Changelog for gnome-keyring-devel-2.28.2-1.3.x86_64.rpm :
Tue Jan 5 13:00:00 2010 sreevesAATTnovell.com
- (Fate #308121) Update to version 2.28.2:
+ Add license to reference documentation
+ Sent output of g_printerr to syslog
+ No error when can\'t unlock login keyring
+ Fix assertion when comparing attributes
+ Fix freeing of unallocated memory in test
+ Don\'t barf on certificates with unsupported algorithm
+ Fix some memory leaks
- Changes from version 2.28.1:
+ Fix support for SSH RSA1 keys
+ Fix a delay when the daemon quits
+ Use default D-Bus timeout when finding daemon
+ Make custom pkcs11 constants unsigned longs
+ Use unsigned long for module handle counter
+ Fix assertion when releasing secure memory block
- Drop gnome-keyring-fix-ssh1-agent.patch and
gnome-keyring-no-logout-delay.patch, included upstream.
- Remove enAATTshaw for openSUSE <= 11.2.

Wed Dec 2 13:00:00 2009 gburtAATTsuse.de
- Undo the doc packaging changes

Wed Nov 25 13:00:00 2009 mxwuAATTnovell.com
- Fate #308121. Update to GNOME 2.28.
Last Changelog entry from new version
Thu Oct 8 15:59:38 CEST 2009 - vuntzAATTopensuse.org
- Add gnome-keyring-fix-ssh1-agent.patch to make the ssh agent
support rsa1 keys again. Fix bnc#540515.
- Rebase and reapply gnome-keyring-pam-auth-gnome-only.patch
gnome-keyring-spurious-syslog.patch
gnome-keyring-pam-auto-start-if.patch from sle11.
- Use \"--gnome_keyring-auto_start_if=gdm\" again in post.
- Comment PreReq pam-config at least 0.72 for those changes.

Tue Nov 3 13:00:00 2009 hpjAATTnovell.com
- Update gnome-keyring-spurious-syslog.patch (bnc#539063). This
hides some annoying warning messages from the syslog.

Wed Feb 25 13:00:00 2009 vuntzAATTnovell.com
- Add gnome-keyring-pam-auth-gnome-only.patch: now that the
gnome-keyring pam module is in common-auth, we don\'t want it to
be used in all cases, but only for gdm and gnome-screensaver. The
long term fix would be to implement what\'s proposed in bgo#559781
instead of just having auto_start_if as we do right now.
This is potentially important because right now, even doing a
simple \"su\" will trigger this module and at least output a line
in the syslog.
Fix bnc#479756.

Thu Feb 19 13:00:00 2009 vuntzAATTnovell.com
- Add gnome-keyring-pam-auth-prompt-password.patch: we make the pam
module prompt for a password during auth when none was set.
- Use pam-config instead of hack in post/postun of the pam package.
We have to manually remove the pam_gnome_keyring.so from
/etc/pam.d/gdm in post, though.
- Should fix bnc#466732.
- Add gnome-keyring-pam-translate.patch to translate the prompt
strings in the pam module, using the pam translations.

Wed Dec 10 13:00:00 2008 olhAATTsuse.de
- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
(bnc#437293)

Mon Dec 1 13:00:00 2008 vuntzAATTnovell.com
- Add gnome-keyring-sync-XAUTHLOCALHOSTNAME.patch to synchronize
XAUTHLOCALHOSTNAME and ICEAUTHORITY in the keyring daemon after
login. Else, gnome-keyring-ask might not be able to access the
display. Fix bnc#441789.

Mon Nov 24 13:00:00 2008 olhAATTsuse.de
- obsolete old -XXbit packages (bnc#437293)

Wed Nov 19 13:00:00 2008 vuntzAATTnovell.com
- Compile with --disable-acl-prompts. The prompt dialogs don\'t help
the user in the end. Fix bnc#446010.

Sun Nov 9 13:00:00 2008 vuntzAATTnovell.com
- Add some patches that will make pam-config integration possible.
This is part of bnc#421603.
- Add gnome-keyring-pam-stop-passwd.patch: if the keyring is
started to update the keyring password on password change, then
stop it too.
Based on patch by Thorsten Kukuk.
- Add gnome-keyring-pam-auto-start-if.patch: support an
auto_start_if option for the pam module to specify for which
service to auto-start the keyring.
Based on patch by Thorsten Kukuk.
- Update gnome-keyring-check-session.patch: the check for the GNOME
session is only working for the gdm service. With the
gnome-keyring-pam-auto-start-if.patch patch, we need to make sure
that we only do it for gdm since someone might want to configure
the keyring to start when logging in a console, eg.
- gnome-keyring-spurious-syslog.patch: don\'t try to unlock the
keyring if there\'s no daemon running.

Wed Oct 22 14:00:00 2008 mbomanAATTsuse.de
- Update to version 2.24.1:
+ Fix crash on logout on Solaris.
+ Add missing \'server\' attribute to the NETWORK_PASSWORD schema

Sun Sep 21 14:00:00 2008 mbomanAATTsuse.de
- Update to version 2.24.0:
+ Update documentation for functions in gp11 library
+ Ungrab the keyboard properly when a password prompt is minimized.
+ Report errors from keyboard grabbing.
+ Fix build problems with gcc 4.3.
+ PKCS#11 initialize compatibility fix for OpenSC.
+ Make all errors from prompt process go to syslog.
+ When prompting for a password on import, don\'t go into an endless
+ loop for blank passwords.
+ Fix problems with PK indexes overwriting one another.
+ Don\'t add additional extensions on storage files when the extension
is already correct.
+ Load all objects when a PKCS#11 session is opened, regardless of
whether a C_FindObjects is run or not.

Sat Sep 20 14:00:00 2008 vuntzAATTnovell.com
- Rewrite gnome-keyring-check-session.patch to be more correct:
ie, don\'t return too early from functions, and now check the
DESKTOP_SESSION environment variable that will be set by GDM.
- Change the gdm pam configuration to have auto_start for
pam_gnome_keyring.so for session, and not auth. This is what
upstream recommends and it\'s also required to have a proper
behavior with the above patch.
- This is part of bnc#427744.

Fri Sep 12 14:00:00 2008 ajAATTsuse.de
- Add directory ownership for /usr/share/gtk-doc/html/gp11.

Tue Sep 9 14:00:00 2008 mbomanAATTnovell.com
- Update to version 2.23.92:
+ Build fix for Solaris
+ Import the LANG environment variable into daemon enviroment
so that dialogs display with correct translations.

Thu Sep 4 14:00:00 2008 mbomanAATTnovell.com
- Update to version 2.23.91:
+ Use \'Change\' instead of \'Create\' when prompting the user for
a password to change keyring password.
+ Fix RSA signing with X509 mechanism.
+ Tweaking of the asynchronous scheduling to prevent hangs.
+ Add some documentation for GP11 library.
+ Translation updates.
+ Build fixes.

Tue Aug 26 14:00:00 2008 mbomanAATTnovell.com
- Update to version 2.23.90:
+ Use \'Create\' button instead of \'OK\' when prompting the user for
a password to create a new keyring.
+ Fix more cases where \'Deny\' choice by a user resulted in
more subsequent prompts.
+ Automatically create non-existant directories when storing files.
+ Fix problem prompting for the same password twice when parsing a
PFX or PKCS#12 file.
+ Don\'t offer to store password during import operation.
+ Don\'t try to store certificates encrypted on the disk.
+ Add command line tool for importing of keys and certificates.
+ Fix problems with SSH agent not unlocking keys properly.
+ Build fixes.

Tue Aug 5 14:00:00 2008 captain.magnusAATTopensuse.org
- Update to version 2.23.6:
+ If the user denies a prompt, then don\'t prompt the same prompt
again for that connection to the daemon.
+ Bug fixes for loading of SSH keys.
+ Add gconf schema for noting the user\'s configured PKCS#11 modules.
+ Update and bug fixes for the new GP11 library.
+ Better reference counting of internal objects.
+ When a certificate is in the roots storage, assume it is a CA if
no basic constraints are present.
+ Add ability of PKCS#11 module to accept a string on its reserved
initialization argument, similar to NSS\'s libsoftkn3 module.
+ Translation fixes.
+ Build fixes.

Sat Aug 2 14:00:00 2008 captain.magnusAATTopensuse.org
- Update to version 2.23.5:
+ Load all SSH keys in ~/.ssh named id_?sa
*, not just id_rsa
and id_dsa. Also load public portions of keys when needed ie:
*.pub
+ Include new GP11 library, which is a GLib wrapper for PKCS#11
+ Add ability to import keys/certificates to PKCS#11.
+ Better storage and creation of PKCS#11 objects.
+ Start using GTest for new unit testing.
+ Better indexing of keys and certificates.
+ Better buffer handling, and threading fixes. [Jon Burgress]
+ Fix warnings in logs caused by programs checking whether
gnome-keyring is available.
+ Standardize on libgcrypt random number generator.
+ Add --disable-acl-prompts option to disable all ACL prompting [Colin Walters]
+ Build fixes.

Wed Jun 18 14:00:00 2008 mawAATTsuse.de
- Update to version 2.22.2:
+ Streamline the importing of keys and make the proper prompts
show up consistently; better fixes for this to come in 2.24.x
+ Don\'t show \'location\' field in most password prompts
+ Return serial number of certificates properly to requesting
programs
+ Fix crash when receiving certain HAL events.

Thu May 1 14:00:00 2008 hpjAATTsuse.de
- Remove gnome-keyring-0.4.6-casa-integration.patch. GNOME can now
replicate the login password for use in the default keyring
without Casa\'s help.

Thu Apr 10 14:00:00 2008 roAATTsuse.de
- added baselibs.conf file to build xxbit packages
for multilib support

Wed Apr 9 14:00:00 2008 mawAATTsuse.de
- Update to version 2.22.1:
+ Add SSH agent protocol 1 support
+ Make \'ssh-add -D\' lock any SSH private keys that gnome-keyring
is automatically loading
+ Reconnect to system DBus whenever the system bus restarts
+ Log to syslog even when running in the foreground
+ Add a configure option to disable building of the SSH agent
+ Build fixes.

Fri Mar 14 13:00:00 2008 mawAATTsuse.de
- Update to version 2.22.0:
+ Minor build fix.

Tue Mar 4 13:00:00 2008 mawAATTsuse.de
- Update to version 2.21.92:
+ Sync up user\'s session environment with the daemon, so that
things like X authentication, DBUS, etc. work properly
+ Shutdown socket connections properly, so things don\'t hang,
when wrong versions of daemon/library are used
+ Limit PKCS#12 parsing to a clearly defined subset of the
format
+ Decrypt PKCS#12 with empty passwords properly
+ Updated translations.

Mon Feb 18 13:00:00 2008 mawAATTsuse.de
- Update to version 2.21.91:
+ Don\'t prompt for a password from the PAM module since
gnome-keyring is not an authenticator
+ Check that PKCS#11 socket connections come from same user
+ Don\'t lock the entire gnome-keyring-ask process in memory,
just the password text; this works better when less non-pageable
memory is available
+ Basic serializing of certificates and keys
+ Build fixes
+ Updated translations.

Tue Jan 29 13:00:00 2008 mawAATTsuse.de
- Update to version 2.21.90:
+ Proper support for creating and destroying objects through
PKCS#11
+ Support for setting PKCS#11 attributes
+ Fix hanging of daemon under certain conditions
+ Add gconf setting for determining which components of the
daemon (such as SSH) are run at startup
+ Better parsing of objects and prompting for passwords in
PKCS#12 files
+ Calculate trust and purpose/usage of certificates
+ Mark certain key/certificate directories as special requiring
certain special treatment (such as the CA root store, SSH
keys etc...)
+ Add support for unencrypted keyrings which are used when
the user specifies a blank password
+ Fix problem where most keyrings were being treated as insecure
from the point of view of storing passwords for keys or
certificates
+ Fix race condition that is causing deadlocks and freezes
+ Misc fixes.

Tue Jan 22 13:00:00 2008 hpjAATTsuse.de
- Remove gnome-keyring-2.21.4-getenv-returns-null.patch, and fix
gnome-keyring-check-session.patch instead.

Mon Jan 21 13:00:00 2008 hpjAATTsuse.de
- Add gnome-keyring-2.21.4-getenv-returns-null.patch to fix
GNOME bug #510902.

Sat Jan 12 13:00:00 2008 hpjAATTsuse.de
- Install the D-Bus service file. Fixes Novell bug #353198.

Thu Dec 20 13:00:00 2007 mawAATTsuse.de
- Fix build on x86_64.

Thu Dec 20 13:00:00 2007 mawAATTsuse.de
- Update to version 2.21.4:
+ Build fixes for various platforms and against various libraries
+ Print few useless warning messages
+ Simpler API for accessing and storing passwords
+ PAM module now works with SELinux
+ Includes an SSH agent
+ Added basic x.509 certificate and key store
+ PKCS#11 module
+ ASN.1 support
- Don\'t package license files.

Wed Oct 10 14:00:00 2007 sbrabecAATTsuse.cz
- Replace old pam_keyring.

Mon Sep 17 14:00:00 2007 mauroAATTsuse.de
- Updated to version 2.20.
+ Translation fixes (Claude Paroz)

Mon Sep 10 14:00:00 2007 criveraAATTsuse.de
- Add a patch to fix Bug #186189. We only start gnome-keyring
daemon if the WINDOWMANAGER environment variable is set to
/usr/bin/gnome.

Mon Aug 27 14:00:00 2007 cgaisfordAATTnovell.com
- Updated to 2.19.91 to incorporate needed fixes for Novell bugs: 298975,
299730, 299621, 304189
- Builds with newer versions of DBus [Theppitak Karoonboonyanan]
- In the PAM module we now support starting gnome-keyring-daemon when
- the user\'s session actually starts, rather than during password validation.
- This makes us more solid and sane with GDM and well behaved PAM using
- applications. [Chris Rivera]
- In the PAM module check that the socket is owned by the same user, before
- sending the login password there.
- Don\'t read from /dev/random when not needed. This makes startup faster
- in many cases, as it won\'t block for entropy.
- Get around more optimizations that cancel out wiping of strings in
- memory before freeing.
- Fix problem where keyrings are created in wrong directory [Nathaniel McCallum]
- Incorporated security fixes from Novell
- Fix crashers when the ask dialog sends back bad data.
- Now builds on Solaris [Damien Carbery]
- Configure PAM module directory better [Matthias Clasen]
- Fix memory leaks

Tue Aug 7 14:00:00 2007 mawAATTsuse.de
- Use %fdupes
- Split off a -lang subpackage.

Thu Aug 2 14:00:00 2007 jprAATTsuse.de
- Build with pam support in gnome-keyring-pam

Thu Aug 2 14:00:00 2007 mawAATTsuse.de
- Update to version 2.19.6.1:
+ Sync with current gnome version numbers
+ Build fixes
+ Use libgcrypt instead of hand-rolled encryption algorithms
+ Code refactoring and cleanup
+ Error and warning messages are logged to syslog when running
as a daemon
+ Use non-pageable memory for secrets and passwords
+ Use NULL consistently in the API to represent the default
keyrong
+ Improved prompts
+ Handle unix signals properly
+ Keyrings supported on removeable drives
+ New API
+ API docs
+ Unit tests are run automagically when building
+ Misc. bug fixes

Wed Apr 11 14:00:00 2007 mawAATTsuse.de
- Update to version 0.8.1, which
- Fixes a crash when called with a NULL keyring
- Has an updated translation for the gl locale.

Wed Apr 4 14:00:00 2007 mawAATTsuse.de
- Update to version 0.8
- b.g.o 407160 and 339137.

Fri Mar 9 13:00:00 2007 mawAATTsuse.de
- Update to version 0.7.91
- Changes in version 0.7.91 are:

* Add method for library to discover daemon via DBus. Adds soft
DBus dependency.

* Fixes for building on kFreeBSD.
- Changes in version 0.7.3 are:

* Fix endless loop when creating a keyring and a file by that name
already exists.

* Fix crasher when deleting session keyring.

* Fix crasher when doing find operation with NULL attribute string.

* Sync files to disk after writing to keyring.
- Changes in version 0.7.2 are:

* Don\'t have multiple password dialogs presented for the same
keyring
- Changes in version 0.7.1 are:

* Added GNOME_KEYRING_ITEM_APPLICATION_SECRET which allows an item
to be for a single application only with strict access controls.

* New function gnome_keyring_item_get_info_full(_sync) which allow
retrieval of item meta data without the secret, thus not incurring
an ACL prompt.

* Translation updates

Tue Feb 27 13:00:00 2007 mawAATTsuse.de
- Create a -doc subpackage (#248813).

Thu Dec 14 13:00:00 2006 sbrabecAATTsuse.cz
- More spec file cleanups.

Wed Dec 13 13:00:00 2006 mawAATTsuse.de
- Move to /usr
- Do some specfile cleanup.

Thu Sep 14 14:00:00 2006 jhargadonAATTsuse.de
- update to version 0.6.0
- NetBSD fixes
- Crash fix
- Typo fix
- Translations

Wed Aug 30 14:00:00 2006 jhargadonAATTsuse.de
- update to version 0.5.2
- Translation updates
- Better title in docs
- Fixed crashes
- New function: gnome_keyring_item_grant_access_rights_sync

Thu Aug 24 14:00:00 2006 roAATTsuse.de
- copy CASA headers to local source and remove CASA-devel
from BuildRequires to avoid build-dep cycle
(CASA needs gtk-sharp needs gnome-keyring needs CASA)

Fri Aug 11 14:00:00 2006 jhargadonAATTsuse.de
- update to version 0.5.1
- Support changing password of a keyring
- Create ~/.gnome2 if needed
- Save keyring when an ACL is added
- Add password strength meter
- Fix return value for some sync calls
- Translation updates
- Fix crash when asking for password
- Fix --disable-nls