./security/opensc, Smart Card drivers and middleware

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 0.23.0, Package name: opensc-0.23.0, Maintainer: pkgsrc-users

OpenSC provides a set of libraries and utilities to access smart cards.
Its main focus is on cards that support cryptographic operations, and
facilitate their use in security applications such as mail encryption,
authentication, and digital signature. OpenSC implements the PKCS#11 API
so applications supporting this API such as Mozilla Firefox and Thunderbird
can use it. OpenSC implements the PKCS#15 standard and aims to be compatible
with every software that does so, too.


Required to run:
[textproc/libxslt] [security/openssl] [security/pcsc-lite]

Required to build:
[textproc/docbook-xsl] [pkgtools/cwrappers]

Package options: pcsc-lite

Master sites:

Filesize: 1919.087 KB

Version history: (Expand)

CVS history: (Expand)


   2023-02-21 18:23:07 by Adam Ciarcinski | Files touched by this commit (9) | Package updated
Log message:
opensc: updated to 0.23.0

New in 0.23.0; 2022-11-29

General improvements

Support signing of data with a length of more than 512 bytes
By default, disable support for old card drivers
Bump minimal required OpenSSL version to 1.1.1 and add support for OpenSSL 3.0
Compatibility with LibreSSL
Remove support for DSA
Extend p11test to support symmetric keys
Notice detached reader on macOS
Support for OAEP padding
Fix for PSS salt length
Improve fuzzing by adding new tests
Fixed various issues reported by OSS-Fuzz and Coverity regarding card drivers, \ 
PKCS#11 and PKCS#15 init
Fix issues with OpenPACE
Containers support for local testing
Add support for encryption and decryption using symmetric keys
Stop building support for Gost algorithms with OpenSSL 3.0 as they require \ 
deprecated API
Fix detection of disconnected readers in PCSC
Add configuration option for on-disk caching of private data
Skip building empty binaries when dependencies are missing and remove needless \ 
linking
Define arm64 as a supported architecture in the Installer package
PKCS#11

Implement C_CreateObject for EC keys and fix signature verification for \ 
CKM_ECDSA_SHAx cards
pkcs11-tool

Add more elliptic curves
Add support for symmetric encrypt and decrypt, wrap and unwrap operations, and \ 
initialization vector
Fix consistent handling of secret key attributes
Add support for signing and verifying with HMAC
Add support for SHA3
Make object selectable via label
Do not require an R/W session for some operations and add --session-rw option
Print more information: CKA_UNIQUE_ID attribute, SHA3 HMACs and serial number \ 
for certificates
Add new option --undestroyable to create keys with CKA_DESTROYABLE=FALSE
sc-hsm-tool

Add options for public key authentication
Minidriver

Fix reinit of the card
Add an entry for Italian CNS (e)
Fix detection of ECC mechanisms
Fix ATRs before adding them to the windows registry
NQ-Applet

Add support for the JCOP4 Cards with NQ-Applet
ItaCNS

Add support for ItaCMS v1.1 (key length 2048)
Belpic

Add support for applet v1.8
Starcos

Add ATR for V3.4
Add PKCS#15 emulator for 3.x cards with eSign app
ePass2003

Fix PKCS#15 initialization
Add support for FIPS
Fix matching with newer versions and tokens initialized with OpenSC
MyEID

Support logout operation
Support for symmetric encryption and decryption
GIDS

Fix decipher for TPM
OpenPGP

Get the list of supported algorithms from algorithm information on the card
Support for 3 certificates with OpenPGP 3+
nPA

Fix card detection
Rutoken

Fix formatting rtecp cards
PIV

Add new PIVKey ATRs for current cards
   2022-11-23 17:21:30 by Adam Ciarcinski | Files touched by this commit (1878) | Package updated
Log message:
massive revision bump after textproc/icu update
   2022-04-18 21:12:27 by Adam Ciarcinski | Files touched by this commit (1798) | Package updated
Log message:
revbump for textproc/icu update
   2021-12-08 17:07:18 by Adam Ciarcinski | Files touched by this commit (3063) 
Log message:
revbump for icu and libffi
   2021-10-26 13:18:07 by Nia Alarie | Files touched by this commit (605) 
Log message:
security: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Unfetchable distfiles (fetched conditionally?):
./security/cyrus-sasl/distinfo \ 
cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2
   2021-10-07 16:54:50 by Nia Alarie | Files touched by this commit (606) 
Log message:
security: Remove SHA1 hashes for distfiles
   2021-04-21 13:43:04 by Adam Ciarcinski | Files touched by this commit (1822) 
Log message:
revbump for textproc/icu
   2020-11-05 10:09:30 by Ryo ONODERA | Files touched by this commit (1814) 
Log message:
*: Recursive revbump from textproc/icu-68.1