Репозиторий Sisyphus
Последнее обновление: 24 сентября 2018 | Пакетов: 18658 | Посещений: 12257334
en ru br
Репозитории ALT
S:0.6.10-alt1
5.1: 0.6.1-alt5
www.altlinux.org/Changes

Группа :: Система/Основа
Пакет: pam_pkcs11

 Главная   Изменения   Спек   Патчи   Sources   Загрузить   Gear   Bugs and FR  Repocop 

13 сентября 2018 Paul Wolneykien <manowar at altlinux.org> 0.6.10-alt1

  • New version 0.6.10.
  • Cleanup passwords with `cleanse()` in the new code too.
  • README.md: removed license section (thx Frank Morgner).
  • Update README.md (thx Frank Morgner).
  • fixed wiping secrets with OpenSSL_cleanse() (thx Frank Morgner).
  • fixed buffer overflow with long home directory (thx Frank Morgner).
  • verify using a nonce from the system, not the card (thx Frank Morgner).
  • Fixed segfault and fetch problems when checking CRLs (thx Gil Kloepfer).

13 августа 2018 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt34

  • Distinguish between entering a wrong user PIN and SO PIN during
     the PIN change / initialization procedure.

6 августа 2018 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt33

  • Fixed: Distinguish between expired PIN and other cases to change it.

15 июня 2018 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt32

  • Build with a new LibreSSL version (2.7.3).

7 июня 2018 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt31

  • Fixed SIGSEGV on empty password.
  • Simplify the password cleanup in the PIN change procedure.
  • Implement the "check_pin_early" option.

24 ноября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt30

  • Move the control scripts and base profiles to the "pkcs11-profiles"
     package.

16 ноября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt29

  • Don\'t show a welcome message when is asked by a screensaver.

14 ноября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt28

  • 'isbc': Set debug level on ititialization.
  • Call 'pin_status()' of a low-level module to check if PIN has
     expired.
  • Add some Cryptoki API to pkcs11_lib module.
  • Split the lowlevel API onto public and private parts.
  • Implement 'pin_status()' for the 'isbc' low-level module.
  • Fixed 'force_pin_change' configuration option.
  • Fixed ISBC journal timestamp.
  • Fixed cleanup of the old password.

13 ноября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt27

  • Fix: Report password quality check error only when the return
     code is less than zero.

10 ноября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt26

  • Output the modified info message for a user PIN change session
     when the card is locked.

9 ноября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt25

  • Check and warn about PIN attempts in PIN change mode.
  • Reset the PIN only if card is locked, by default.

8 ноября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt24

  • Use libpwquality to check the PIN (optional, configurable).
  • Add option to automatically set PIN init mode for `pam_chauthtok`
     if there were incorrect login attempts (false by default).
  • Implement ISBC (ESMART) APDUs to query the number of rest PIN attempts.
  • Fixed `init_pin` flag.

31 октября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt23

  • Added "pam_pkcs11_query_config" helper tool.
  • Fresh/Fix the GOST support patch.

24 октября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt22

  • Support "PAM_RESET_AUTHTOK" PAM env. var. known to be set by
     LightDM.
  • Fix: Answer with INFO message and PAM_IGNORE code from
     "pam_sm_chauthtok()" when no card present and we are not restricted
     to card-only login.
  • Added info messages for user PIN change and reset.
  • Fixed double free() in refresh_slots().

23 октября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt21

  • Automatically enable InitPIN mode for pam_sm_chauthtok() when
     user PIN is locked.

23 октября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt20

  • Remove the redudant "pam-pkcs11-gost" control.
  • Build with LibreSSL.

23 октября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt19

  • Distinguish between welcome and welcome PIN locked.
  • Distinguish between wrong PIN and wrong PIN locked.
  • Fix: Exit quietly only if "card_only" is false.
  • Fix: Do not return error when there are no slots.
  • Return ignore or error when PKCS#11 module loading fails based
     on config.
  • Use "default_username" configuration parameter to set the username
     in PAM stack when it is unset.
  • Reorganize the sources: use cumulative patch.
  • Fail if no token found only when it is strictly required.
  • Fix/improve: Don\'t require the user to be loged-in to change the PIN.
  • Allow to configure the prompts on the per-service basis. Parse prompts
     from the root conf, then "prompts default {}", then "prompts <service> {}".
  • Use C_InitPIN() to setup PIN in SO login mode.
  • Support PAM_CHANGE_EXPIRED_AUTHTOK flag in pam_sm_chauthtok().
  • Implement forced PIN change after login when it is expired.
  • Clean the password values more accurate.
  • Configurable messages for PIN checks, warnings and wrong PIN
     attempts.
  • Add plural / singular pin low messages.
  • Fixed unloading of low-level modules and the PAM handle in
     report_pkcs11_lib_error().
  • Add "pin_count_low" configuration option.
  • User PIN checks (low, final, locked).
  • Implement a describer returning an OID (optionally mapped).
  • Fix: Welcome the user only once.
  • Add support for user descriptions to the mapper interface and
     the manager.
  • Skip empty prompts. Output a user welcome prompt with a description
     (as returned by a mapper).
  • Make the 'quiet' config parameter affect syslog ouput only.
  • Output only the last certificate verification error.
  • Add support for \-escapes in the config file including \n\r\t\".
  • Fix: Return PAM_AUTH_ERR for login error.
  • Introduce new "verbose" config parameter.
  • Get rid of duplicate "no token" error.
  • Output "no token" errors only when wait-for-card mode is off.
  • Fix: Make wait-for-card work when the user is not logged in.
  • Add the default prompt message profile.
  • Off the debug mode by default.
  • Fix: Read the configuration before output any prompts.

3 октября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt18

  • Add 'pam-pkcs11-messages' control.
  • Make PAM prompts configurable.

6 сентября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt17

  • Skip soft slots by default. Also mask slots by manufacturer
     and description.

4 сентября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt16

  • Fix: Pass the OpenSSL config name directly.

1 сентября 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt15

  • Use local openssl.cnf if it exists.
  • Copy the system-wide openssl.cnf after the package is installed.
  • Add OpenSSL GOST engine control (for local openssl.cnf).
  • Add 'mapfile' entries to SNILS profiles (commented out).
  • Add 'subject', 'mail' and 'cert' mapping profiles and use 'cert'
     by default.

24 августа 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt14

  • Fix/improve: Return PAM_IGNORE if the token isn\'t present and
     card_only isn\'t set.
  • Fix: Return PAM_IGNORE on PIN change request if the current login
     is not related to a token.

24 августа 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt13

  • Add password (PIN) management steps to the PAM stack.
  • Implement "pam_sm_chauthtok" (the "password" part of PAM).

14 августа 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt12

  • Explicitly require pcsc-lite (for pcscd).
  • Also require pcsc-lite-ccid (as related to the default OpenSC
     profile).

14 августа 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt11

  • Drop versioned dependency of alterator-service-functions (chroot
     usage is rare).
  • Add 'mate-screensaver' to the screen saver list.

3 августа 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt10

  • Use alterator-service-functions (need >= 2.0.4) to control the
     service in a chroot.

21 июля 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt9

  • Don\'t include 'debug' settings in the profiles.
  • Support nested module configuration in 'pam-pkcs11-profile' control
     profiles.
  • Independently select the cert mapping scheme using 'pam-pkcs11-mapping'
     control.
  • Add SNILS (OID 1.2.643.100.3) mapping profiles.

7 июля 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt8

  • Added post-processing options to the generic mapper (prefix,
     postfix, scrambling).
  • The generic mapper is now able to search for OID values both
     in the the main subject and subject extensions.

27 июня 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt7

  • Add support for GOST certificates (thx cas@ and Max Kosmach).
  • Complete Russian translation of pam_pkcs11 (thx cas@ and Max Kosmach).

22 июня 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt6

  • Allow to pass to the next module if the auth isn\'t restricted to
     card only.

9 июня 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt5

  • Fix: Initialize the event manager state value from token (closes: 33534).
  • Add configuration control scripts: support "profiles" and "modules.avail"
     configuration directories.
  • Add pkcs11_strict system-auth PAM configuration.
  • Fix: Don\'t stuck if wait_for_card=false.
  • Fix: Ignore the token not found error when the auth isn\'t restricted to
     card only login.
  • Add systemd service unit for pkcs11_eventmgr.

7 июня 2017 Paul Wolneykien <manowar at altlinux.org> 0.6.9-alt4

  • Fix: Initialize the event manager state value from token (closes: 33534).

21 ноября 2016 Ivan Zakharyaschev <imz at altlinux.org> 0.6.9-alt3

  • ask_pin (by default: true) option added (thx cas@);
     the corresponding PAM options are: ask_pin, dont_ask_pin.

20 ноября 2016 Ivan Zakharyaschev <imz at altlinux.org> 0.6.9-alt2

  • Restored ALT-specific features (from p7's 0.6.4-alt2, originally by raorn@):
     1. The example configs are placed in /usr/share/pam_pkcs11/.
     2. The use of OpenSSL's c_hash instead of pkcs11_make_hash_links
        is advised in the documentation; more options in example configs.
     3. global_ca configuration option for the system-wide cert storage.
     4. Russian translations updated
        (and shortened "smart card" into "token" in some places).
     5. Larger buffers (to hold localized strings) and safer operations
        with them (no unjustified sprintf).
     6. Check if there are any valid certificates before asking for PIN.

31 октября 2016 Andrey Cherepanov <cas at altlinux.org> 0.6.9-alt1

  • New version 0.6.9
  • Fix project homepage

12 сентября 2014 Eugeny A. Rostovtsev (REAL) <real at altlinux.org> 0.6.8-alt1.git20140828

  • Version 0.6.8

16 июля 2012 Vitaly Kuznetsov <vitty at altlinux.ru> 0.6.4-alt2

  • fix build

8 декабря 2010 Igor Vlasenko <viy at altlinux.ru> 0.6.4-alt1.1

  • rebuild with new openssl and/or boost by request of git.alt administrator

28 июня 2010 Alexey I. Froloff <raorn at altlinux.org> 0.6.4-alt1

  • [0.6.4]

6 октября 2009 Alexey I. Froloff <raorn at altlinux.org> 0.6.1-alt5

  • Ask PIN only if there are any certificates that can be mapped to user

5 сентября 2009 Alexey I. Froloff <raorn at altlinux.org> 0.6.1-alt4

  • Fix buffer overflow in non-POSIX locales

23 августа 2009 Alexey I. Froloff <raorn at altlinux.org> 0.6.1-alt3

  • Russian translations updated

31 июля 2009 Alexey I. Froloff <raorn at altlinux.org> 0.6.1-alt2

  • Document moar pam_pkcs11 options in default config
  • cert_policy: global_ca - use system-wide cert storage when verifying
     certificates
  • Fix paths in manpages and documentation
  • Dropped make_hash_links.sh in favor of c_rehash (openssl)

21 июля 2009 Alexey I. Froloff <raorn at altlinux.org> 0.6.1-alt1

  • Built for Sisyphus
 
дизайн и разработка: Vladimir Lettiev aka crux © 2004-2005, Andrew Avramenko aka liks © 2007-2008
текущий майнтейнер: Michael Shigorin