0.23.12 (stable)

0.23.12 (stable)

• Fix compile error when PKCS#11 GNU calling convention is enabled [#160]
• Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [#167]
• Build and test fixes on macOS [#162, #168]

0.23.11 (stable)

• trust: Add extractor for edk2/cacerts.bin [#139]
• modules: Add option to control module visibility from proxy [#140]
• trust: Prevent trust module being loaded by proxy module [#142]
• library: Use dedicated locale object for printing error [#148]
• Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [#134]
• Improve const correctness for P11KitUri [#152]
• PKCS#11 URI scheme comparison is now case insensitive [#156]
• Build and test fixes [#151, #149, #141, #138, #135]

0.23.10 (devel)

• filter: Respect write-protected vendor-specific attribute in PKCS#11 URI [#129]
• server: Improve shell integration and documentation [#107, #108]
• proxy: Reuse existing slot ID mapping in after fork() [#120]
• trust: Forcibly mark Default Trust read-only [#123]
• New function p11_kit_override_system_files() which can be used for testing [#110]
• trust: Filter out duplicate extensions [#69]
• Update translations [#128]
• Bug fixes [#125, #126]

0.23.9 (devel)

• Fix p11-kit server regressions [#103, #104]
• trust: Respect anyExtendedKeyUsage in CA certificates [#99]
• Build fixes related to reallocarray [#96, #98, #100]

0.23.8 (devel)

• Improve vendor query attributes handling in PKCS#11 URI [#92]
• Add OTP and GOST mechanisms to pkcs11.h [#90, #91]
• New envvar P11_KIT_NO_USER_CONFIG to stop looking at user configurations [#87]
• Build fixes for Solaris and 32-bit big-endian platforms [#81, #86]

0.23.7 (devel)

• Fix memory issues with "p11-kit server" [#78]
• Build fixes [#77 ...]

0.23.6 (devel)

• Port p11-kit server to Windows and portability fixes of the RPC protocol [#67, #72, #74]
• Recover the old behavior of trust anchor --remove [#70, #71]
• Build fixes [#63 ...]

0.23.5 (devel)

• Fix license notice of common/unix-peer.c [#58]
• Remove systemd unit files for now [#60]
• Build fixes for FreeBSD [#56]

0.23.4 (devel)

• Recognize query attributes defined in PKCS#11 URI (RFC7512) [#31, #37, #52]
• The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY attribute, used by Firefox [#99453, #46]
• Add trust dump command to dump all PKCS#11 objects in the persistence format [#44]
• New experimental p11-kit server command that allows PKCS#11 forwarding through a Unix domain socket. A client-side module p11-kit-client.so is also provided [#15]
• Add systemd unit files for exporting the proxy module through a Unix domain socket [#35]
• New P11KitIter API to iterate over slots, tokens, and modules in addition to objects [#28]
• libffi dependency is now optional [#9]
• Build fixes for FreeBSD, macOS, and Windows [#32, #39, #45]

0.23.3 (devel)

• Install private executables in libexecdir [#98817]
• Fix link error of proxy module on macOS [#98022]
• Use new PKCS#11 URI specification for URIs [#97245]
• Support x-init-reserved argument of C_Initialize() in remote modules [#80519]
• Incorporate changes from PKCS#11 2.40 specification
• Bump libtool library version
• Documentation fixes
• Build fixes [#87192 ...]