File gnome-keyring.changes of Package gnome-keyring
-------------------------------------------------------------------
Sun Sep 21 10:44:34 EST 2008 - mboman@suse.de
- Update to version 2.24.0:
+ Update documentation for functions in gp11 library
+ Ungrab the keyboard properly when a password prompt is minimized.
+ Report errors from keyboard grabbing.
+ Fix build problems with gcc 4.3.
+ PKCS#11 initialize compatibility fix for OpenSC.
+ Make all errors from prompt process go to syslog.
+ When prompting for a password on import, don't go into an endless
+ loop for blank passwords.
+ Fix problems with PK indexes overwriting one another.
+ Don't add additional extensions on storage files when the extension
is already correct.
+ Load all objects when a PKCS#11 session is opened, regardless of
whether a C_FindObjects is run or not.
-------------------------------------------------------------------
Sat Sep 20 06:18:56 CEST 2008 - vuntz@novell.com
- Rewrite gnome-keyring-check-session.patch to be more correct:
ie, don't return too early from functions, and now check the
DESKTOP_SESSION environment variable that will be set by GDM.
- Change the gdm pam configuration to have auto_start for
pam_gnome_keyring.so for session, and not auth. This is what
upstream recommends and it's also required to have a proper
behavior with the above patch.
- This is part of bnc#427744.
-------------------------------------------------------------------
Fri Sep 12 10:19:08 CEST 2008 - aj@suse.de
- Add directory ownership for /usr/share/gtk-doc/html/gp11.
-------------------------------------------------------------------
Tue Sep 9 15:55:20 EST 2008 - mboman@novell.com
- Update to version 2.23.92:
+ Build fix for Solaris
+ Import the LANG environment variable into daemon enviroment
so that dialogs display with correct translations.
-------------------------------------------------------------------
Thu Sep 04 19:48:25 CEST 2008 - mboman@novell.com
- Update to version 2.23.91:
+ Use 'Change' instead of 'Create' when prompting the user for
a password to change keyring password.
+ Fix RSA signing with X509 mechanism.
+ Tweaking of the asynchronous scheduling to prevent hangs.
+ Add some documentation for GP11 library.
+ Translation updates.
+ Build fixes.
-------------------------------------------------------------------
Tue Aug 26 19:48:25 CEST 2008 - mboman@novell.com
- Update to version 2.23.90:
+ Use 'Create' button instead of 'OK' when prompting the user for
a password to create a new keyring.
+ Fix more cases where 'Deny' choice by a user resulted in
more subsequent prompts.
+ Automatically create non-existant directories when storing files.
+ Fix problem prompting for the same password twice when parsing a
PFX or PKCS#12 file.
+ Don't offer to store password during import operation.
+ Don't try to store certificates encrypted on the disk.
+ Add command line tool for importing of keys and certificates.
+ Fix problems with SSH agent not unlocking keys properly.
+ Build fixes.
-------------------------------------------------------------------
Tue Aug 05 19:48:25 CEST 2008 - captain.magnus@opensuse.org
- Update to version 2.23.6:
+ If the user denies a prompt, then don't prompt the same prompt
again for that connection to the daemon.
+ Bug fixes for loading of SSH keys.
+ Add gconf schema for noting the user's configured PKCS#11 modules.
+ Update and bug fixes for the new GP11 library.
+ Better reference counting of internal objects.
+ When a certificate is in the roots storage, assume it is a CA if
no basic constraints are present.
+ Add ability of PKCS#11 module to accept a string on its reserved
initialization argument, similar to NSS's libsoftkn3 module.
+ Translation fixes.
+ Build fixes.
-------------------------------------------------------------------
Sat Aug 02 19:48:25 CEST 2008 - captain.magnus@opensuse.org
- Update to version 2.23.5:
+ Load all SSH keys in ~/.ssh named id_?sa*, not just id_rsa
and id_dsa. Also load public portions of keys when needed ie: *.pub
+ Include new GP11 library, which is a GLib wrapper for PKCS#11
+ Add ability to import keys/certificates to PKCS#11.
+ Better storage and creation of PKCS#11 objects.
+ Start using GTest for new unit testing.
+ Better indexing of keys and certificates.
+ Better buffer handling, and threading fixes. [Jon Burgress]
+ Fix warnings in logs caused by programs checking whether
gnome-keyring is available.
+ Standardize on libgcrypt random number generator.
+ Add --disable-acl-prompts option to disable all ACL prompting [Colin Walters]
+ Build fixes.
-------------------------------------------------------------------
Wed Jun 18 19:48:25 CEST 2008 - maw@suse.de
- Update to version 2.22.2:
+ Streamline the importing of keys and make the proper prompts
show up consistently; better fixes for this to come in 2.24.x
+ Don't show 'location' field in most password prompts
+ Return serial number of certificates properly to requesting
programs
+ Fix crash when receiving certain HAL events.
-------------------------------------------------------------------
Thu May 1 05:24:46 CEST 2008 - hpj@suse.de
- Remove gnome-keyring-0.4.6-casa-integration.patch. GNOME can now
replicate the login password for use in the default keyring
without Casa's help.
-------------------------------------------------------------------
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
- added baselibs.conf file to build xxbit packages
for multilib support
-------------------------------------------------------------------
Thu Apr 10 00:53:56 CEST 2008 - maw@suse.de
- Update to version 2.22.1:
+ Add SSH agent protocol 1 support
+ Make 'ssh-add -D' lock any SSH private keys that gnome-keyring
is automatically loading
+ Reconnect to system DBus whenever the system bus restarts
+ Log to syslog even when running in the foreground
+ Add a configure option to disable building of the SSH agent
+ Build fixes.
-------------------------------------------------------------------
Fri Mar 14 03:16:20 CET 2008 - maw@suse.de
- Update to version 2.22.0:
+ Minor build fix.
-------------------------------------------------------------------
Tue Mar 4 18:43:50 CET 2008 - maw@suse.de
- Update to version 2.21.92:
+ Sync up user's session environment with the daemon, so that
things like X authentication, DBUS, etc. work properly
+ Shutdown socket connections properly, so things don't hang,
when wrong versions of daemon/library are used
+ Limit PKCS#12 parsing to a clearly defined subset of the
format
+ Decrypt PKCS#12 with empty passwords properly
+ Updated translations.
-------------------------------------------------------------------
Mon Feb 18 20:46:47 CET 2008 - maw@suse.de
- Update to version 2.21.91:
+ Don't prompt for a password from the PAM module since
gnome-keyring is not an authenticator
+ Check that PKCS#11 socket connections come from same user
+ Don't lock the entire gnome-keyring-ask process in memory,
just the password text; this works better when less non-pageable
memory is available
+ Basic serializing of certificates and keys
+ Build fixes
+ Updated translations.
-------------------------------------------------------------------
Tue Jan 29 10:00:55 CST 2008 - maw@suse.de
- Update to version 2.21.90:
+ Proper support for creating and destroying objects through
PKCS#11
+ Support for setting PKCS#11 attributes
+ Fix hanging of daemon under certain conditions
+ Add gconf setting for determining which components of the
daemon (such as SSH) are run at startup
+ Better parsing of objects and prompting for passwords in
PKCS#12 files
+ Calculate trust and purpose/usage of certificates
+ Mark certain key/certificate directories as special requiring
certain special treatment (such as the CA root store, SSH
keys etc...)
+ Add support for unencrypted keyrings which are used when
the user specifies a blank password
+ Fix problem where most keyrings were being treated as insecure
from the point of view of storing passwords for keys or
certificates
+ Fix race condition that is causing deadlocks and freezes
+ Misc fixes.
-------------------------------------------------------------------
Tue Jan 22 07:44:15 CET 2008 - hpj@suse.de
- Remove gnome-keyring-2.21.4-getenv-returns-null.patch, and fix
gnome-keyring-check-session.patch instead.
-------------------------------------------------------------------
Mon Jan 21 04:43:15 CET 2008 - hpj@suse.de
- Add gnome-keyring-2.21.4-getenv-returns-null.patch to fix
GNOME bug #510902.
-------------------------------------------------------------------
Sat Jan 12 08:01:04 CET 2008 - hpj@suse.de
- Install the D-Bus service file. Fixes Novell bug #353198.
-------------------------------------------------------------------
Thu Dec 20 14:48:35 CST 2007 - maw@suse.de
- Fix build on x86_64.
-------------------------------------------------------------------
Thu Dec 20 13:40:10 CST 2007 - maw@suse.de
- Update to version 2.21.4:
+ Build fixes for various platforms and against various libraries
+ Print few useless warning messages
+ Simpler API for accessing and storing passwords
+ PAM module now works with SELinux
+ Includes an SSH agent
+ Added basic x.509 certificate and key store
+ PKCS#11 module
+ ASN.1 support
- Don't package license files.
-------------------------------------------------------------------
Wed Oct 10 16:26:26 CEST 2007 - sbrabec@suse.cz
- Replace old pam_keyring.
-------------------------------------------------------------------
Mon Sep 17 19:46:45 CEST 2007 - mauro@suse.de
- Updated to version 2.20.
+ Translation fixes (Claude Paroz)
-------------------------------------------------------------------
Mon Sep 10 19:58:49 CEST 2007 - crivera@suse.de
- Add a patch to fix Bug #186189. We only start gnome-keyring
daemon if the WINDOWMANAGER environment variable is set to
/usr/bin/gnome.
-------------------------------------------------------------------
Mon Aug 27 19:18:57 CEST 2007 - cgaisford@novell.com
- Updated to 2.19.91 to incorporate needed fixes for Novell bugs: 298975,
299730, 299621, 304189
- Builds with newer versions of DBus [Theppitak Karoonboonyanan]
- In the PAM module we now support starting gnome-keyring-daemon when
- the user's session actually starts, rather than during password validation.
- This makes us more solid and sane with GDM and well behaved PAM using
- applications. [Chris Rivera]
- In the PAM module check that the socket is owned by the same user, before
- sending the login password there.
- Don't read from /dev/random when not needed. This makes startup faster
- in many cases, as it won't block for entropy.
- Get around more optimizations that cancel out wiping of strings in
- memory before freeing.
- Fix problem where keyrings are created in wrong directory [Nathaniel McCallum]
- Incorporated security fixes from Novell
- Fix crashers when the ask dialog sends back bad data.
- Now builds on Solaris [Damien Carbery]
- Configure PAM module directory better [Matthias Clasen]
- Fix memory leaks
-------------------------------------------------------------------
Wed Aug 8 01:11:19 CEST 2007 - maw@suse.de
- Use %fdupes
- Split off a -lang subpackage.
-------------------------------------------------------------------
Thu Aug 2 22:39:42 CEST 2007 - jpr@suse.de
- Build with pam support in gnome-keyring-pam
-------------------------------------------------------------------
Thu Aug 2 19:34:07 CEST 2007 - maw@suse.de
- Update to version 2.19.6.1:
+ Sync with current gnome version numbers
+ Build fixes
+ Use libgcrypt instead of hand-rolled encryption algorithms
+ Code refactoring and cleanup
+ Error and warning messages are logged to syslog when running
as a daemon
+ Use non-pageable memory for secrets and passwords
+ Use NULL consistently in the API to represent the default
keyrong
+ Improved prompts
+ Handle unix signals properly
+ Keyrings supported on removeable drives
+ New API
+ API docs
+ Unit tests are run automagically when building
+ Misc. bug fixes
-------------------------------------------------------------------
Wed Apr 11 11:41:13 CDT 2007 - maw@suse.de
- Update to version 0.8.1, which
- Fixes a crash when called with a NULL keyring
- Has an updated translation for the gl locale.
-------------------------------------------------------------------
Wed Apr 4 15:45:19 CDT 2007 - maw@suse.de
- Update to version 0.8
- b.g.o 407160 and 339137.
-------------------------------------------------------------------
Fri Mar 9 11:29:48 CST 2007 - maw@suse.de
- Update to version 0.7.91
- Changes in version 0.7.91 are:
* Add method for library to discover daemon via DBus. Adds soft
DBus dependency.
* Fixes for building on kFreeBSD.
- Changes in version 0.7.3 are:
* Fix endless loop when creating a keyring and a file by that name
already exists.
* Fix crasher when deleting session keyring.
* Fix crasher when doing find operation with NULL attribute string.
* Sync files to disk after writing to keyring.
- Changes in version 0.7.2 are:
* Don't have multiple password dialogs presented for the same
keyring
- Changes in version 0.7.1 are:
* Added GNOME_KEYRING_ITEM_APPLICATION_SECRET which allows an item
to be for a single application only with strict access controls.
* New function gnome_keyring_item_get_info_full(_sync) which allow
retrieval of item meta data without the secret, thus not incurring
an ACL prompt.
* Translation updates
-------------------------------------------------------------------
Tue Feb 27 09:42:07 CST 2007 - maw@suse.de
- Create a -doc subpackage (#248813).
-------------------------------------------------------------------
Thu Dec 14 17:10:44 CET 2006 - sbrabec@suse.cz
- More spec file cleanups.
-------------------------------------------------------------------
Wed Dec 13 15:56:31 CST 2006 - maw@suse.de
- Move to /usr
- Do some specfile cleanup.
-------------------------------------------------------------------
Thu Sep 14 19:33:34 CEST 2006 - jhargadon@suse.de
- update to version 0.6.0
- NetBSD fixes
- Crash fix
- Typo fix
- Translations
-------------------------------------------------------------------
Thu Aug 31 00:06:48 CEST 2006 - jhargadon@suse.de
- update to version 0.5.2
- Translation updates
- Better title in docs
- Fixed crashes
- New function: gnome_keyring_item_grant_access_rights_sync
-------------------------------------------------------------------
Thu Aug 24 23:34:57 CEST 2006 - ro@suse.de
- copy CASA headers to local source and remove CASA-devel
from BuildRequires to avoid build-dep cycle
(CASA needs gtk-sharp needs gnome-keyring needs CASA)
-------------------------------------------------------------------
Fri Aug 11 23:00:22 CEST 2006 - jhargadon@suse.de
- update to version 0.5.1
- Support changing password of a keyring
- Create ~/.gnome2 if needed
- Save keyring when an ACL is added
- Add password strength meter
- Fix return value for some sync calls
- Translation updates
- Fix crash when asking for password
- Fix --disable-nls
-------------------------------------------------------------------
Sat May 13 03:57:49 CEST 2006 - hpj@suse.de
- Add a patch to provide better CASA integration. CASAManager is
allowed by default, and the default keyring's password is saved
in CASA, making most of the annoying dialogs go away. Part of
fix for Novell bug #174093.
-------------------------------------------------------------------
Tue May 9 22:56:48 CEST 2006 - joeshaw@suse.de
- Add a patch to only display the "unlock keyring" dialog once
per keyring, no matter how many different apps request it.
(bnc #170587) Also fixes a crash in gnome-keyring-ask if you
clicked "Deny".
-------------------------------------------------------------------
Mon May 8 20:21:01 CEST 2006 - joeshaw@suse.de
- Add a patch to correctly escape for markup, and set the markup
flag on the label. (bnc #172603)
-------------------------------------------------------------------
Wed Jan 25 21:31:44 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Wed Nov 30 22:34:30 CET 2005 - gekker@suse.de
- Update to version 0.4.6
-------------------------------------------------------------------
Thu Oct 13 18:40:37 CEST 2005 - gekker@suse.de
- Update to version 0.4.5
-------------------------------------------------------------------
Mon Sep 5 10:23:21 CEST 2005 - mmj@suse.de
- Update to version 0.4.4 (GNOME 2.12)
-------------------------------------------------------------------
Fri Jul 22 18:31:58 CEST 2005 - gekker@suse.de
- Update to version 0.4.3
-------------------------------------------------------------------
Wed Jun 1 18:16:23 CEST 2005 - sbrabec@suse.cz
- Fixed devel requirements.
-------------------------------------------------------------------
Wed Mar 9 20:22:56 CET 2005 - gekker@suse.de
- Update to version 0.4.2 (GNOME 2.10).
-------------------------------------------------------------------
Wed Jan 19 22:48:01 CET 2005 - clahey@suse.de
- Updated to version 0.4.1.
-------------------------------------------------------------------
Tue Nov 23 20:10:02 CET 2004 - gekker@suse.de
- Update version to 0.4.0
-------------------------------------------------------------------
Tue Nov 2 17:14:57 CET 2004 - ro@suse.de
- locale rename: no -> nb
-------------------------------------------------------------------
Tue Oct 12 12:20:29 CEST 2004 - sbrabec@suse.cz
- Fixed libexecdir for bi-arch (#47050).
-------------------------------------------------------------------
Mon Jun 28 11:39:08 CEST 2004 - hhetter@suse.de
- reduce #neededforbuild
-------------------------------------------------------------------
Mon Apr 26 15:47:03 CEST 2004 - sbrabec@suse.cz
- New SuSE package, version 0.2.1 (GNOME 2.6).
