File _patchinfo of Package patchinfo.27719
<patchinfo incident="27719">
<issue tracker="jsc" id="PED-581"></issue>
<issue tracker="jsc" id="PED-621"></issue>
<issue tracker="jsc" id="PED-597"></issue>
<issue tracker="jsc" id="PED-629"></issue>
<issue tracker="bnc" id="1202365">FIPS 140-3 Libica: requirements</issue>
<packager>msmeissn</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for libica, openssl-ibmca, openCryptoki</summary>
<description>This update for libica fixes the following issues:
libica was upgraded to version 4.2.0 (jsc#PED-581, bsc#1202365).
Note that the major library versions was changed from libica.so.3 to libica.so.4.
Features:
- Display build info via icainfo -v
- New API function ica_get_build_version()
- Display fips indication via icainfo -f
- New API function ica_get_fips_indicator()
- New API function ica_aes_gcm_initialize_fips()
- New API function ica_aes_gcm_kma_get_iv()
- New API function ica_get_msa_level()
Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).
v4.1.1:
- Fix aes-xts multi-part operations
v4.1.0
- FIPS: make libica FIPS 140-3 compliant
- New API function ica_ecdsa_sign_ex()
- New icainfo output option -r
Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629)
v4.0.3
- Reduce the number of open file descriptors
- Various bug fixes
v4.0.2
- Various bug fixes
v4.0.1
- Various bug fixes
- Compute HMAC from installed library
v4.0.0
- NO_SW_FALLBACKS is now the default for libica.so
- Removed deprecated API functions including tests
- Introduced 'const' for some API function parameters
- icastats: new parm -k to display detailed counters
This update also provides rebuilds of openssl-ibmca and openCryptoki against the new libica.
openssl-ibmca was updated:
- Upgraded to version 2.3.1 (jsc#PED-597)
- Adjustments for libica 4.1.0
- First version including the provider
- Fix for engine build without OpenSSL 3.0 sources
- Fix PKEY segfault with OpenSSL 3.0
- Build against libica 4.0
</description>
</patchinfo>