| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: openssl-provider-libp11 | Distribution: openSUSE Tumbleweed |
| Version: 0.4.21 | Vendor: openSUSE |
| Release: 1.1 | Build date: Sun Oct 25 11:36:54 2026 |
| Group: Productivity/Security | Build host: reproducible |
| Size: 236221 | Source RPM: libp11-0.4.21-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/OpenSC/libp11 | |
| Summary: Library Implementing a Small Layer on Top of PKCS#11 API | |
Libp11 is a library implementing a small layer on top of PKCS#11 API to make using PKCS#11 implementations easier. The official name for PKCS#11 is "RSA Security Inc. PKCS #11 Cryptographic Token Interface (Cryptoki)". Libp11 source code includes the official header files (version 2.20) and thus is "derived from the RSA Security Inc. PKCS #11 Cryptographic Token Interface (Cryptoki)".
LGPL-2.1-or-later
* Sun Oct 25 2026 Dirk Müller <dmueller@suse.com>
- update to 0.4.21:
* Added PKCS#11 provider support for `openssl genpkey`
* Added the PKCS11_generate_key_ext() API
* Added the PKCS11_CTX_set_pkey_callback() API
* Removed incorrect `fips=yes` properties from provider
algorithms
* Isolated ENGINE EVP_PKEY methods from unrelated OpenSSL keys
* Fixed ENGINE EVP_PKEY method races and lifetime issues
* Fixed public-key association for generated key pairs with
duplicate CKA_ID values
* Added all-zero shared-secret checks for X25519 and X448
* Fixed a provider EC public-point NULL dereference with
affected OpenSSL 3.x versions
* Fixed building with OpenSSL 1.0.2
* Improved Git build and RSA-OAEP documentation
* Added PKCS#11 3.2 interface discovery and updated the bundled
header to version 3.2
* Added PKCS#11 provider support for ML-KEM-512, ML-KEM-768 and
ML-KEM-1024 key generation, encapsulation and decapsulation
* Added the PKCS11_evp_pkey_decapsulate() API
* Added provider signature AlgorithmIdentifier support,
including RSA-PSS parameters and correct default salt length
handling
* Fixed RSA-PSS salt length parsing and spurious OpenSSL errors
* Fixed session-pool races and deadlocks during concurrent key
generation and cryptographic operations
* Fixed key-cache and OpenSSL 1.x RSA object use-after-free
bugs
* Fixed provider EC parameter lifetime handling and resource
leaks during EC, RSA, EdDSA and XDH operations and context
cleanup
* Added native KEYMGMT, SIGNATURE and ASYM_CIPHER operations to
the PKCS#11 provider, enabling OpenSSL 4.x support and
improving RSA interoperability
* Added support for ML-DSA, SLH-DSA and FALCON key generation,
signing and verification
* Added PQC key generation examples and provider tests
* Added PKCS#11 provider support for ECDH, X25519 and X448 key
exchange, including X25519 and X448 key generation
* Improved Ed25519 and Ed448 public-key resolution with
certificate fallback
* Fixed use-after-free crashes after enumerating additional
PKCS#11 keys
* Fixed a potential out-of-bounds write while parsing PKCS#11
URI attributes
* Sat Feb 07 2026 Andreas Stieger <andreas.stieger@gmx.de>
- update to 0.4.17:
* Ed25519 and Ed448 support (PKCS#11 v3.2)
* Fixed OPENSSL_NO_EC builds
* Reverted RSA public exponent change
* Fixed crash on module initialization failures
* Ignoring trailing newlines in pin-source files
* Initial build fixes for the upcoming OpenSSL 4.x
- package license files
* Tue Jun 24 2025 Lucas Mulling <lucas.mulling@suse.com>
- Update to 0.4.16:
* Fixed PKCS#11 module synchronization setup that was broken in libp11 0.4.14 (nojocodex)
* Mon Jun 09 2025 Lucas Mulling <lucas.mulling@suse.com>
- Update to 0.4.15:
* Fixed incorrectly installing an internal header file (Alex Dupre)
* Fixed handling URI schemes of other providers (Małgorzata Olszówka)
* Mon May 26 2025 Lucas Mulling <lucas.mulling@suse.com>
- Update to 0.4.14:
* Added the "pkcs11prov" provider for OpenSSL 3.x (Małgorzata Olszówka)
* Added generic keypair generation interface and engine ctrl command (Rafael Junio da Cruz)
* Added static engine support (Lucas Mülling)
* Added PKCS11_FORCE_CLEANUP env variable to force cleanup on exit and stop memory leaks with certain PKCS#11 modules (Małgorzata Olszówka)
* Fixed a number of resource leaks (Małgorzata Olszówka, Hazem Zaghloul, Michał Trojnara)
* Fixed C_OpenSession error handling (Rafael Junio da Cruz)
* Fixed handling of uninitialized tokens (Michał Trojnara)
* Removed support for OpenSSL older than 1.0.2 (Michał Trojnara)
- Create new subpackage openssl-provider-libp11
- Removed patch fix-wrong-non-static-lib.patch
* Tue Apr 01 2025 Lucas Mulling <lucas.mulling@suse.com>
- Add Provides: openssl-pkcs11:
* RH has renamed libp11 to openssl-pkcs11 since 0.4.7-4, in order to keep
compatibility we need to provide openssl-pkcs11 (jsc#PED-12017)
* Fri Dec 20 2024 Lucas Mulling <lucas.mulling@suse.com>
- Add patch to fix upstream
* fix-wrong-non-static-lib.patch
* Thu Dec 19 2024 Lucas Mulling <lucas.mulling@suse.com>
- Update to 0.4.13:
* Increased maximum PIN length (Michał Trojnara)
* Fixed several memory leaks (Michał Trojnara, Małgorzata Olszówka)
* Don't include libp11.rc VERSIONINFO into pkcs11 (Mikhail Titov)
* Improved tests (Małgorzata Olszówka)
* Added static ENGINE (libpkcas11.a) build (Marouene Boubakri)
* Added a workaround broken foreign key handling in OpenSSL
* 3.0.12-3.0.13, 3.1.4-3.1.5, 3.2.0-3.2.1 (Małgorzata Olszówka)
* Added a workaround for conflicting atexit() callbacks (Michał Trojnara)
* Always login with PIN If FORCE_LOGIN is specified in openssl config
(Plamen Todorov)
* Added OAEP support to RSA_private_decrypt (Peter Popovec)
* Added PKCS11_enumerate_*_ext functions (Harshal Gohel)
* Fixed non-null-terminated label padding (Jorge Ramirez-Ortiz)
* Fixed several object management issues (Jakub Jelen)
* Deferred libp11 initialization until needed (Doug Engert)
- Removed patches:
* libp11-openssl-3.1.patch
* libp11-configure-treat-all-openssl-3.x-releases-the-same.patch
- Enable unit tests
* Fri Jan 19 2024 Otto Hollmann <otto.hollmann@suse.com>
- Add support for OpenSSL 3.x:
Add libp11-configure-treat-all-openssl-3.x-releases-the-same.patch
* Wed Sep 27 2023 Otto Hollmann <otto.hollmann@suse.com>
- Replace openssl-ibmpkcs11 with openssl-engine-libp11 (jsc#PED-3327)
Add Obsoletes: openssl-ibmpkcs11 <= 1.0.1
and Provides: openssl-ibmpkcs11 = 1.0.1
* Tue Jun 06 2023 Dominique Leuenberger <dimstar@opensuse.org>
- Add support for openSSL 3.1:
+ Add libp11-openssl-3.1.patch: handle openSSL 3.1 the same as 3.0
+ Add libtool BuildRequires and call autoreconf: abobe patch
touches the build system.
+ Add baselibs.conf
* Mon Feb 06 2023 Dominique Leuenberger <dimstar@opensuse.org>
- Fix build against openSSL 3.
/usr/lib64/ossl-modules /usr/lib64/ossl-modules/libpkcs11.so /usr/lib64/ossl-modules/pkcs11prov.so /usr/share/licenses/openssl-provider-libp11 /usr/share/licenses/openssl-provider-libp11/COPYING
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Oct 27 22:43:50 2026