Skip to content

Latest commit

 

History

History
54 lines (48 loc) · 2.31 KB

CHANGELOG.md

File metadata and controls

54 lines (48 loc) · 2.31 KB

Changelog

next - next

  • C_InitToken: Fix improper SRK handle of 0x81000000, it should be 0x81000001.
  • Fix a leak in in tpm.c of an EVP_PKEY object.
  • C_GenerateKeyPair: was not adding PSS signatures as supported by RSA objects, add it.
  • Fix PSS signatures. Non-FIPS mode TPMs produce PSS signatures with a max salt len that poses interoperability issues with verifying clients, notably TLS in OpenSSL.
  • Fix Java PKCS11 Provider Signature Verification: #401
  • VerifyRecover support, known working with Public Key RSA objects and mechanism CKM_RSA_PKCS.
  • db: Modfiy search and create behavior. See docs/INITIALIZING.md for details.
  • Fix printf(3) format specifier errors.
  • ci: increase CI coverage to: Fedora 30, Ubuntu 16.04, Ubuntu 18.04.
  • configure: check for Python version >= 3.7 and pass to Automake. No need to set PYTHON_INTERPRETER anymore.
  • Fix segfault/memory corruption bugs in C_Destroy().
  • Fix segfault when no user pin is provisioned.
  • Support C_SetAttributeValue.

1.1.0 - 2020-03-09

  • DB Schema Change from 1 to 3.
    • Backup your DB before upgrading
  • Support C_InitToken interface.
  • Add Java PKCS11 Keystore support for RSA/ECB/RSAPKCS1.5 via public encrypt and private decrypt.
  • Decouple handles from db primary keys. Key handles are no longer stable between runs.
  • tpm2_ptool objmod:
    • Support adding an attribute.
    • Fix bug in variable name vtype over type.
  • C_Sign: support mechanism CKM_RSA_X_509.
  • C_GetTokenInfo: add missing mechanism CKM_SHA512_RSA_PKCS.
  • Fix store search logic to fail when TPM2_PKCS11_STORE cannot be accessed.
  • Fix potential double free in token_free() logic.
  • Fix -Werror=format-truncation with GCC >= 7 #415
  • Fix unitialized variable warnings #416
  • test: use release tarball vs source code.
  • build: clean leftover file in make clean.
  • release: add missing tests to tarball no matter configure options.
  • test: fix invalid flags on CKM_SHA512_RSA_PKCS causing test failures.
  • Switch OASIS pkcs11 headers to FSF Unlimited License Headers.

1.0.1 - 2020-1-6

  • stop linking against libdl
  • add missing test integration scripts to dist tarball.

1.0 - 2019-12-28

  • Initial Release