Debian Patches

Status for simple-tpm-pk11/0.06-5

Patch Description Author Forwarded Bugs Origin Last update
0001-Fix-RSA_set0_key-usage-to-make-verify-work-with-Open.patch Fix RSA_set0_key() usage to make verify work with OpenSSL 1.1
Fixes #43
Thomas Habets <habets@google.com> no 2018-08-02
0002-Prevent-segfault-when-C_GetSlotList-is-invoked-with-.patch Prevent segfault when C_GetSlotList is invoked with NULL pSlotList
This happens when openssl (via opencryptoki) tries to enumerate slots, and is apparently valid behavior
Ryan Trinkle <ryan.trinkle@gmail.com> no 2018-12-22
0003-Rework-key-enumeration.patch Rework key enumeration
openssl (via opencryptoki) expects:
* that valid handles are nonzero
* to be able to retrieve different handles for the public and private keys within a keypair
* to be able to enumerate them filtering on the CKA_CLASS of the key

This patch handles these issues by statically assigning the handles 1 and 2 to the public and private keys, respectively.
Ryan Trinkle <ryan.trinkle@gmail.com> no 2018-12-23
0004-Session-GetAttributeValue-respond-to-requests-for-CK.patch Session::GetAttributeValue: respond to requests for CKA_CLASS
This is required by openssl (via opencryptoki)
Ryan Trinkle <ryan.trinkle@gmail.com> no 2018-12-23
0005-Session-GetAttributeValue-respond-to-requests-for-CK.patch Session::GetAttributeValue: respond to requests for CKA_KEY_TYPE
This is required by openssl (via opencryptoki)
Ryan Trinkle <ryan.trinkle@gmail.com> no 2018-12-23
0006-Answer-CKA_LABEL-attribute-request-with-dummy-value.patch Answer CKA_LABEL attribute request with dummy value
A bug in RedHat's patched OpenSSH is preventing empty string, so
providing a one-letter dummy label is the workaround.

Fixes #48
Thomas Habets <thomas@habets.se> no 2019-05-16

All known versions for source package 'simple-tpm-pk11'

Links