4 Commits

Author SHA1 Message Date
Lee Chee Yang
44b0037309 opensc: fix CVE-2023-2977
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-22 07:36:16 -07:00
Jan Luebbe
cc5082d5d1 opensc: fix private key import
Importing private keys into a PKCS#11 token is broken with OpenSC 0.23.0
and OpenSSL 3. Fix it by backporting the corresponding upstream fixes.

Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-02-02 10:25:33 -08:00
Jan Luebbe
c3e6365aea opensc: fix homepage URL
The opensc-project.org domain has not been active for a long time [1],
so use the current wiki (which is also linked from the projects GitHub
landing page).

[1] https://opensc-devel.narkive.com/48b09iig/www-opensc-project-org

Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-01-25 08:57:42 -08:00
Wang Mingyu
918739de58 opensc: upgrade 0.22.0 -> 0.23.0
Changelog:
============
 Support signing of data with a length of more than 512 bytes (#2314)
 By default, disable support for old card drivers (#2391) and remove support for old drivers MioCOS and JCOP (#2374)
 Bump minimal required OpenSSL version to 1.1.1 and add support for OpenSSL 3.0 (#2438, #2506)
 Compatibility with LibreSSL (#2495, #2595)
 Remove support for DSA (#2503)
 Extend p11test to support symmetric keys (#2430)
 Notice detached reader on macOS (#2418)
 Support for OAEP padding (#2475, #2484)
 Fix for PSS salt length (#2478)
 Improve fuzzing by adding new tests (#2417, #2500, #2520, #2550, #2637)
 Fixed various issues reported by OSS-Fuzz and Coverity regarding card drivers, PKCS#11 and PKCS#15 init
 Fix issues with OpenPACE (#2472)
 Containers support for local testing
 Add support for encryption and decryption using symmetric keys (#2473, #2607)
 Stop building support for Gost algorithms with OpenSSL 3.0 as they require deprecated API (#2586)
 Fix detection of disconnected readers in PCSC (#2600)
 Add configuration option for on-disk caching of private data (#2588)
 Skip building empty binaries when dependencies are missing and remove needless linking (#2617)
 Define arm64 as a supported architecture in the Installer package (#2610)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-12-05 09:16:24 -08:00