This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "opencryptoki".

The annotated tag, v3.0 has been created
        at  2aff118b619ccfe30d2a2392a44a7cbdf9cbb84b (tag)
   tagging  8ea9659d64ac32d4028fbf61dd00524eed3d58c7 (commit)
  replaces  v2.4.3.1
 tagged by  Joy Latten
        on  Mon Jul 15 12:17:55 2013 -0500

- Log -----------------------------------------------------------------
Version 3.0

Debora Babb (2):
      Commented all NULLs in token specific structs.
      Task3: re-factor mech_sha.c for all tokens to use.

Debora V Babb (11):
      mech_dh.c modularity patch.
      Encryption Manager modularity patch. cca and tpm changed to use
      Aggregate sess_mgr.c
      Tokenize mech_dsa.c
      Included headers needed in icsf_specific.c
      Added mech_list for icsf token.
      Added get_mechanism_info for icsf token.
      Add token specific login for icsf.
      Correct OKC_LOG_DEBUG to OCK_LOG_DEBUG
      Added icsf_to_ock_err function
      get_mechanism_list corrections needed for ICSF token

Eduardo Otubo (2):
      icsf: adding t_copy_object
      testcase: adding copyobjects

Ingo Tuchscherer (2):
      ica-token: added support for:
      Fixed Encrypt/Decrypt-Update methods for DES, DES3 and AES in CFB mode

Joy Latten (102):
      Task1: re-factor token specific structure.
      Task2: Modify token_specific definition for ica and tpm to include
      Task3: Refactored mech_rsa such for all tokens.
      1.Removed ckm_rsa_* calls. Instead make token specfic calls directly.
      Task3: testcase correction so that rsa test work with tpm.
      Task3: refactor mech_aes for all tokens to use.
      Task3: Re-factor mech_des and mech_des3 so that all tokens
      Task3: tokenize mech_rng to fit new scheme.
      Task3: moved mech_ec to common directory.
      Aggregate key.c and key_mgr.c.
      Added token_keysize to the token_specific_struct.
      Remove reference to NODAE define.
      Remove reference to NOODM define.
      Remove reference to TEST_MUTEXES and TEST_COND_VARS.
      Remove reference to SLOTD_DECLARE_VARs since it is never declared or used
      Remove reference to PER_PROCESS_MUTEXES
      Allow pkcsslotd to read opencryptoki.conf to determine slots and
      Remove reference to pkcs_slot and pkcs11_startup since we no
      Remove files that are not being used.
      We should always used the code defined by PKCS64.
      Remove all reference to AIX message catalogs.
      refactor such that each c file includes only what it needs.
      Add a man page for opencryptoki.conf and
      Miscellaneous:
      Aggregate utility.c
      Task11: various items
      Make "confname" available in the opencryptoki.config and read by 
pkcsslotd.
      Removed a DEBUG statement that failed to compile
      Move opencryptoki.conf from "{prefix}/etc" to "{prefix}/etc/opencryptoki".
      Add functions for password based key derivation, master key
      New config tool for icsf token.
      Added comments to soft token's tok_struct.
      cca token's tok_struct had mis-placed functions.
      Added comments to ica token's tok struct
      Add icsf files and dirs to gitignore.
      Add t_init_pin to the icsf token.
      Add t_set_pin to the icsf token.
      add a token_specific_session to icsf_stdll
      Free context after decrypting and don't use obsoleted calls.
      Add get attribute value (CSFPGAV) to the icsf layer.
      Add token specific get attribute value call to ock and icsf.
      Remove reference to session_object in icsf.
      Let calling program determine if it wants a sequence of a sequence
      Add set attribute value to the icsf layer.
      Add token specific set attribute value to ock and icsf.
      Add a pkcs11 tescase to test get and set attribute values.
      Removed rule_array since it is not needed when getting an attribute value.
      Move encoding of attributes before icsf_list so icsf_list can
      Add attributes to icsf_list() and icsf_list_objects().
      Add t_find_objects_init to ock and ICSF token.
      Clear out the memory for the map.
      icsf's init_token needs to purge the object btree and start anew.
      Add a findobjects testcase.
      the output length was an unusual looking number and not correct.
      Changed symmetric testcases to accept "-securekey" if using securekey 
token.
      Add ock token specific t_destroy_object to icsf token.
      Add a testcase for C_DestroyObjects
      This fixes a lock not being released.
      Remove unsupported hash algorithms
      Add hmac sign and verify in icsf layer.
      Allocate data for chain_data in an array.
      Add token specific sign and verify to ock.
      Add token specific ICSF sign and verify.
      Add HMAC Multipart testcase.
      Cleanup if error in ICSF's token specific sign_init and verify_init.
      Remove MD2.
      Add signed hash call to icsf layer.
      Remove reference to parameter since none of the sign and verify
      Add signed hashes to ock layer in ICSF token.
      ber_scanf on ppc64 seems to not like our assigning an int to a size_t
      Add SSL3 MAC mechanisms to sign and verify for ICSF token.
      on ppc64 compiler complained about implicit use. needed include files.
      Add DeriveKey to ock and icsf token.
      derive key in ICSF should accept null attributes.
      CKM_SSL3_SHA1_MAC and CKM_SSL3_MD5_MAC require mechanism parameters
      Refactored the Diffie Helman testcase in dh_func.c
      Refactored ssl3 testcases in ssl3_func.c
      More refactoring for ssl3_func.c
      Add 2 additional assertions.
      load token data when initializing. Dont use shared memory.
      Corrected aes testcases that were looking for incorrect return code
      Check mechanism to see if key wrapping supported before running
      Corrections in error messages.
      DSA test case corrections.
      Debug correction.
      ICSF's token_specific_copy_object was not mapping icsf error code
      Refactored copyobject testcase since was failing.
      Add token_specific_init_token_data to tpm token so it won't do
      TPM token needs to make user and TOK_OBJ directories some time
      The pkcs11 group will be added externally.
      Correct usage syntax for pkcsicsf.
      Add pkcsicsf man page
      Make using a socket for transferring slot info between pkcsslotd and
      Added publiched test vectors for aes-cfb8 and aes-fb128.
      Add cfb and ofb test vectors for des3.
      Update docs to reflect v3 changes.
      Bugfix: several hmacs were in incorrect case statement.
      ICA token was not properly reporting when a mechanism was invalid.
      Bump up version to 3.0.
      Add to ChangeLog
      More documentation.
      Add missing copyright.

Marcelo Cerri (164):
      Task4: refactor decr_mgr for tpm token.
      Task4: refactor decr_mgr for cca token.
      Fix: infinite loop when a test case fails to login
      Fix formatting of tpm_stdll/Makefile.am
      Task4: refactor dig_mgr for TPM token.
      Task4: refactor sign_mgr for TPM token.
      Fix formatting of cca_stdll/Makefile.am
      Task4: update common/sign_mgr.c with mechanisms supported by CCA
      Task4: update CCA token to use common/sign_mgr.c
      Task4: refactor verify_mgr for TPM token.
      Task4: update common/verify_mgr.c with mechanisms supported by CCA
      Task4: refactor verify_mgr for CCA token.
      Task4: TPM's mech_list moved from globals.c to tpm_specific.c
      Task4: refactor globals.c for TPM token.
      Task4: refactor globals.c for CCA token.
      Task4: add token_specific_get_mechanism_{list,info} functions for TPM.
      Task4: Update mechanism check to consider the type of operation.
      Task4: Update TPM mechanism check to consider the type of operation.
      Task4: Update CCA mechanism check to consider the type of operation.
      Task4: update mech_list for ica_s390_stdll
      Change rng to use token_specific structure.
      Task6: change CCA token code to use common new_host.c
      Fix formatting of common/tok_spec_struct.h
      Fix formatting of soft_stdll/tok_struct.h
      Fix formatting of tpm_stdll/tok_struct.h
      Fix formatting of cca_stdll/tok_struct.h
      Fix formatting of common/loadsave.c
      Task5: Update common/loadsave.c to support different kinds of encryption.
      Task6: changes in loadsave.c to open and save master keys with different 
sizes.
      Task6: update loadsave.c to support CCA
      Task6: aggregate TPM's new_host.c
      Fix: remove warnings
      Fix: include mech_list.c in TPM's Makefile
      Fix: replace spaces with tabs in TPM's Makefile
      Task6: use a generic mechanism to generate the master key
      Add missing function declarations to parser.y
      Include stdlib.h to shmem.c
      Task8: remove unused file args.h
      Fix: remove unused file cca_stdll/asn1.c
      Task8: update cca_stdll/defs.h to just contain CCA specific definitions
      Fix formatting of tpm_stdll/Makefile.am
      Task8: aggregate TPM's h_extern.h to common code
      Fix formatting of cca_stdll/Makefile.am
      Task8: aggregate CCA's h_extern.h to common code
      Task8: remove unused file c_defs.h
      Task8: remove unused file c_extern.h
      Task8: aggregate CCA's host_defs.h to common code
      Task8: aggregate TPM's host_defs.h to common code
      Task8: remove unused and duplicated entries in host_defs.h
      Task8: remove tokenlocal.h
      Include new ICSF token into opencryptoki
      icsf: add function for LDAP simple binding
      iscf: add logout function
      icsf: force LDAP v3 during login
      icsf: add function for checking if ICSF extended operation is supported
      icsf: add function SASL binding
      icsf: add auxiliary macros for argument checking
      icsf: add function for token creation
      icsf: add function for token deletion
      icsf: add function for token listing
      icsf: add function for object creation
      icsf: add function for object listing
      icsf: update ICSF token directory
      data store: skip master key generation for tokens that doesn't use it
      add slot id for init_token token-specific call
      icsf: add basic token-specific functions for ICSF token
      loadsave: fix multi-thread issue with static variable
      fix formatting for loadsave.c
      loadsave: make get_pk_dir available outside loadsave.c
      fix formatting in icsf_stdll/Makefile.am
      new_host: move user and group checks to a separated function
      shm: add slot ID to token-specific t_attach_shm calls
      formatting: fix indentation in cca_stdll/Makefile.am
      formatting: indent ica_s390_stdll/Makefile.am similar to other makefiles
      shared memory: add a new shared memory facility that can be reused by 
tokens
      shared memory: update existing tokens to use the new facility
      icsf: add token-specific attach_shm call
      formatting: fix formatting of apiutil.c
      formatting: fix formatting of api_interface.c
      conf: pass `confname` to DL_Load_and_Init
      conf: pass `confname` to ST_Initialize
      formatting: fix formatting of utility.c
      attach_shm: move token-specific call into attach_shm
      load token data only when it's needed
      pass token details to token data related functions
      add token-specific token data related functions
      fix warning in icsf_stdll/tok_spec_struct.h
      icsf: add token-specific t_init_token_data function
      icsf: load and save ICSF specific data from NVTOK.DAT
      icsf: add shared function for destroying tokens and objects
      icsf: add general function for login
      icsf: change icsf_create_object to return data about the object created
      icsf: add function for destroying objects
      icsf: implement t_init_token
      fix: remove unused parameters in printf in a macro
      icsf: remove unused parameter in icsf_create_object
      icsf: update list of numeric attributes
      icsf: better usage of handle helper functions
      icsf: add a generic function for all ICSF services
      icsf: remove `icsf_destroy` function
      icsf: update `icsf_list` to use `icsf_call`
      icsf: add support for symmetric key generation
      icsf: add ASN.1 description for icsf_generate_secret_key
      icsf: add support for mechanisms in icsf_generate_secret_key
      update token specific open session function
      update token specific login function
      icsf: keep LDAP handle in a global structure
      fix formatting for SC_GenerateKey in new_host.c
      token-specific function for symmetric key generation
      icsf: add support for symmetric key generation
      fix: remove unused macro ICSF_DIR
      fix: rename t_session() to t_open_session()
      add some comments about ICSF tag numbers and services
      Indent with tabs instead of spaces in icsf_specific.c
      Change lock ICSF's t_login to protect shared memory
      icsf: use a RW lock for sessions
      icsf: fix wrong variable sid in destroy_objects
      icsf: add reason argument to functions in icsf.c
      fix formatting and indentation in SC_CreateObject(), in the
      token-specific function for object creation
      icsf: add support for object creation
      add t_close_session function
      icsf: add t_close_session and t_final functions
      fix type of variable used as length for ber_printf
      btree: fix for bt_destroy
      icsf: global object handles across sessions
      icsf: add functions for symmetric decryption and encryption
      add token-specific functions for symmetric decryption and encryption
      new_host.c: fix formatting for decryption and encryption functions
      icsf: update de/encryption functions to return the expected length
      icsf: add function to get block sizes used by ICSF
      icsf: add token-specific functions to de/encrypt data
      icsf: use icsf_to_ock_err()
      icsf_specific.c: formatting fixes
      common: add utility functions to handle attribute arrays
      fix: fix multi-part decryption and encryption
      icsf.c: add function to generate key pair
      new_host.c: fix formatting in SC_GenerateKeyPair()
      token-specific function for key pair generation
      icsf: add token-specific function to generate key pairs
      icsf: add support for sign/verify/encrypt/decrypt with asymmetric keys
      icsf: add support for asymmetric encryption
      icsf: pass return code to icsf_to_ock_err()
      fix: use long int instead of int for numeric attributes
      icsf: remove mechanisms related to hashed PK signing
      icsf: add support for simple PK signing
      fix: remove unused variables
      fix: add missing checks in icsf.c
      icsf: add functions to wrap and unwrap keys
      new_host.c: fix indentation for SC_WrapKey() and SC_UnwrapKey()
      token-specific functions for key wrapping
      icsf: add support for key wrapping
      test: fix key wrapping test case
      icsf: add support for SASL authentication
      icsf: add multiple keys derivation
      icsf: add test case for multiple keys derivation
      fix: user returned values from token-specific functions
      fix: add libraries required by 390x
      fix: properly return the length needed when signing with private keys
      fix: check for a NULL list in for_each_list_entry()
      test: add mechanism name to skip messages
      list: fix warning on ppc
      fix: properly resize token_specific_find_objects_init() internal buffer
      pkcsicsf: add support for explicit and implicit configuration

Ross McIlroy (4):
      Patch[1/4]:
      Patch[2/4]:
      Patch[3/4]:
      Patch[4/4]:

-----------------------------------------------------------------------


hooks/post-receive
-- 
opencryptoki

------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Opencryptoki-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opencryptoki-tech

Reply via email to