950)
** ePass2003
* Allow SW implementation with more SHA2 hashes and ECDSA (#3012)
* Fix EC key generation (#3045)
** SmartCard-HSM
* Fix SELECT APDU command (#2978)
** MyEID
* Update for PKCS#15 profile (#2965)
** Rutoken
* Support for RSA 4096 key algorithm (#3011)
** OpenPGP

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2024-06-23 11:10:41 -07:00
Fabrice Fontaine 5afe5c9031 treewide: assign PKG_CPE_ID
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2024-02-04 16:16:10 -08:00
Daniel Golle b67923b334 opensc: update to version 0.24.0
Brings security fixes for CVE-2023-40660, CVE-2023-40661 and
CVE-2023-4535.

See release notes for further details:
https://github.com/OpenSC/OpenSC/releases/tag/0.24.0
and
https://github.com/OpenSC/OpenSC/releases/tag/0.23.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2023-12-20 13:05:30 +00:00
Paul Fertser 0c10c224be treewide: remove AUTORELEASE
Automatically compute and substitute current values for all
$(AUTORELEASE) instances as this feature is deprecated and shouldn't be
used.

The following temporary change was made to the core:

diff --git a/rules.mk b/rules.mk
index 57d7995d4fa8..f16367de87a8 100644
--- a/rules.mk
+++ b/rules.mk
@@ -429,7 +429,7 @@ endef
 abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1))))

 COMMITCOUNT = $(if $(DUMP),0,$(call commitcount))
-AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1))
+AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))

 all:
 FORCE: ;

And this command used to fix affected packages:

for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \
                              sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
  make package/$i/download
done

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2023-04-21 22:46:58 +02:00
Eneas U de Queiroz e85ceaaa14
opensc: do not build man pages
Add --disable-man to configure flags to skip building man pages.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-04-08 17:35:49 -03:00
Daniel Golle a8f37fc15b
opensc: update to version 0.22.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-16 14:35:14 +01:00
Daniel Golle c84ab8890c
opensc: update to version 0.21.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-25 23:30:50 +00:00
Daniel Golle 3c0291c316 opensc: update to version 0.20.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-01-07 01:29:45 +02:00
Rosen Penev 5c015d1eb7
opensc: Fix compilation without deprecated OpenSSL APIs
Based on upstream patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-08 14:50:31 -08:00
Sven Eckelmann bbb1ea7345 treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
2019-09-10 07:45:15 +02:00
Rosen Penev f97bbcf561 opensc: Update to 0.19.0
Pass --disable-notify to avoid libgio dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-22 20:10:28 -08:00
Rosen Penev 48640b388f
opensc: Update to 0.18.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-06-08 18:50:48 -07:00
Matthias Schiffer 00fce347a5
treewide: fix incorrect *_BUILD_DEPENDS
Build depends refer to source package names, not binary package names.

In many cases, PKG_BUILD_DEPENDS simply duplicated runtime dependencies of
a source package's binary packages; as the corresponding source packages
are implicitly added as bulid dependencies, PKG_BUILD_DEPENDS can simply be
dropped in these cases. In the other cases, *_BUILD_DEPENDS is fixed to
refer to the correct source package name.

Dependency of mysql-server is adjusted from libncursesw to libncurses
(as libncursesw is a virtual package provided by libncurses), so the build
dependency on ncurses is emitted unconditionally.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2018-01-09 16:36:02 +01:00
Matthias Schiffer 6e3a609d07
treewide: remove superfluous + signs from PKG_BUILD_DEPENDS
A + sign does not have meaning in build depends.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2018-01-07 20:08:31 +01:00
Daniel Golle 347c563c32 opensc: update to version 0.17.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-11-07 01:30:02 +01:00
Etienne Champetier 4006865ae8 treewide: run "make check FIXUP=1"
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2017-08-29 21:41:14 -07:00
Stephen Walker b63a809213 packages: cleanup Makefile variables
Standard assignment is immediate expansion without any extraneous spacing, RFC822 compliant email addresses and consistent section assignments

Signed-off-by: Stephen Walker <stephendwalker+github@gmail.com>
2017-06-03 16:38:06 -04:00
Daniel Golle dfe1d02773 opensc: update to release version 0.16.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2016-09-19 19:11:09 +02:00
Daniel Golle f5c2adfcf1 pcsc-lite: update to version 1.8.18
Support for GnuK token is included in this release, remove patches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2016-09-19 19:11:09 +02:00
Stefan Weil b5738a3878 utils: Fix typos (found by codespell)
Signed-off-by: Stefan Weil <sw@weilnetz.de>
2016-03-26 09:53:01 +01:00
Daniel Golle 764c55e013 opensc: update source, refresh patches
Also import two new GnuK-related patches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2015-05-13 13:23:21 +02:00
Daniel Golle 678fc8edc6 opensc: fix help output of openpgp-tool
A comma sign was left-out when re-basing the GnuK patch on top of opensc.
Also order options more intuitively, put --do last.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2014-12-13 03:55:57 +01:00
Daniel Golle 36ed0c44fc opensc: bump to git codebase of 20141126 and rebase GnuK patches
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2014-11-27 14:52:29 +01:00
Daniel Golle cb5bdba273 opensc: add PKG_LICENSE information
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2014-08-10 13:37:13 +02:00
Daniel Golle ccda02e4fa opensc: partially revert commit 79bdb90
add actual libpkcs11-spy dependencies and restore submenus

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2014-07-01 12:12:55 +02:00
Etienne CHAMPETIER 79bdb90a66 opensc: fix compilation
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
2014-06-30 18:48:27 +02:00
Nikos Mavrogiannopoulos 74200f07a1 opensc: updated projects's web page
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-06-20 20:26:46 +02:00
Daniel Golle 54a8a2a6b9 add OpenSC package
OpenSC is a smart card middleware.
Patches for support of the GnuK USB token have been added.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2014-06-17 01:50:13 +02:00