<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<pre>Hello,
We have just released p11-kit-0.25.0. This is a new bug fix and enhancement release.
What's new in 0.25.0
--------------------
* add PKCS#11 3.0 support [PR#458, PR#461, PR#462, PR#463, PR#464, PR#467, PR#469, PR#470, PR#475, PR#485, PR#486]
* add support for profile objects [PR#479]
* add ability to adjust module and config paths at run-time via system environmental exports [PR#442]
* make terminal output nicer [PR#509, PR#510]
* p11-kit: add command to print merged configuration [PR#446, PR#489]
* p11-kit: add commands to list, add and delete profiles of a token [PR#500, PR#503, PR#506]
* trust: add command to check format of .p11-kit files [PR#476, PR#483]
* virtual: fix libffi type signatures for PKCS#11 3.0 functions [PR#492]
* server: fix umask setting when --group is specified [PR#478]
* server: check SHELL only when neither --sh nor --csh is specified [PR#438]
* rpc: use space string in C_InitToken [PR#514]
* rpc: fix two off-by-one errors identified by asan [PR#456]
* modules: make logging message more translatable [PR#436]
* pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms [PR#421]
* pkcs11.h: add IBM specific mechanism and attributes [PR#415]
* pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms [PR#487]
* pkcs11.h: add AES-GCM mechanism parameters for message-based encryption [PR#481]
* po: update translations from Transifex [PR#439]
* bug and build fixes [PR#412, PR#414, PR#417, PR#418, PR#420, PR#426, PR#427, PR#428, PR#448, PR#451, PR#459, PR#496, PR#505, PR#511, PR#512, PR#513, PR#516, PR#517, PR#524, PR#521]
* test fixes [PR#424, PR#441, PR#444, PR#443, PR#460, PR#472, PR#474, PR#465, PR#473, PR#487, PR#499, PR#519, PR#525, PR#526]
Detailed changes between 0.24.1 and 0.25.0
------------------------------------------
Daiki Ueno (30)
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">meson: revert the p11_system_config_modules pkg-config variable
</span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">build: Use EXEEXT and SHLEXT
</span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">README.md: Remove status badge for Travis CI which is no longer used
</span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">common/pkcs11x.h: Support CRYPTOKI_GNU for IBM vendor mechanisms</span>
</span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> pkcs11-gnu: Enable testing with <p11-kit/pkcs11x.h></span>
</span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> trust: Replace deprecated node_asn and ASN1_ARRAY_TYPE macro usage</span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">
compat: Fix detection of O_BINARY and O_CLOEXEC</span>
</span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Silence warnings spotted by LGTM.com</span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">
</span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> modules: Make logging message more translatable
</span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">server: Check SHELL only when neither --sh nor --csh is specified</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">
.github/workflows/test.yaml: Enable CI on macOS
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> rpc: Fix two off-by-one errors identified by asan</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> rpc-server: Check pointer value returned by proto_read_byte_array</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add CodeQL workflow for GitHub code scanning</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> proxy: Simplify interface lookup logic</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> proxy: Check requested interface version upon GetInterface</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> mock: Export C_GetInterface{,List} from the module</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> .github/workflows/test.yaml: Switch to using macOS 12 image</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> tests: Make test-managed succeed without libffi</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> server: Fix umask setting when --group is specified</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add AES-GCM mechanism parameters for message-based encryption</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> trust: Use the same parser code for parsing and checking</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> trust: Lower Cryptoki version from 3.0 to 2.40</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> pkcs11.h: Add ChaCha20/Salsa20 and Poly1305 mechanisms</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> .github/actions: Don't swallow error exit code when printing logs</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> virtual: Fix libffi type signatures for PKCS#11 3.0 functions</span>
</span></span></span></span></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> .github/workflows: Switch macOS CI to using Meson</span></span></span></span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> libffi: Fix handling of pulCount parameter of C_GetInterfaceList</span></span></span></span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> print: New interface p11_list_printer</span></span></span></span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> client: Support PKCS#11 3.0</span>
</span></span>winner658</span><span class="p-name vcard-fullname d-block overflow-hidden" itemprop="name"> </span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">(1)
</span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">fix "trust dump --help" displays "usage: trust list"</span>
Ingo Franzki (1)
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">Add support for some IBM specific mechanisms supported by OpenCryptoki for the RPC protocol</span>
Frederik Boster (1)
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">Fix support for epoch time 0 in JKS for reproducibility</span><font face="monospace">
Balázs Úr (1)
</font><font face="monospace"><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">po: Update translations from Transifex
David Korczynski (1)
</span> </font><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">ci: Add CIFuzz workflow
Zoltan Fridrich (29)
</span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">Add command to print merged configuration</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> po: Add p11-kit/print-config.c to POTFILES.in</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add PKCS #11 3.0 interface</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add PKCS#11 3.0 support to RPC</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add tests for pkcs#11 3.0 proxy module</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add PKCS#11 3.0 support to mock module</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add pkcs#11 3.0 mock modules for testing</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add PKCS#11 3.0 support to log</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add PKCS#11 3.0 support to proxy</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add tests for pkcs#11 3.0</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add support for profile objects</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add trust-check-format utility tool</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Document print-config command</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add list-profiles sub-command to p11-kit cmd tool</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add command to delete profiles from a token</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add command to add profiles to a token</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Make terminal output nicer</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Small format fix in p11-kit/modules.c</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Set stdin and stdout to binary mode on Windows</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Fix hard-coded TRUST_SO path in trust/frob-multi-init.c</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> RPC module: use space string in C_InitToken</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Make the proxy_module extension in pkg-config .pc file adaptable</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Fix bug in base_C_MessageSignFinal</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Add test for p11-kit-client.so</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Fix CI issues</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Fix memory leak inside p11_kit_remote_serve_tokens</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Handle both XSI and GNU versions of strerror_r</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Suppress memory test warning</span>
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"> Release 0.25.0</span>
Florian Weimer (1)
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">Fix meson/configure _Thread_local checks for C99 compatibility
Jakub Jelen (1)
</span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">Test improvements (from #374)</span>
Clemens Lang (1)
<span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">build: Fix meson build & tests on macOS
timesys-nathan (1)
</span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title">Add in the ability to dynamically adjust module and configuration paths at run-time via system environmental exports
Download
--------
<a moz-do-not-send="true" href="https://github.com/p11-glue/p11-kit/releases/tag/0.25.0" class="moz-txt-link-freetext">https://github.com/p11-glue/p11-kit/releases/tag/0.25.0</a>
Regards,
--
Zoltan Fridrich
</span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"></span></pre>
<pre><span class="d-inline-block mr-1"></span><span class="Link--primary v-align-middle no-underline h4 js-navigation-open markdown-title"></span></pre>
<p></p>
</body>
</html>