Veronika Hanulíková
Veronika Hanulíková
This PR adds the configuration option `cache_private_data` that enables switching off on-disk caching of data flagged as private (with `SC_PKCS15_CO_FLAG_PRIVATE`). When both options `use_file_caching` and `cache_private_data` are enabled in config...
This PR removes uneeded libraries and flags from linking of tools and opensc libraries. The `-ldl` is moved from `LIBS` to `LDL_LIBS` and is linked only when needed. Also `GIO_LIBS`...
### Problem Description OpenSC configuration allows adjusting the handling of PIN-protected certificates. This is done by `private_certificate` option with values `protected`, `declassify` and `ignore`. However, the naming `private_` may confuse...
Fixes #2847 This pull request enhances and unifies the logging of OpenSSL errors throughout the OpenSC codebase. The newly introduced `sc_log_openssl()` function internally utilizes OpenSSL's `ERR_print_errors_cb()` to log and clear...
Fixes #3044 After the error in `sc_pkcs15_decipher`/`sc_pkcs15_derive`/`sc_pkcs15_derive`, the DF is reselected and the operation is called for second time. This is problematic for cards which require authentication before operations with...
### Problem Description When running `p11test` with the PIV test card and RSA2048 keys, I encountered a problem: the `pss_oaep_test` decryption test fails with `ERROR: [ SKIP 02 ] Re-authentication...
As discussed in #2740, the `refresh_attributes()` function in `reader-pcsc.c` does not correctly handle the state when the reader is removed and inserted between two subsequent calls to `refresh_attributes()`. In that...
Fixes #1833 This PR add documentation for PKCS#15 profile files. Any comments or further explanation of some of the options are welcome.
Recently reported issues by OSS-Fuzz. ##### Checklist - [ ] PKCS#11 module is tested - [ ] Windows minidriver is tested - [ ] macOS tokend is tested
This PR adds check for OpenSSL version when including `engine.h` and `OPENSSL_NO_ENGINE` is not defined. In Fedora rawhide, the engine related files were moved to separate subpackage `devel-engine`, so the...