search for: opencryptoki

...rrata and Bugfix Advisory 2014:1988 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1988.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d6209a40121dd8bad6d6d58400a4c6d214a56097f7c01436034309e6531b27f0 opencryptoki-3.0-11.el7_0.1.i686.rpm 07662f632f141cd1f4816da0222b9e1f98b27d3119762319725cd96a428af4e8 opencryptoki-3.0-11.el7_0.1.x86_64.rpm f2fffba1b163939ed59cf19f3998517f00ec7538c55701a5749913eddf62f141 opencryptoki-devel-3.0-11.el7_0.1.i686.rpm bc8f777c136bebd26b3f432f6a13a0664a099ba0a3a3f928309ea0880cff8...

...rrata and Bugfix Advisory 2016:0219 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0219.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 73d61f9340d74170083f044b4dd7747065a0be6c12727011116478b8361cdd94 opencryptoki-3.2-5.el7_2.i686.rpm eb969ada798fd81c518c72f0e2b50d54004ed565f31cc30596fc5983c19ea7eb opencryptoki-3.2-5.el7_2.x86_64.rpm 0a135b3cab2127181f71136065f5e30fc88c9a70c1a17e57a0b405de25edd576 opencryptoki-devel-3.2-5.el7_2.i686.rpm d16d2c9026a4020cb3c256c6f3b021d00775e660abc89490c9ec9a672b6bad1f open...

...Errata and Bugfix Advisory 2019:3980 Upstream details at : https://access.redhat.com/errata/RHBA-2019:3980 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 4b0b60ddbd8ebfcb62f03ca9ce1d6eec5833bfad687b25b64d7b8f5001424d3a opencryptoki-3.11.0-5.el7_7.i686.rpm 422082093280213308b7907fabe544142cfbd5aedaa23bd5e5a95b2c89368c85 opencryptoki-3.11.0-5.el7_7.x86_64.rpm 6985d2930f6001f0abbad4facea784d23071bd40376dbc916bbcf270e69b6f09 opencryptoki-devel-3.11.0-5.el7_7.i686.rpm cd3545480bc4e83e9c9c975a64d8c4a35fba3fd220c4e03e14bd826533e07...

...Errata and Bugfix Advisory 2020:5031 Upstream details at : https://access.redhat.com/errata/RHBA-2020:5031 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: de3aeef4443f60aa6795ee64bd6c2d7bf33a2b82ff3b9119c255830faa49f4c4 opencryptoki-3.12.1-3.el7_9.i686.rpm 42e853b9aba262824af1f06fbf3521c29f339081059d0bab496fb26bc0f3ab17 opencryptoki-3.12.1-3.el7_9.x86_64.rpm 66aed3864f29912482e74e2a3bb2ea45d7402aa197018dc629d10fcebcd960ab opencryptoki-devel-3.12.1-3.el7_9.i686.rpm 7c4bcb2fae18cd595ec3e02100dba37726442206905efcc349d085f60cef4...

...Errata and Bugfix Advisory 2014:0257 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0257.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ad8d228cb302b6f835150764c086ce01c07f67b28970d7dae559bcbded9f7c27 opencryptoki-2.4.3.1-1.el6_5.1.i686.rpm 60d598475b52022f01b9eab03c2c147b0f00ac8f16a9ae7cee72f100b839d589 opencryptoki-devel-2.4.3.1-1.el6_5.1.i686.rpm aa098fa85fe3782074ae66093560e7098a8728214a63aa9799c471365df8017a opencryptoki-libs-2.4.3.1-1.el6_5.1.i686.rpm x86_64: 22e86a6edb9e4a7e64453f6e41c59a7c502149de...

...tos-announce-request at centos.org You can reach the person managing the list at centos-announce-owner at centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:1988 CentOS 7 opencryptoki BugFix Update (Johnny Hughes) 2. CEBA-2014:1990 CentOS 7 libkkc FASTTRACK BugFix Update (Johnny Hughes) 3. CEBA-2014:1994 CentOS 7 ibus-kkc FASTTRACK BugFix Update (Johnny Hughes) 4. CEBA-2014:1989 CentOS 6 resource-agents BugFix Update (Johnny Hughes) 5. CEBA-2014:196...

CentOS Errata and Bugfix Advisory 2010:0699 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0699.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: df73e4505e30d94056831e7e6f1d9f43 openCryptoki-2.2.4-22.el5_5.1.i386.rpm b38b8b4d5b2f25977690774588b79f25 openCryptoki-2.2.4-22.el5_5.1.x86_64.rpm 9529d5c96a88ffecb28b648ee1723951 openCryptoki-devel-2.2.4-22.el5_5.1.i386.rpm 14d0ce467b1d7b1b7addf1d89199859a openCryptoki-devel-2.2.4-22.el5_5.1.x86_64.rpm Source: e1c510c0ed30783a18ab126a11806...

...your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0700 CentOS 5 x86_64 apr-util Update (Karanbir Singh) 2. CEBA-2010:0700 CentOS 5 i386 apr-util Update (Karanbir Singh) 3. CEBA-2010:0699 CentOS 5 x86_64 openCryptoki Update (Karanbir Singh) 4. CEBA-2010:0699 CentOS 5 i386 openCryptoki Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 17 Sep 2010 20:41:47 +0000 From: Karanbir Singh <kbsingh at centos.org> Subject: [CentOS-announ...

CentOS Errata and Bugfix Advisory 2010:0699 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0699.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c90241d386d2b0faa14ef472bd6433dd openCryptoki-2.2.4-22.el5_5.1.i386.rpm c701f002e13b6f2cf9d80bdd204a23c5 openCryptoki-devel-2.2.4-22.el5_5.1.i386.rpm Source: e1c510c0ed30783a18ab126a118064ad openCryptoki-2.2.4-22.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos at irc.freenode.net

...r Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0260 CentOS 6 ghostscript-fonts FASTTRACK Update (Johnny Hughes) 2. CEBA-2014:0256 CentOS 6 libvirt Update (Johnny Hughes) 3. CEBA-2014:0257 CentOS 6 opencryptoki Update (Johnny Hughes) 4. CESA-2014:0255 Moderate CentOS 5 subversion Update (Johnny Hughes) 5. CESA-2014:0255 Moderate CentOS 6 subversion Update (Johnny Hughes) 6. CEBA-2014:0260 CentOS 6 ghostscript-fonts FASTTRACK Update (Johnny Hughes) -----------------------------------------...

This patchset allow syscalls (flock, ipc, getuid, geteuid and ioctl), so openssl engines, e.g. OpenSSL-ibmca and OpenSSL-ibmpkcs11, can work and communicate with the crypto cards during ssh login. 1. The flock and ipc are allowed only for s390 architecture. They are needed for openCryptoki project (PKCS#11 implementation), as the ibmpkcs11 engine makes use of openCryptoki. For more information, please check here: https://sourceforge.net/projects/opencryptoki/ 2. getuid and geteuid are allowed to any architecture as this is also needed by the distros. libica and other crypto librarie...

...OS 7 sssd BugFix Update (Johnny Hughes) 9. CESA-2019:3981 Important CentOS 7 389-ds-base Security Update (Johnny Hughes) 10. CEBA-2019:3983 CentOS 7 util-linux BugFix Update (Johnny Hughes) 11. CEBA-2019:3985 CentOS 7 iproute BugFix Update (Johnny Hughes) 12. CEBA-2019:3980 CentOS 7 opencryptoki BugFix Update (Johnny Hughes) 13. CESA-2019:3976 Low CentOS 7 tcpdump Security Update (Johnny Hughes) 14. CEBA-2019:3970 CentOS 7 ca-certificates BugFix Update (Johnny Hughes) 15. CEBA-2019:3973 CentOS 7 sos BugFix Update (Johnny Hughes) 16. CEBA-2019:3977 CentOS 7 numactl Bug...

...r Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2009:1684 CentOS 5 x86_64 vixie-cron Update (Karanbir Singh) 2. CEBA-2009:1684 CentOS 5 i386 vixie-cron Update (Karanbir Singh) 3. CEBA-2009:1685 CentOS 5 x86_64 openCryptoki Update (Karanbir Singh) 4. CEBA-2009:1685 CentOS 5 i386 openCryptoki Update (Karanbir Singh) 5. CEBA-2009:1686 CentOS 5 i386 ksh Update (Karanbir Singh) 6. CEBA-2009:1686 CentOS 5 x86_64 ksh Update (Karanbir Singh) 7. CEBA-2009:1691 CentOS 5 x86_64 xorg-x11-server Update (...

On Tue, 28 Feb 2017, Eduardo Barretto wrote: > On 13-02-2017 13:23, Eduardo Barretto wrote: > > This patch enables specific ioctl calls for ICA crypto card on s390 > > platform. Without this patch, users using the IBMCA engine are not able > > to perform ssh login as the filter blocks the communication with the > > crypto card. > > > > Signed-off-by: Harald

...ate. > > As far as I know it is an optional piece of hardware, that may or may > not be present in the system. OpenSSL is typically configured to load > the libica engine (alongside any other possibly available ones). > > As for the syscalls, would > https://sourceforge.net/p/opencryptoki/libica/ci/master/tree/src/ica_api.c > and > http://lxr.free-electrons.com/source/arch/s390/include/uapi/asm/zcrypt.h#L259 > be enough? > >> Does it provide substantial benefit for the crypto used in the pre-auth >> stage of the protocol? (private key operations and DH/ECDH...

...OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: Smartcard Assignee: unassigned-bugs at mindrot.org Reporter: jjelen at redhat.com After testing and discussion with Nikos about Smart cards, and after finding out that opencryptoki-swtok doesn't even store PUBLIC_KEY on the card which makes it unusable with openssh (sending public key in first step) I think we should be able to handle this also different way. Some tools are yet working this feature of ssh around by creating self-signed certificates [1]. Before openssh-7...

...zone selection dialog'. Most propably that graphical map hits something sweet, like this FP-unit feature, while making some math ops. I'd like to hear if this is OK on real iron. Text mode installation is tested for both archs several times, so it should be working. s390x does not contain openCryptoki. That would pull in moderate amount of s390 arch stuff, so it's left out. The s390x is clean 64bit build, so only the glibc and glibc-devel included from s390 (those are needed to build for example gcc). Targetting for Hercules users having something to play with, the hardware crypto unit suppo...

...s the right way to handle smart cards. The use case that my organization wants is to use the TPM chips available in most machines as our primary smartcard mechanism, supporting any other card on machines that don't have TPM chips. The TPM chip is supported by an alternative pkcs#11 library, opencryptoki, and thus is unusable from applications that use opensc directly, because it's not a pkcs#15 card. This is just one use-case of why having simple pkcs#11 support is much more valuable then opensc-only, as is written in the opensc introduction and the RSA pkcs#15 specification. Alon's...

...P5 Component: Smartcard Assignee: unassigned-bugs at mindrot.org Reporter: jjelen at redhat.com Based on the report in our bugzilla [1] (though on older version and with different use case), I can reproduce the same behaviour with two different key pairs on smartcard (opencryptoki softtoken), when only the second is accepted. This is caused by the fact, that when the public key is read from the card, its CKA_ID is not stored alongside with the public key and ssh later does not know which key use for signing (use the first one implicitly, since it is first result of search)....

...zone selection dialog'. Most propably that graphical map hits something sweet, like this FP-unit feature, while making some math ops. I'd like to hear if this is OK on real iron. Text mode installation is tested for both archs several times, so it should be working. s390x does not contain openCryptoki. That would pull in moderate amount of s390 arch stuff, so it's left out. The s390x is clean 64bit build, so only the glibc and glibc-devel included from s390 (those are needed to build for example gcc). Targetting for Hercules users having something to play with, the hardware crypto unit suppo...