Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package openCryptoki for openSUSE:Factory
checked in at 2025-06-17 18:21:17
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/openCryptoki (Old)
and /work/SRC/openSUSE:Factory/.openCryptoki.new.19631 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openCryptoki"
Tue Jun 17 18:21:17 2025 rev:83 rq:1286095 version:3.25.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/openCryptoki/openCryptoki.changes
2024-12-11 21:09:13.177197892 +0100
+++ /work/SRC/openSUSE:Factory/.openCryptoki.new.19631/openCryptoki.changes
2025-06-17 18:21:45.613153949 +0200
@@ -1,0 +2,28 @@
+Mon Jun 16 09:43:23 UTC 2025 - Nikolay Gueorguiev <nikolay.gueorgu...@suse.com>
+
+- Upgrade openCryptoki to version 3.25
+ * Updates/add supports
+ - ICA/Soft: Add support for PKCS#11 v3.0 SHAKE key derivation
+ - EP11: Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
+ - EP11: Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
+ - EP11: Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA
mechanisms
+ - CCA: Add support for CCA AES CIPHER secure key types
+ - CCA: Add support for the CKM_ECDH1_DERIVE mechanism
+ - Soft/ICA: Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
+ - CCA/Soft/ICA: Add support for the CKM_RSA_AES_KEY_WRAP mechanism
+ - Soft/ICA: Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
+ - ICA: Report mechanisms dependent on if libica is in FIPS mode
+ - P11KMIP: Add a tool for import and exporting PKCS#11 keys to a KMIP
server
+ - EP11: Add support for opaque secure key blob import via C_CreateObject
+ - Soft/ICA: Add support for key wrapping with AES-GCM
+ - CCA: Add support for newer CCA versions on s390x and non-s390x platforms
+ - CCA: Add support for CKM_AES_GCM (single-part operations only)
+ * Amended the .spec file
+ * Removed obsolete patches:
+ - ocki-3.24-remove-group-from-tests.patch
+ - ocki-3.24-remove-make-install-chgrp.patch
+ * Applied a new patch for version 3.25
+ - ocki-3.25-remove-make-install-chgrp.patch
+ * Bug fixes
+
+-------------------------------------------------------------------
@@ -1308,2 +1335,0 @@
-
--------------------------------------------------------------------
Old:
----
ocki-3.24-remove-group-from-tests.patch
ocki-3.24-remove-make-install-chgrp.patch
openCryptoki-3.24.0.tar.gz
New:
----
ocki-3.25-remove-make-install-chgrp.patch
openCryptoki-3.25.0.tar.gz
----------(Old B)----------
Old: * Removed obsolete patches:
- ocki-3.24-remove-group-from-tests.patch
- ocki-3.24-remove-make-install-chgrp.patch
Old: - ocki-3.24-remove-group-from-tests.patch
- ocki-3.24-remove-make-install-chgrp.patch
* Applied a new patch for version 3.25
----------(Old E)----------
----------(New B)----------
New: * Applied a new patch for version 3.25
- ocki-3.25-remove-make-install-chgrp.patch
* Bug fixes
----------(New E)----------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ openCryptoki.spec ++++++
--- /var/tmp/diff_new_pack.Rm4Vem/_old 2025-06-17 18:21:46.529192051 +0200
+++ /var/tmp/diff_new_pack.Rm4Vem/_new 2025-06-17 18:21:46.533192217 +0200
@@ -1,7 +1,7 @@
#
# spec file for package openCryptoki
#
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -27,7 +27,7 @@
%define oc_cvs_tag opencryptoki
Name: openCryptoki
-Version: 3.24.0
+Version: 3.25.0
Release: 0
Summary: An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM
Cryptographic Hardware
License: CPL-1.0
@@ -39,8 +39,7 @@
Source3: openCryptoki-rpmlintrc
# Patch 0 is needed because group pkcs11 doesn't exist in the build environment
# and because we don't want(?) various file and directory permissions to be
0700.
-Patch000: ocki-3.24-remove-make-install-chgrp.patch
-Patch001: ocki-3.24-remove-group-from-tests.patch
+Patch000: ocki-3.25-remove-make-install-chgrp.patch
#
#
BuildRequires: bison
@@ -255,12 +254,15 @@
%dir %{_datadir}/doc/opencryptoki
%doc %{_datadir}/doc/opencryptoki/policy-example.conf
%doc %{_datadir}/doc/opencryptoki/strength-example.conf
+%doc %{_datadir}/doc/opencryptoki/README.token_data
+%doc %{_datadir}/doc/opencryptoki/opencryptoki-howto.md
%dir %{_datadir}/opencryptoki
%{_datadir}/opencryptoki/policy-example.conf
%{_datadir}/opencryptoki/strength-example.conf
# configuration directory
%dir %{_sysconfdir}/opencryptoki
%config %{_sysconfdir}/opencryptoki/opencryptoki.conf
+%config %{_sysconfdir}/opencryptoki/p11kmip.conf
%attr(0640,root,%{pkcs_group}) %config
%{_sysconfdir}/opencryptoki/strength.conf
%attr(0640,root,%{pkcs_group}) %config
%{_sysconfdir}/opencryptoki/p11sak_defined_attrs.conf
%ifarch s390 s390x
@@ -282,6 +284,7 @@
%dir %attr(770,root,%{pkcs_group}) %{_localstatedir}/lib/opencryptoki/ccatok
%dir %attr(770,root,%{pkcs_group})
%{_localstatedir}/lib/opencryptoki/ccatok/TOK_OBJ
%endif
+%{_sbindir}/p11kmip
%{_sbindir}/pkcsslotd
%{_sbindir}/pkcsconf
%{_sbindir}/pkcsicsf
@@ -323,6 +326,10 @@
%{_libdir}/opencryptoki/stdll/libpkcs11_cca.so
%ghost %{_libdir}/opencryptoki/stdll/PKCS11_CCA.so
%endif
+%ifnarch i586
+%{_libdir}/opencryptoki/stdll/libpkcs11_cca.so
+%endif
+%ghost %{_libdir}/opencryptoki/stdll/PKCS11_CCA.so
%{_libdir}/opencryptoki/stdll/libpkcs11_tpm.so
%ghost %{_libdir}/opencryptoki/stdll/PKCS11_TPM.so
%{_libdir}/opencryptoki/stdll/libpkcs11_sw.so
++++++ ocki-3.24-remove-make-install-chgrp.patch ->
ocki-3.25-remove-make-install-chgrp.patch ++++++
---
/work/SRC/openSUSE:Factory/openCryptoki/ocki-3.24-remove-make-install-chgrp.patch
2024-09-20 17:13:36.203709499 +0200
+++
/work/SRC/openSUSE:Factory/.openCryptoki.new.19631/ocki-3.25-remove-make-install-chgrp.patch
2025-06-17 18:21:45.045130323 +0200
@@ -1,5 +1,5 @@
---- a/Makefile.am 2024-09-11 08:46:18.000000000 +0200
-+++ b/Makefile.am 2024-09-20 11:31:30.709823171 +0200
+--- a/Makefile.am 2025-06-10 08:52:39.000000000 +0200
++++ b/Makefile.am 2025-06-16 12:25:31.040661532 +0200
@@ -51,19 +51,9 @@
include doc/doc.mk
@@ -53,7 +53,19 @@
$(CHMOD) 0770 $(DESTDIR)$(lockdir)/ep11tok
test -f $(DESTDIR)$(sysconfdir)/opencryptoki || $(MKDIR_P)
$(DESTDIR)$(sysconfdir)/opencryptoki || true
test -f $(DESTDIR)$(sysconfdir)/opencryptoki/ep11tok.conf || $(INSTALL)
-m 644 $(srcdir)/usr/lib/ep11_stdll/ep11tok.conf
$(DESTDIR)$(sysconfdir)/opencryptoki/ep11tok.conf || true
-@@ -123,24 +106,18 @@
+@@ -117,34 +100,28 @@
+ endif
+ if ENABLE_P11SAK
+ test -f $(DESTDIR)$(sysconfdir)/opencryptoki || $(MKDIR_P)
$(DESTDIR)$(sysconfdir)/opencryptoki || true
+- test -f $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf
|| $(INSTALL) -g $(pkcs_group) -m 0640
$(srcdir)/usr/sbin/p11sak/p11sak_defined_attrs.conf
$(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf || true
++ test -f $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf
|| $(INSTALL) -m 0640 $(srcdir)/usr/sbin/p11sak/p11sak_defined_attrs.conf
$(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf || true
+ endif
+ if ENABLE_P11KMIP
+ test -f $(DESTDIR)$(sysconfdir)/opencryptoki || $(MKDIR_P)
$(DESTDIR)$(sysconfdir)/opencryptoki || true
+- test -f $(DESTDIR)$(sysconfdir)/opencryptoki/p11kmip.conf || $(INSTALL)
-g $(pkcs_group) -m 0640 $(srcdir)/usr/sbin/p11kmip/p11kmip.conf
$(DESTDIR)$(sysconfdir)/opencryptoki/p11kmip.conf || true
++ test -f $(DESTDIR)$(sysconfdir)/opencryptoki/p11kmip.conf || $(INSTALL)
-m 0640 $(srcdir)/usr/sbin/p11kmip/p11kmip.conf
$(DESTDIR)$(sysconfdir)/opencryptoki/p11kmip.conf || true
+ endif
+ if ENABLE_ICATOK
cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
ln -fs libpkcs11_ica.$(SHLIBEXT) PKCS11_ICA.$(SHLIBEXT)
$(MKDIR_P) $(DESTDIR)$(localstatedir)/lib/opencryptoki/lite/TOK_OBJ
@@ -78,7 +90,7 @@
$(CHMOD) 0770 $(DESTDIR)$(lockdir)/swtok
endif
if ENABLE_TPMTOK
-@@ -148,10 +125,8 @@
+@@ -152,10 +129,8 @@
cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
ln -fs libpkcs11_tpm.$(SHLIBEXT) PKCS11_TPM.$(SHLIBEXT)
$(MKDIR_P) $(DESTDIR)$(localstatedir)/lib/opencryptoki/tpm
@@ -89,7 +101,7 @@
$(CHMOD) 0770 $(DESTDIR)$(lockdir)/tpm
endif
if ENABLE_ICSFTOK
-@@ -159,10 +134,8 @@
+@@ -163,16 +138,14 @@
cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
ln -fs libpkcs11_icsf.$(SHLIBEXT) PKCS11_ICSF.$(SHLIBEXT)
$(MKDIR_P) $(DESTDIR)$(localstatedir)/lib/opencryptoki/icsf
@@ -100,7 +112,14 @@
$(CHMOD) 0770 $(DESTDIR)$(lockdir)/icsf
endif
if ENABLE_DAEMON
-@@ -181,7 +154,6 @@
+ test -f $(DESTDIR)$(sysconfdir)/opencryptoki || $(MKDIR_P)
$(DESTDIR)$(sysconfdir)/opencryptoki || true
+ test -f $(DESTDIR)$(sysconfdir)/opencryptoki/opencryptoki.conf ||
$(INSTALL) -m 644 $(srcdir)/usr/sbin/pkcsslotd/opencryptoki.conf
$(DESTDIR)$(sysconfdir)/opencryptoki/opencryptoki.conf || true
+- test -f $(DESTDIR)$(sysconfdir)/opencryptoki/strength.conf ||
$(INSTALL) -m 640 -o root -g $(pkcs_group) -T
$(srcdir)/doc/strength-example.conf
$(DESTDIR)$(sysconfdir)/opencryptoki/strength.conf || true
++ test -f $(DESTDIR)$(sysconfdir)/opencryptoki/strength.conf ||
$(INSTALL) -m 640 -o root -T $(srcdir)/doc/strength-example.conf
$(DESTDIR)$(sysconfdir)/opencryptoki/strength.conf || true
+ endif
+ if !AIX
+ $(MKDIR_P) $(DESTDIR)/etc/ld.so.conf.d
+@@ -185,7 +158,6 @@
@echo "--------------------------------------------------------------"
endif
$(MKDIR_P) $(DESTDIR)$(lockdir) $(DESTDIR)$(logdir)
++++++ openCryptoki-3.24.0.tar.gz -> openCryptoki-3.25.0.tar.gz ++++++
++++ 55996 lines of diff (skipped)
