File gnome-keyring.changes of Package gnome-keyring
-------------------------------------------------------------------
Fri Dec 4 21:19:27 CET 2009 - vuntz@opensuse.org
- Split the libraries in their own packages, to avoid useless
dependencies for packages depending on libgnome-keyring0 but that
don't want the whole gnome-keyring (which pulls gtk2). This means
we now have libgnome-keyring0, libgcr0, libgp11-0 and
libgp11-modules subpackages. (Thanks to Debian: summaries and
descriptions are inspired by the Debian ones.)
- Remove .la files.
- Do not self-obsolete for gnome-keyring-doc and pam_keyring.
- Move the pam-confire PreReq to the pam subpackage.
-------------------------------------------------------------------
Fri Nov 13 17:46:05 CET 2009 - vuntz@opensuse.org
- Update to version 2.28.1:
+ Fix support for SSH RSA1 keys.
+ Fix a delay when the daemon quits.
+ Use default D-Bus timeout when finding daemon.
+ Make custom pkcs11 constants unsigned longs.
+ Use unsigned long for module handle counter.
+ Fix assertion when releasing secure memory block.
- Drop gnome-keyring-no-logout-delay.patch: fixed upstream.
- Drop gnome-keyring-fix-ssh1-agent.patch: fixed upstream.
- Update gnome-keyring-check-session.patch to apply without fuzz.
-------------------------------------------------------------------
Thu Oct 8 15:59:38 CEST 2009 - vuntz@opensuse.org
- Add gnome-keyring-fix-ssh1-agent.patch to make the ssh agent
support rsa1 keys again. Fix bnc#540515.
-------------------------------------------------------------------
Tue Oct 6 11:16:11 CEST 2009 - vuntz@opensuse.org
- Update gnome-keyring-pam-auth-prompt-password.patch to not prompt
for password if use_authtok option is used.
-------------------------------------------------------------------
Fri Oct 2 17:53:32 CEST 2009 - vuntz@opensuse.org
- Add gnome-keyring-no-logout-delay.patch to fix delay during
logout.
-------------------------------------------------------------------
Tue Sep 22 17:37:54 CEST 2009 - dimstar@opensuse.org
- Update to version 2.28.0:
+ Fix build problems with -as-needed.
- Remove export SUSE_ASNEEDED.
-------------------------------------------------------------------
Mon Sep 14 10:20:16 CEST 2009 - vuntz@opensuse.org
- Update to version 2.27.92:
+ Some uses of glib memory routines to explicitly allocate
memory.
+ Fix erroneous assertion hit by gtk-doc and tests.
+ Revert change which bumped libtasn1 required to 1.0.
+ Fix logic for only_if option in PAM module.
+ Handle unix signals on one thread.
+ Better daemon startup and forking logic.
+ Optional use of automake silent rules when available.
+ No warning when a disk doesn't have a UDI identifier.
- Drop gnome-keyring-pam-fix-only_if.patch: fixed upstream.
- Add SUSE_ASNEEDED=0 to fix build.
-------------------------------------------------------------------
Sun Aug 30 20:12:38 CEST 2009 - vuntz@novell.com
- Add gnome-keyring-pam-fix-only_if.patch to fix logic in pam
module when using only_if.
-------------------------------------------------------------------
Mon Aug 10 21:27:22 CEST 2009 - vuntz@novell.com
- Update to version 2.27.90:
+ Build fixes on Solaris and FreeBSD.
+ Take length of ASN.1 elements into account, when parsing.
-------------------------------------------------------------------
Wed Jul 29 16:52:04 CEST 2009 - vuntz@novell.com
- Drop gnome-keyring-auto-start-if-compatibility.patch now that
pam-config has been updated to support only_if in the pam config.
- Change pam-config call in post to use "--gnome_keyring-auto_start
--gnome_keyring-only_if=gdm" instead of
"--gnome_keyring-auto_start_if=gdm""
- PreReq pam-config at least 0.72 for those changes.
-------------------------------------------------------------------
Tue Jul 28 17:21:23 CEST 2009 - lmedinas@gmail.com
- Update to version 2.27.5:
+ Add support for lifetime constrained SSH identities.
+ Use GtkBuilder files where glade files were used.
+ Write private key files with tighter file permissions.
+ Use gio instead of libhal for monitoring volumes.
+ Updated translations.
- Remove hal-devel from BuildRequires not needed anymore.
-------------------------------------------------------------------
Mon Jul 20 01:09:59 CEST 2009 - vuntz@novell.com
- Update to version 2.27.4:
+ Insurance in parsing keyring format for future changes.
+ Add 'use_authtok' option to pam module.
+ Test utility fix.
+ Add 'only_if=' option to pam module.
+ Make 'Password:' prompt translatable in pam module.
+ Use libgcrypt to generate iv/salt where needed.
+ Remove old cu-test style unit tests.
+ Code refactoring and cleanup, removed 'common' component.
+ Auto generated ChangeLog.
+ Cleanup unit tests, and make them run with 'make check'
- Changes from version 2.26.3:
+ Build fixes.
+ Fix problem with RSA key sizes that are not a multiple of 8.
This affected use of SSH keys in particular.
+ Fix crash related to secure memory.
- Drop gnome-keyring-pam-auto-start-if.patch: fixed upstream.
- Drop gnome-keyring-pam-translate.patch: fixed upstream.
- Remove AutoReqProv: it's default now.
- Add gnome-keyring-auto-start-if-compatibility.patch since
pam-config does not know yet about only_if. It will be removed
once pam-config will be updated.
-------------------------------------------------------------------
Mon Apr 13 00:49:03 CEST 2009 - mboman@suse.de
- Update to version 2.26.1:
+ Fix many problems with the new secure memory allocator
+ DBus now automatically starts the gnome-keyring service
properly
+ When auto activating the gnome-keyring DBus service, check for an
already running daemon
+ Don't print critical warnings when registering with DBus fails
+ Bump glib dependency
+ Add DBus method for getting the gnome-keyring environment
variables
+ Fix crash when prompting to unlock the keyring
+ Initialize daemon with LOGNAME and USERNAME environment
variables
+ Build fixes
- Merge -doc into -devel as it only contains gtk-doc
- Move gtk-doc from main to -devel
-------------------------------------------------------------------
Sun Mar 22 00:34:30 CET 2009 - mboman@suse.de
- Modify baselibs.conf so that if pam-32bit is installed on x86_64,
gnome-keyring-pam-32bit and gnome-keyring-32bit is installed as
well.
-------------------------------------------------------------------
Fri Mar 20 00:15:03 CET 2009 - mboman@suse.de
- Fix an issue where Requires on libtasn1-devel and gtk2-devel was
added to -pam instead of -devel
-------------------------------------------------------------------
Sat Mar 14 22:31:33 CET 2009 - mboman@suse.de
- Update to version 2.26.0:
+ Implement support for running gnome-keyring-daemon under
valgrind
+ Checks for asn1Parser tool when configuring
+ Only automatically expose PKCS#11 public key objects for
private keys
+ Have the SSH agent only log into the token when we have a
private key that we want to access
+ Disable input method in password
- Add libtasn1-devel and gtk2-devel to Requires for devel package
-------------------------------------------------------------------
Fri Mar 6 02:18:42 CET 2009 - vuntz@novell.com
- Update to version 2.25.92:
+ Fix problems when multiple processes tried to initialize the
gnome-keyring-daemon at the same time, often resulting in a
user session that hung on login.
+ Add compatibility support for loading SSH unlock passwords from
previous versions of gnome-keyring.
+ Fix compiler warnings on 32-bit systems.
+ Fix uninitialized variable usage. These resulted in crashes.
+ Initialize PKCS#11 tokens before importing certificates or keys
to them. Remove previous auto-initialize idea.
+ Add basic support for PKCS#11 SO logins.
+ Fix focus issues in the import certificate/key dialog.
+ When looking for PKCS#11 objects, skip tokens that have not
been initialized.
+ Exit properly when an error occurs on importing a certificate
or key.
+ Hash objects when storing them in PKCS#11 user-store and
validate the hashes when loading them.
+ Build fix on Solaris
+ If login keyring doesn't exist when changing a PAM password,
don't create it automatically.
+ Close stdin/stdout when not running the daemon in foreground.
This fixes a regression in scripts starting
gnome-keyring-daemon.
- Remove -fno-strict-aliasing from CFLAGS.
- Use makeinstall (install-pam is no longer useful)
- Make sure fdupes is called last (since we might changes some
files before).
-------------------------------------------------------------------
Sun Feb 22 01:32:53 CET 2009 - vuntz@novell.com
- Better document the cleanup of /etc/pam.d/gdm
-------------------------------------------------------------------
Thu Feb 19 02:27:08 CET 2009 - vuntz@novell.com
- Add gnome-keyring-pam-auth-prompt-password.patch: we make the pam
module prompt for a password during auth when none was set.
- Use pam-config instead of hack in post/postun of the pam package.
We have to manually remove the pam_gnome_keyring.so from
/etc/pam.d/gdm in post, though.
- Should fix bnc#466732.
- Add gnome-keyring-pam-translate.patch to translate the prompt
strings in the pam module, using the pam translations.
-------------------------------------------------------------------
Mon Feb 16 17:49:47 CET 2009 - sbrabec@suse.cz
- Added support for translation-update-upstream (FATE#301344).
-------------------------------------------------------------------
Sat Feb 14 22:19:45 CET 2009 - mboman@suse.de
- Update to version 2.25.91:
+ Complete certificate details display in the gcr library
+ Correctly escape prompt markup
+ Show correct MD5 hash in certificate display
+ Overhaul the secure memory allocator to have memory guards,
and also be more sparing with secure memory
+ Add C++ header guards to public headers
+ Prompt to initialize new PKCS#11 tokens with a password
+ Fix output of RSA keys to be interoperable
+ Translation fixes
+ Fix problems importing certificates and keys
+ More code reorganization
+ Add support for netscape trust objects, so Root CA certificates
can be trusted by NSS
+ Fixes to the PKCS#11 headers on 64-bit systems
- Remove gnome-keyring-bgo570295-use-markup-correctly.patch. Fixed
upstream
-------------------------------------------------------------------
Tue Feb 3 11:16:53 EST 2009 - mboman@suse.de
- Update to version 2.25.90:
+ Add certificate UI bit to gcr library.
+ Can now again clear the cached authentication from an SSH key.
+ Add some additional helper functions to gp11 library.
+ Fix some corner cases in signal handling.
+ Don't crash when trying to lock keyrings that don't have a
password.
+ Fix problems running on 64-bit systems.
+ Build fixes
- Tag/Rename/Upstream
gnome-keyring-bgo570295-use-markup-correctly.patch
-------------------------------------------------------------------
Sun Feb 1 15:45:32 EST 2009 - mboman@suse.de
- Update to version 2.25.5:
+ Refactor out gcr library for crypto UI and related tasks.
+ Code refactoring.
+ Support automatically initializing a PKCS#11 token when not initialized.
+ Add modular user-store module for general storage of keys and certs.
+ Build fixes [Saleem Abdulrasool, Jeff Cai]
+ Add modular roots-store module for storage of trusted CA certs.
+ Add modular rpc-layer for communication between module and daemon.
+ Add modular ssh-agent as the main gnome-keyring-daemon agent.
-------------------------------------------------------------------
Thu Jan 22 22:12:45 CET 2009 - vuntz@novell.com
- Clean up package a bit, especially the file list.
-------------------------------------------------------------------
Mon Jan 12 15:28:37 EST 2009 - mboman@suse.de
- Update to version 2.25.4.2:
+ The modular ssh agent uses keys from all available PKCS#11 slots.
+ Fix compiler warnings.
+ Fix broken release.
- Remove gnome-keyring-svndiff-1440-1442.patch. New version
-------------------------------------------------------------------
Wed Jan 7 15:16:48 EST 2009 - mboman@suse.de
- Update to version 2.25.4.1:
+ Half way through refactoring of PKCS#11 support.
+ Add crypto support to gp11 library.
+ gp11 library is now by and large thread-safe.
+ Add modular ssh-store, roots and rpc-layer PKCS#11 components.
+ Beginnings of a PKCS#11 based ssh-agent.
+ Transactional storage of PKCS#11 objects.
+ Add auto-authenticate support in GP11 library, which greatlty
simplifies figuring out when to provide passwords.
+ Fix initialization problems which prevented SSH agent from setting
environment variables properly
+ Translation fixes
- Add gnome-keyring-svndiff-1440-1442.patch to make it compile
-------------------------------------------------------------------
Sat Dec 20 10:17:22 EST 2008 - mboman@suse.de
- Update to version 2.25.2:
+ Fix PKCS#11 corner cases highlighted by p11-tests tool.
+ Solaris fixes
+ Don't use non-pageable memory for public keys.
+ Rework initialization of daemon, and the way that it integrates
with the session.
+ Close open file descriptors before starting daemon from PAM module.
+ Don't try and unlock keyring from PAM if daemon isn't
running
+ Don't leave keyring daemon running if PAM just started it for
a password change
+ Add a keyboard accelerator to the 'Deny' button
+ Use pkg-config to detect libtasn1
+ Register environment variables with session properly.
+ Make DBUS a required dependency of gnome-keyring.
+ Remove usage of deprecated glib/gtk stuff.
- Removed gnome-keyring-pam-stop-passwd.patch. Fixed upstream
- Removed gnome-keyring-spurious-syslog.patch. Fixed upstream
- Removed gnome-keyring-sync-XAUTHLOCALHOSTNAME.patch. Fixed upstream
-------------------------------------------------------------------
Wed Dec 10 12:34:56 CET 2008 - olh@suse.de
- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
(bnc#437293)
-------------------------------------------------------------------
Mon Dec 1 01:48:57 CET 2008 - vuntz@novell.com
- Add gnome-keyring-sync-XAUTHLOCALHOSTNAME.patch to synchronize
XAUTHLOCALHOSTNAME and ICEAUTHORITY in the keyring daemon after
login. Else, gnome-keyring-ask might not be able to access the
display. Fix bnc#441789.
-------------------------------------------------------------------
Mon Nov 24 12:34:56 CET 2008 - olh@suse.de
- obsolete old -XXbit packages (bnc#437293)
-------------------------------------------------------------------
Wed Nov 19 12:09:12 CET 2008 - vuntz@novell.com
- Compile with --disable-acl-prompts. The prompt dialogs don't help
the user in the end. Fix bnc#446010.
-------------------------------------------------------------------
Sun Nov 9 02:21:56 CET 2008 - vuntz@novell.com
- Add some patches that will make pam-config integration possible.
This is part of bnc#421603.
- Add gnome-keyring-pam-stop-passwd.patch: if the keyring is
started to update the keyring password on password change, then
stop it too.
Based on patch by Thorsten Kukuk.
- Add gnome-keyring-pam-auto-start-if.patch: support an
auto_start_if option for the pam module to specify for which
service to auto-start the keyring.
Based on patch by Thorsten Kukuk.
- Update gnome-keyring-check-session.patch: the check for the GNOME
session is only working for the gdm service. With the
gnome-keyring-pam-auto-start-if.patch patch, we need to make sure
that we only do it for gdm since someone might want to configure
the keyring to start when logging in a console, eg.
- gnome-keyring-spurious-syslog.patch: don't try to unlock the
keyring if there's no daemon running.
-------------------------------------------------------------------
Wed Oct 22 07:35:52 EST 2008 - mboman@suse.de
- Update to version 2.24.1:
+ Fix crash on logout on Solaris.
+ Add missing 'server' attribute to the NETWORK_PASSWORD schema
-------------------------------------------------------------------
Sun Sep 21 10:44:34 EST 2008 - mboman@suse.de
- Update to version 2.24.0:
+ Update documentation for functions in gp11 library
+ Ungrab the keyboard properly when a password prompt is minimized.
+ Report errors from keyboard grabbing.
+ Fix build problems with gcc 4.3.
+ PKCS#11 initialize compatibility fix for OpenSC.
+ Make all errors from prompt process go to syslog.
+ When prompting for a password on import, don't go into an endless
+ loop for blank passwords.
+ Fix problems with PK indexes overwriting one another.
+ Don't add additional extensions on storage files when the extension
is already correct.
+ Load all objects when a PKCS#11 session is opened, regardless of
whether a C_FindObjects is run or not.
-------------------------------------------------------------------
Sat Sep 20 06:18:56 CEST 2008 - vuntz@novell.com
- Rewrite gnome-keyring-check-session.patch to be more correct:
ie, don't return too early from functions, and now check the
DESKTOP_SESSION environment variable that will be set by GDM.
- Change the gdm pam configuration to have auto_start for
pam_gnome_keyring.so for session, and not auth. This is what
upstream recommends and it's also required to have a proper
behavior with the above patch.
- This is part of bnc#427744.
-------------------------------------------------------------------
Fri Sep 12 10:19:08 CEST 2008 - aj@suse.de
- Add directory ownership for /usr/share/gtk-doc/html/gp11.
-------------------------------------------------------------------
Tue Sep 9 15:55:20 EST 2008 - mboman@novell.com
- Update to version 2.23.92:
+ Build fix for Solaris
+ Import the LANG environment variable into daemon enviroment
so that dialogs display with correct translations.
-------------------------------------------------------------------
Thu Sep 04 19:48:25 CEST 2008 - mboman@novell.com
- Update to version 2.23.91:
+ Use 'Change' instead of 'Create' when prompting the user for
a password to change keyring password.
+ Fix RSA signing with X509 mechanism.
+ Tweaking of the asynchronous scheduling to prevent hangs.
+ Add some documentation for GP11 library.
+ Translation updates.
+ Build fixes.
-------------------------------------------------------------------
Tue Aug 26 19:48:25 CEST 2008 - mboman@novell.com
- Update to version 2.23.90:
+ Use 'Create' button instead of 'OK' when prompting the user for
a password to create a new keyring.
+ Fix more cases where 'Deny' choice by a user resulted in
more subsequent prompts.
+ Automatically create non-existant directories when storing files.
+ Fix problem prompting for the same password twice when parsing a
PFX or PKCS#12 file.
+ Don't offer to store password during import operation.
+ Don't try to store certificates encrypted on the disk.
+ Add command line tool for importing of keys and certificates.
+ Fix problems with SSH agent not unlocking keys properly.
+ Build fixes.
-------------------------------------------------------------------
Tue Aug 05 19:48:25 CEST 2008 - captain.magnus@opensuse.org
- Update to version 2.23.6:
+ If the user denies a prompt, then don't prompt the same prompt
again for that connection to the daemon.
+ Bug fixes for loading of SSH keys.
+ Add gconf schema for noting the user's configured PKCS#11 modules.
+ Update and bug fixes for the new GP11 library.
+ Better reference counting of internal objects.
+ When a certificate is in the roots storage, assume it is a CA if
no basic constraints are present.
+ Add ability of PKCS#11 module to accept a string on its reserved
initialization argument, similar to NSS's libsoftkn3 module.
+ Translation fixes.
+ Build fixes.
-------------------------------------------------------------------
Sat Aug 02 19:48:25 CEST 2008 - captain.magnus@opensuse.org
- Update to version 2.23.5:
+ Load all SSH keys in ~/.ssh named id_?sa*, not just id_rsa
and id_dsa. Also load public portions of keys when needed ie: *.pub
+ Include new GP11 library, which is a GLib wrapper for PKCS#11
+ Add ability to import keys/certificates to PKCS#11.
+ Better storage and creation of PKCS#11 objects.
+ Start using GTest for new unit testing.
+ Better indexing of keys and certificates.
+ Better buffer handling, and threading fixes. [Jon Burgress]
+ Fix warnings in logs caused by programs checking whether
gnome-keyring is available.
+ Standardize on libgcrypt random number generator.
+ Add --disable-acl-prompts option to disable all ACL prompting [Colin Walters]
+ Build fixes.
-------------------------------------------------------------------
Wed Jun 18 19:48:25 CEST 2008 - maw@suse.de
- Update to version 2.22.2:
+ Streamline the importing of keys and make the proper prompts
show up consistently; better fixes for this to come in 2.24.x
+ Don't show 'location' field in most password prompts
+ Return serial number of certificates properly to requesting
programs
+ Fix crash when receiving certain HAL events.
-------------------------------------------------------------------
Thu May 1 05:24:46 CEST 2008 - hpj@suse.de
- Remove gnome-keyring-0.4.6-casa-integration.patch. GNOME can now
replicate the login password for use in the default keyring
without Casa's help.
-------------------------------------------------------------------
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
- added baselibs.conf file to build xxbit packages
for multilib support
-------------------------------------------------------------------
Thu Apr 10 00:53:56 CEST 2008 - maw@suse.de
- Update to version 2.22.1:
+ Add SSH agent protocol 1 support
+ Make 'ssh-add -D' lock any SSH private keys that gnome-keyring
is automatically loading
+ Reconnect to system DBus whenever the system bus restarts
+ Log to syslog even when running in the foreground
+ Add a configure option to disable building of the SSH agent
+ Build fixes.
-------------------------------------------------------------------
Fri Mar 14 03:16:20 CET 2008 - maw@suse.de
- Update to version 2.22.0:
+ Minor build fix.
-------------------------------------------------------------------
Tue Mar 4 18:43:50 CET 2008 - maw@suse.de
- Update to version 2.21.92:
+ Sync up user's session environment with the daemon, so that
things like X authentication, DBUS, etc. work properly
+ Shutdown socket connections properly, so things don't hang,
when wrong versions of daemon/library are used
+ Limit PKCS#12 parsing to a clearly defined subset of the
format
+ Decrypt PKCS#12 with empty passwords properly
+ Updated translations.
-------------------------------------------------------------------
Mon Feb 18 20:46:47 CET 2008 - maw@suse.de
- Update to version 2.21.91:
+ Don't prompt for a password from the PAM module since
gnome-keyring is not an authenticator
+ Check that PKCS#11 socket connections come from same user
+ Don't lock the entire gnome-keyring-ask process in memory,
just the password text; this works better when less non-pageable
memory is available
+ Basic serializing of certificates and keys
+ Build fixes
+ Updated translations.
-------------------------------------------------------------------
Tue Jan 29 10:00:55 CST 2008 - maw@suse.de
- Update to version 2.21.90:
+ Proper support for creating and destroying objects through
PKCS#11
+ Support for setting PKCS#11 attributes
+ Fix hanging of daemon under certain conditions
+ Add gconf setting for determining which components of the
daemon (such as SSH) are run at startup
+ Better parsing of objects and prompting for passwords in
PKCS#12 files
+ Calculate trust and purpose/usage of certificates
+ Mark certain key/certificate directories as special requiring
certain special treatment (such as the CA root store, SSH
keys etc...)
+ Add support for unencrypted keyrings which are used when
the user specifies a blank password
+ Fix problem where most keyrings were being treated as insecure
from the point of view of storing passwords for keys or
certificates
+ Fix race condition that is causing deadlocks and freezes
+ Misc fixes.
-------------------------------------------------------------------
Tue Jan 22 07:44:15 CET 2008 - hpj@suse.de
- Remove gnome-keyring-2.21.4-getenv-returns-null.patch, and fix
gnome-keyring-check-session.patch instead.
-------------------------------------------------------------------
Mon Jan 21 04:43:15 CET 2008 - hpj@suse.de
- Add gnome-keyring-2.21.4-getenv-returns-null.patch to fix
GNOME bug #510902.
-------------------------------------------------------------------
Sat Jan 12 08:01:04 CET 2008 - hpj@suse.de
- Install the D-Bus service file. Fixes Novell bug #353198.
-------------------------------------------------------------------
Thu Dec 20 14:48:35 CST 2007 - maw@suse.de
- Fix build on x86_64.
-------------------------------------------------------------------
Thu Dec 20 13:40:10 CST 2007 - maw@suse.de
- Update to version 2.21.4:
+ Build fixes for various platforms and against various libraries
+ Print few useless warning messages
+ Simpler API for accessing and storing passwords
+ PAM module now works with SELinux
+ Includes an SSH agent
+ Added basic x.509 certificate and key store
+ PKCS#11 module
+ ASN.1 support
- Don't package license files.
-------------------------------------------------------------------
Wed Oct 10 16:26:26 CEST 2007 - sbrabec@suse.cz
- Replace old pam_keyring.
-------------------------------------------------------------------
Mon Sep 17 19:46:45 CEST 2007 - mauro@suse.de
- Updated to version 2.20.
+ Translation fixes (Claude Paroz)
-------------------------------------------------------------------
Mon Sep 10 19:58:49 CEST 2007 - crivera@suse.de
- Add a patch to fix Bug #186189. We only start gnome-keyring
daemon if the WINDOWMANAGER environment variable is set to
/usr/bin/gnome.
-------------------------------------------------------------------
Mon Aug 27 19:18:57 CEST 2007 - cgaisford@novell.com
- Updated to 2.19.91 to incorporate needed fixes for Novell bugs: 298975,
299730, 299621, 304189
- Builds with newer versions of DBus [Theppitak Karoonboonyanan]
- In the PAM module we now support starting gnome-keyring-daemon when
- the user's session actually starts, rather than during password validation.
- This makes us more solid and sane with GDM and well behaved PAM using
- applications. [Chris Rivera]
- In the PAM module check that the socket is owned by the same user, before
- sending the login password there.
- Don't read from /dev/random when not needed. This makes startup faster
- in many cases, as it won't block for entropy.
- Get around more optimizations that cancel out wiping of strings in
- memory before freeing.
- Fix problem where keyrings are created in wrong directory [Nathaniel McCallum]
- Incorporated security fixes from Novell
- Fix crashers when the ask dialog sends back bad data.
- Now builds on Solaris [Damien Carbery]
- Configure PAM module directory better [Matthias Clasen]
- Fix memory leaks
-------------------------------------------------------------------
Wed Aug 8 01:11:19 CEST 2007 - maw@suse.de
- Use %fdupes
- Split off a -lang subpackage.
-------------------------------------------------------------------
Thu Aug 2 22:39:42 CEST 2007 - jpr@suse.de
- Build with pam support in gnome-keyring-pam
-------------------------------------------------------------------
Thu Aug 2 19:34:07 CEST 2007 - maw@suse.de
- Update to version 2.19.6.1:
+ Sync with current gnome version numbers
+ Build fixes
+ Use libgcrypt instead of hand-rolled encryption algorithms
+ Code refactoring and cleanup
+ Error and warning messages are logged to syslog when running
as a daemon
+ Use non-pageable memory for secrets and passwords
+ Use NULL consistently in the API to represent the default
keyrong
+ Improved prompts
+ Handle unix signals properly
+ Keyrings supported on removeable drives
+ New API
+ API docs
+ Unit tests are run automagically when building
+ Misc. bug fixes
-------------------------------------------------------------------
Wed Apr 11 11:41:13 CDT 2007 - maw@suse.de
- Update to version 0.8.1, which
- Fixes a crash when called with a NULL keyring
- Has an updated translation for the gl locale.
-------------------------------------------------------------------
Wed Apr 4 15:45:19 CDT 2007 - maw@suse.de
- Update to version 0.8
- b.g.o 407160 and 339137.
-------------------------------------------------------------------
Fri Mar 9 11:29:48 CST 2007 - maw@suse.de
- Update to version 0.7.91
- Changes in version 0.7.91 are:
* Add method for library to discover daemon via DBus. Adds soft
DBus dependency.
* Fixes for building on kFreeBSD.
- Changes in version 0.7.3 are:
* Fix endless loop when creating a keyring and a file by that name
already exists.
* Fix crasher when deleting session keyring.
* Fix crasher when doing find operation with NULL attribute string.
* Sync files to disk after writing to keyring.
- Changes in version 0.7.2 are:
* Don't have multiple password dialogs presented for the same
keyring
- Changes in version 0.7.1 are:
* Added GNOME_KEYRING_ITEM_APPLICATION_SECRET which allows an item
to be for a single application only with strict access controls.
* New function gnome_keyring_item_get_info_full(_sync) which allow
retrieval of item meta data without the secret, thus not incurring
an ACL prompt.
* Translation updates
-------------------------------------------------------------------
Tue Feb 27 09:42:07 CST 2007 - maw@suse.de
- Create a -doc subpackage (#248813).
-------------------------------------------------------------------
Thu Dec 14 17:10:44 CET 2006 - sbrabec@suse.cz
- More spec file cleanups.
-------------------------------------------------------------------
Wed Dec 13 15:56:31 CST 2006 - maw@suse.de
- Move to /usr
- Do some specfile cleanup.
-------------------------------------------------------------------
Thu Sep 14 19:33:34 CEST 2006 - jhargadon@suse.de
- update to version 0.6.0
- NetBSD fixes
- Crash fix
- Typo fix
- Translations
-------------------------------------------------------------------
Thu Aug 31 00:06:48 CEST 2006 - jhargadon@suse.de
- update to version 0.5.2
- Translation updates
- Better title in docs
- Fixed crashes
- New function: gnome_keyring_item_grant_access_rights_sync
-------------------------------------------------------------------
Thu Aug 24 23:34:57 CEST 2006 - ro@suse.de
- copy CASA headers to local source and remove CASA-devel
from BuildRequires to avoid build-dep cycle
(CASA needs gtk-sharp needs gnome-keyring needs CASA)
-------------------------------------------------------------------
Fri Aug 11 23:00:22 CEST 2006 - jhargadon@suse.de
- update to version 0.5.1
- Support changing password of a keyring
- Create ~/.gnome2 if needed
- Save keyring when an ACL is added
- Add password strength meter
- Fix return value for some sync calls
- Translation updates
- Fix crash when asking for password
- Fix --disable-nls
-------------------------------------------------------------------
Sat May 13 03:57:49 CEST 2006 - hpj@suse.de
- Add a patch to provide better CASA integration. CASAManager is
allowed by default, and the default keyring's password is saved
in CASA, making most of the annoying dialogs go away. Part of
fix for Novell bug #174093.
-------------------------------------------------------------------
Tue May 9 22:56:48 CEST 2006 - joeshaw@suse.de
- Add a patch to only display the "unlock keyring" dialog once
per keyring, no matter how many different apps request it.
(bnc #170587) Also fixes a crash in gnome-keyring-ask if you
clicked "Deny".
-------------------------------------------------------------------
Mon May 8 20:21:01 CEST 2006 - joeshaw@suse.de
- Add a patch to correctly escape for markup, and set the markup
flag on the label. (bnc #172603)
-------------------------------------------------------------------
Wed Jan 25 21:31:44 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Wed Nov 30 22:34:30 CET 2005 - gekker@suse.de
- Update to version 0.4.6
-------------------------------------------------------------------
Thu Oct 13 18:40:37 CEST 2005 - gekker@suse.de
- Update to version 0.4.5
-------------------------------------------------------------------
Mon Sep 5 10:23:21 CEST 2005 - mmj@suse.de
- Update to version 0.4.4 (GNOME 2.12)
-------------------------------------------------------------------
Fri Jul 22 18:31:58 CEST 2005 - gekker@suse.de
- Update to version 0.4.3
-------------------------------------------------------------------
Wed Jun 1 18:16:23 CEST 2005 - sbrabec@suse.cz
- Fixed devel requirements.
-------------------------------------------------------------------
Wed Mar 9 20:22:56 CET 2005 - gekker@suse.de
- Update to version 0.4.2 (GNOME 2.10).
-------------------------------------------------------------------
Wed Jan 19 22:48:01 CET 2005 - clahey@suse.de
- Updated to version 0.4.1.
-------------------------------------------------------------------
Tue Nov 23 20:10:02 CET 2004 - gekker@suse.de
- Update version to 0.4.0
-------------------------------------------------------------------
Tue Nov 2 17:14:57 CET 2004 - ro@suse.de
- locale rename: no -> nb
-------------------------------------------------------------------
Tue Oct 12 12:20:29 CEST 2004 - sbrabec@suse.cz
- Fixed libexecdir for bi-arch (#47050).
-------------------------------------------------------------------
Mon Jun 28 11:39:08 CEST 2004 - hhetter@suse.de
- reduce #neededforbuild
-------------------------------------------------------------------
Mon Apr 26 15:47:03 CEST 2004 - sbrabec@suse.cz
- New SuSE package, version 0.2.1 (GNOME 2.6).
