Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

pam_pkcs11-0.6.10-2.3 RPM for armv7hl

From OpenSuSE Ports Leap 15.4 for armv7hl

Name: pam_pkcs11 Distribution: openSUSE Step 15
Version: 0.6.10 Vendor: openSUSE
Release: 2.3 Build date: Thu Apr 1 01:20:04 2021
Group: Productivity/Security Build host: armbuild22
Size: 1141001 Source RPM: pam_pkcs11-0.6.10-2.3.src.rpm
Summary: PKCS #11 PAM Module
This Linux PAM module allows X.509 a certificate-based user
authentication. The certificate and its dedicated private key are
thereby accessed by means of an appropriate PKCS #11 module. For the
verification of the users' certificates, locally stored CA certificates
as well as online or locally accessible CRLs are used.

Additionally, the package includes pam_pkcs11-related tools:

* pkcs11_eventmgr: Generates actions on card insert, removal, or
  time-out events

* pklogin_finder: Gets the login name that maps to a certificate

* pkcs11_inspect: Inspects the contents of a certificate

* make_hash_links: Creates hash link directories for storing CAs and






* Tue Jan 29 2019
  - Update to version 0.6.10:
    * Fix some security issues (thx @frankmorgner):
      (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    * Fix buffer overflow with long home directory.
    * Fix wiping secrets (now using OpenSSL_cleanse()).
    * Verify using a nonce from the system, not the card.
    * Fix segfalt when checking CRLs
      (drop pam_pkcs11-crl-check.patch).
  - Add rcpkcs11_eventmgr service symlink.
* Fri Aug 17 2018
  - Address security issues found by X41 D-Sec audit (bsc#1105012)
    * Authentication Replay
    * Buffer Overflow
    * Memory not cleaned properly before free()
  - add patches:
    * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
    * 0002-fixed-buffer-overflow-with-long-home-directory.patch
    * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch
* Mon Jul 23 2018
  - Fix segfault and fetch problems when checking CRLs
* Sun Sep 10 2017
  - Repair bulletpoint that skidded in description.
    Trim description of %name-devel-doc, it does not cotain
    the programs.
* Wed Aug 09 2017
  - add service file bsc#1049219
* Thu Jul 20 2017
  - Updated to version 0.6.9:
    * Upstream web moved.
    * pkcs11_listcerts: Do not fail on certificate error.
    * Do not fail if card was already unlocked.
    * Other bug fixes.
    * Translation updates.
  - Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
  - Work around incorrect upstream release process not calling
    "make dist".
  - Split API documentation into a separate package
  - Add pam_pkcs11-fsf-address.patch.
* Tue Feb 09 2016
  - Fix build for Tumbleweed:
    * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
    * Rebuild configure with the bootstrap script (add libtool as
      build dependency)
* Tue Jul 10 2012
  - Updated to version 0.6.8:
    * Code cleanup.
    * Bug fixes.
    * Translation updates.
* Tue Feb 28 2012
  - Change nssdb path to /etc/pki/nssdb (bnc#463469).
  - Make libdir paths in pam_pkcs11.conf biarch-wise.
* Wed Jan 05 2011
  - Updated to version 0.6.6:
    * Compatible with pcsc-lite-1.6.
    * New mapper API.
    * Minor fixes.
    * Translaton updates.



Generated by rpm2html 1.8.1

Fabrice Bellet, Fri Feb 9 18:29:11 2024