Your message dated Mon, 11 Jan 2010 00:47:44 +0000
with message-id <[email protected]>
and subject line Bug#563671: fixed in opensc 0.11.12-1
has caused the Debian Bug report #563671,
regarding OpenSC 0.11.12 released, fixing an important regression
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
563671: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=563671
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: opensc
Version : 0.11.9
Severity : grave

OpenSC 0.11.12 released, fixing an important regression:
http://www.opensc-project.org/pipermail/opensc-announce/2009-December/000030.html

The problem
-----------

OpenSC 0.11.4 and earlier did not encode integers properly in ASN.1 structures
including the on-card format for directory files. This issue was was fixed
in OpenSC 0.11.5.  However in december 2009 it was discovered, that as a 
result some cards initialized with OpenSC 0.11.4 and earlier will not properly 
work with OpenSC 0.11.5 and later.

So far texting showed only problems with "Starcos" cards. The integers
keyReference and pinReference are read as negative numbers, instead
of the positive number (value+256) they should represent.

PKCS#15 dictates that both values need to be positive Integers if
specified in the directory files on the card. Thus code can automatically
detect the wrong (negative) values and fix the issue by adding 256.

In OpenSC 0.11.12 such code was implmeneted and successfully tested.
Starcos cards initialized with OpenSC 0.11.4 and earlier can now be used
with OpenSC 0.11.12 and later. Cards initialized with OpenSC 0.11.5 and later
continue to work fine.

Changes to the code were implemented to keep the ABI compatible with
earlier versions, so that applications using the internal OpenSC API
such as OpenSSH do not need to be recompiled.

Still the format on the Starcos cards initialited with OpenSC 0.11.4
continues to be wrong. If necessary a tool can be written to convert
such old cards, please report to the OpenSC mailing lists. Creating
or storing additional private keys and PIN objects will also update
the directory files and thus should writte the correct ASN.1 values
on the cards.

Other changes
-------------

The Entersafe driver in OpenSC was enhanced so it does now support
private data objects.




--- End Message ---
--- Begin Message ---
Source: opensc
Source-Version: 0.11.12-1

We believe that the bug you reported is fixed in the latest version of
opensc, which is due to be installed in the Debian FTP archive:

libopensc2-dbg_0.11.12-1_amd64.deb
  to main/o/opensc/libopensc2-dbg_0.11.12-1_amd64.deb
libopensc2-dev_0.11.12-1_amd64.deb
  to main/o/opensc/libopensc2-dev_0.11.12-1_amd64.deb
libopensc2_0.11.12-1_amd64.deb
  to main/o/opensc/libopensc2_0.11.12-1_amd64.deb
mozilla-opensc_0.11.12-1_amd64.deb
  to main/o/opensc/mozilla-opensc_0.11.12-1_amd64.deb
opensc_0.11.12-1.debian.tar.bz2
  to main/o/opensc/opensc_0.11.12-1.debian.tar.bz2
opensc_0.11.12-1.dsc
  to main/o/opensc/opensc_0.11.12-1.dsc
opensc_0.11.12-1_amd64.deb
  to main/o/opensc/opensc_0.11.12-1_amd64.deb
opensc_0.11.12.orig.tar.gz
  to main/o/opensc/opensc_0.11.12.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Eric Dorland <[email protected]> (supplier of updated opensc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sun, 10 Jan 2010 19:23:09 -0500
Source: opensc
Binary: opensc libopensc2-dev libopensc2 libopensc2-dbg mozilla-opensc
Architecture: source amd64
Version: 0.11.12-1
Distribution: unstable
Urgency: low
Maintainer: Eric Dorland <[email protected]>
Changed-By: Eric Dorland <[email protected]>
Description: 
 libopensc2 - Smart card library with support for PKCS#15 compatible smart card
 libopensc2-dbg - Debugging symbols for libopensc2
 libopensc2-dev - OpenSC development files
 mozilla-opensc - Mozilla plugin for authentication using OpenSC
 opensc     - Smart card utilities with support for PKCS#15 compatible cards
Closes: 552516 563671
Changes: 
 opensc (0.11.12-1) unstable; urgency=low
 .
   * New upstream release. (Closes: #563671)
   * debian/source/format, debian/source/options,
     debian/source/patch-header: Convert to v3 quilt format, with
     single-debian-patch.
   * debian/rules: Enable documentation installation.
   * debian/control: Update description with advice from Andreas
     Jellinghaus, with some editing. (Closes: #552516)
   * debian/libopensc2.symbols: Update for new symbols.
   * debian/libopensc2.shlibs: Remove in favor of the symbols file.
Checksums-Sha1: 
 40268a6a180548e8b687cc637d946d062529e4b9 1341 opensc_0.11.12-1.dsc
 36b1294c52304ccf0c646a2c84feee0991370e0e 1498956 opensc_0.11.12.orig.tar.gz
 63a7fd58fee3df1f105a25085062e4bec5832990 48847 opensc_0.11.12-1.debian.tar.bz2
 fc8460993675d208e543d0d5f8cab7e69704ad16 339382 opensc_0.11.12-1_amd64.deb
 89f22692905cfb3bdfe7962873b924032c09db57 859476 
libopensc2-dev_0.11.12-1_amd64.deb
 104921d86830fd600159a56c4eb5d148ac40c7cd 701272 libopensc2_0.11.12-1_amd64.deb
 e392ce3ba823a6d1692b3b464e678e65015745fc 1390906 
libopensc2-dbg_0.11.12-1_amd64.deb
 ba343293db783a1053858a07db1be5571f73053b 191042 
mozilla-opensc_0.11.12-1_amd64.deb
Checksums-Sha256: 
 07638a59cc6de20ddfc94eb7155b8fe06cf94b08bc61d90e3db649e30f3b58e2 1341 
opensc_0.11.12-1.dsc
 6a68fa868583c131834e8a5b8492bfee7db2e611b3720beb52faa5d91426207f 1498956 
opensc_0.11.12.orig.tar.gz
 225134add6d20c64d1eaf9055acd1ac387414107440619675e844bf06364c5e0 48847 
opensc_0.11.12-1.debian.tar.bz2
 02e012c4d477fc57d627b07bb1bc41b5b4d8c5070b25707d9034c96fc7d4235f 339382 
opensc_0.11.12-1_amd64.deb
 a33c0bb1cdc3c071760299e98b56fb5fb97b30c7b20552c7f1b3162ed025c6d3 859476 
libopensc2-dev_0.11.12-1_amd64.deb
 7ebff84bdacf1666173758d1182819c83fb1532fb00ce37581a487ed81e9a978 701272 
libopensc2_0.11.12-1_amd64.deb
 05d5a5a938d27e389f84a5171659561288a6ed8bfd7633f78e5823d2640650b1 1390906 
libopensc2-dbg_0.11.12-1_amd64.deb
 173cad780e1cdb8e18b39cb9c7023ae77fdc5f902c79ef125431f1af68fa875e 191042 
mozilla-opensc_0.11.12-1_amd64.deb
Files: 
 367634246b2e7962fd6a498c14a9c4c7 1341 utils extra opensc_0.11.12-1.dsc
 bc82f097bbc457962f3722474b50af5c 1498956 utils extra opensc_0.11.12.orig.tar.gz
 038f97c76e63e18c761118c6b7d72e95 48847 utils extra 
opensc_0.11.12-1.debian.tar.bz2
 c7f224bdfd08533cbaccf889a71fe19a 339382 utils extra opensc_0.11.12-1_amd64.deb
 e7388be062f221effe22ffb7831dc254 859476 libdevel optional 
libopensc2-dev_0.11.12-1_amd64.deb
 f59721f35960c99ff7dec4b847b2fd07 701272 libs optional 
libopensc2_0.11.12-1_amd64.deb
 662e6d313729eddfd2b96b2cb90155c8 1390906 debug extra 
libopensc2-dbg_0.11.12-1_amd64.deb
 c396bb0b4074ad999cb94ab43beb3821 191042 web extra 
mozilla-opensc_0.11.12-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iD8DBQFLSnJ6YemOzxbZcMYRApDcAJ9+Q4hsv0hWGyefwibgQdiQU8yVyQCfcTO+
FpuHT9Z+vNrzH6NxhZaeIuQ=
=ug9S
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to