ANNOUNCE: p11-kit 0.23.3

Daiki Ueno dueno at
Tue Dec 20 11:05:40 UTC 2016

This is a development release, but mainly for bug-fixes.

What's new in 0.23.3

 * Install private executables in libexecdir [#98817]
 * Fix link error of proxy module on macOS [#98022]
 * Use new PKCS#11 URI specification for URIs [#97245]
 * Support x-init-reserved argument of C_Initialize() in remote modules [#80519]
 * Incorporate changes from PKCS#11 2.40 specification
 * Bump libtool library version
 * Documentation fixes
 * Build fixes [#87192 ...]

Detailed changes between 0.23.2 and 0.23.3

Andreas Metzler (2):
      Doc: p11_kit_module_load accepts a filename arg.
      rpc: Fix typo flagged by lintian

Daiki Ueno (40):
      Fix typos flagged by codespell
      configure: Remove redundant AM_GNU_GETTEXT
      Fix leak when C_Initialize() is called from child
      uri: Remove whitespace early when parsing
      uri: Support slot info path attributes
      uri: Support 'slot-id' path attribute
      iter: Utilize slot info URI path attributes
      iter: Utilize 'slot-id' URI path attribute
      test: Make test-module work --without-trust-module
      test: Fix p11_virtual_init() usage
      rpc: Send x-init-reserved to remote module
      travis: Enable build on the CI
      uri: Fix buffer overflow in memcmp()
      uri: Port to PKCS#11 GNU calling convention
      rpc: Fix memleak in rpc_socket cleanup
      modules: Fix memleak when loading remote module
      modules: Reset the init count on fork()
      test: Fix memleak in test-token cleanup
      test: Remove /proxy/deinit-after-fork test
      travis: Disable silent rules
      travis: Enable GCC sanitizers
      build: Don't update po files on every make run
      build: Remove *.in files from EXTRA_DIST
      pkg-config: Expose p11_trust_paths variable
      trust: Reject invalid UTF-8 input
      trust: Mention anchor --remove option in help
      trust: Clarify the error message of 'extract'
      trust: Avoid confusion in DER/PEM decoding
      common, trust: Avoid integer overflow
      trust: Don't add CKA_TRUSTED to extension object
      doc: State 'p11-kit trust' is a deprecated form
      pkcs11: Add AES key wrap mechanisms
      pkcs11: Add CKA_COPYABLE definition
      pkcs11: Add CK_RSA_PKCS_OAEP_PARAMS definition
      pkcs11: Update CRYPTOKI_VERSION to 2.40
      test: Fix privatedir substitution in test-extract
      test: Remove setgid()ed copy of frob-getenv
      doc: Mention new API functions
      doc: More tweaks for gtk-doc
      Release version 0.23.3

Leonardo Brondani Schenkel (1):
      Fix link of p11-kit-proxy.dylib on Mac OS X

Lubomir Rintel (1):
      test-conf: don't create the setuid copy in /tmp

Pankaj (5):
      Avoiding redundant check
      mock: Check return value of calloc()
      proxy: Check return value of calloc()
      modules: Remove redundant NULL check
      proxy: Remove redundant NULL check

Stanislav Brabec (1):
      move privatedir from libdir to libexecdir

Stef Walter (3):
      doc: Fix interpolation of p11-kit configuration paths in documentation
      Fix typo in pkcs11.conf
      doc: Update documentation to point towards GitHub


Daiki Ueno
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 800 bytes
Desc: not available
URL: <>

More information about the p11-glue mailing list