Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tpm2-openssl for openSUSE:Factory checked in at 2023-10-27 22:28:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tpm2-openssl (Old) and /work/SRC/openSUSE:Factory/.tpm2-openssl.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tpm2-openssl" Fri Oct 27 22:28:33 2023 rev:2 rq:1120661 version:1.2.0 Changes: -------- --- /work/SRC/openSUSE:Factory/tpm2-openssl/tpm2-openssl.changes 2023-06-05 18:08:22.327758855 +0200 +++ /work/SRC/openSUSE:Factory/.tpm2-openssl.new.17445/tpm2-openssl.changes 2023-10-27 22:29:06.481527615 +0200 @@ -1,0 +2,34 @@ +Tue Oct 17 23:58:21 UTC 2023 - William Brown <william.br...@suse.com> + +## Added +* Added support for ECDH with a KDF, which is used by ECC-based CMS (S/MIME). +* Added retrieval of OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY for EC keys and retrieval + of TLS-GROUP provider capabilities to enable mTLS authentication (thanks to @rshearman). +* Added mTLS example to documentation (thanks to @hoinmic). +* Added missing RAND parameters: 'state' and 'strength' (thanks to @mccarey). +* Added ability to run tests in a container (thanks to @afreof). +* Added Visual Studio properties to simplify the Windows build (thanks to @philippun1). + +## Changed + +* Symmetric operations are disabled by default. In most situations these are not needed and + cause a huge performance penalty. To enable, configure with --enable-op-digest or + --enable-op-cipher. + +## Removed + +* Removed unofficial support for tpm2-tss < 3.2.0, which do not support the openssl 3.x. + +## Fixed + +* Fixed key export: the private keys are not exportable, which shall fix some TPM-based sign + operations (thanks to @fhars). +* Fixed handle related operations on 32b machines (thanks to @dezgeg). +* Fixed OSSL_FUNC_KEYMGMT_HAS operations with NULL keys. +* Fixed a heap exception on some machines (thanks to @philippun1). +* Fixed build warnings when building on the Fedora Linux. +* In documentation and tests applied a correct order of providers (thanks to @hoinmic). +* Modified documentation: the user-space resource manager (abrmd) is almost mandatory for complex + scenarios such as SSL or X.509 operations. + +------------------------------------------------------------------- Old: ---- tpm2-openssl-1.1.1.tar.gz tpm2-openssl-1.1.1.tar.gz.asc New: ---- tpm2-openssl-1.2.0.tar.gz tpm2-openssl-1.2.0.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tpm2-openssl.spec ++++++ --- /var/tmp/diff_new_pack.AA5SsA/_old 2023-10-27 22:29:07.561567227 +0200 +++ /var/tmp/diff_new_pack.AA5SsA/_new 2023-10-27 22:29:07.561567227 +0200 @@ -15,10 +15,11 @@ # Please submit bugfixes or comments via https://bugs.opensuse.org/ # + %define _MODULES_DIR %(pkg-config --variable=modulesdir libcrypto) Name: tpm2-openssl -Version: 1.1.1 +Version: 1.2.0 Release: 0 Summary: OpenSSL 3 Engine for TPM2 devices License: BSD-3-Clause ++++++ tpm2-openssl-1.1.1.tar.gz -> tpm2-openssl-1.2.0.tar.gz ++++++ ++++ 24162 lines of diff (skipped)