- Package init - Adjust requires - Add COPYING.openssl - Rebuild for clevis - Update to v15 - Delete unnecessary gdb from BuildRequires - Update version to 18 - Package init - Adjust requires - Add COPYING.openssl - Rebuild for clevis - Update to v15 - Delete unnecessary gdb from BuildRequires - Update version to 18 - Package init - Adjust requires - Add COPYING.openssl - Rebuild for clevis - Update to v15 - Delete unnecessary gdb from BuildRequires - Update version to 18 - Package init - Adjust requires - Add COPYING.openssl - Rebuild for clevis - Update to v15 - Delete unnecessary gdb from BuildRequires - Update version to 18 - Package init - Adjust requires - Add COPYING.openssl - Rebuild for clevis - Update to v15 - Delete unnecessary gdb from BuildRequires - Update version to 18 - Package init - Adjust requires - Add COPYING.openssl - Rebuild for clevis - Update to v15 - Delete unnecessary gdb from BuildRequires - Update version to 18 - Package init - Adjust requires - Add COPYING.openssl - Rebuild for clevis - Update to v15 - Delete unnecessary gdb from BuildRequires - Update version to 18 - Package init - Adjust requires - Add COPYING.openssl - Rebuild for clevis - Update to v15 - Delete unnecessary gdb from BuildRequires - Update version to 18 - Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060 - Fix CVE-2025-49014 - Fix CVE-2026-32316,CVE-2026-33947,CVE-2026-33948,CVE-2026-39956,CVE-2026-39979 and CVE-2026-40164 - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894, CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777 - Fix CVE-2025-9403 - update to 1.8.2 - Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060 - Fix CVE-2025-49014 - Fix CVE-2026-32316,CVE-2026-33947,CVE-2026-33948,CVE-2026-39956,CVE-2026-39979 and CVE-2026-40164 - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894, CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777 - Fix CVE-2025-9403 - update to 1.8.2 - Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060 - Fix CVE-2025-49014 - Fix CVE-2026-32316,CVE-2026-33947,CVE-2026-33948,CVE-2026-39956,CVE-2026-39979 and CVE-2026-40164 - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894, CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777 - Fix CVE-2025-9403 - update to 1.8.2 - Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060 - Fix CVE-2025-49014 - Fix CVE-2026-32316,CVE-2026-33947,CVE-2026-33948,CVE-2026-39956,CVE-2026-39979 and CVE-2026-40164 - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894, CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777 - Fix CVE-2025-9403 - update to 1.8.2 - Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060 - Fix CVE-2025-49014 - Fix CVE-2026-32316,CVE-2026-33947,CVE-2026-33948,CVE-2026-39956,CVE-2026-39979 and CVE-2026-40164 - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894, CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777 - Fix CVE-2025-9403 - update to 1.8.2 - Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060 - Fix CVE-2025-49014 - Fix CVE-2026-32316,CVE-2026-33947,CVE-2026-33948,CVE-2026-39956,CVE-2026-39979 and CVE-2026-40164 - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894, CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777 - Fix CVE-2025-9403 - update to 1.8.2 - Update to 2.4.13.2 to fix CVE-2023-28625 - Upgrade to 2.4.15.3 for fix CVE-2024-24814 - Update to 2.4.16.6: * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting * info: fix requests to the info hook with extend_session=false * cookie: OIDCCookieSameSite default behaviour Lax * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory cannot be found on the system upon initaliizing cache mutexes and the file cache * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards compatibility with <=2.4.15.7 and to support private/test deployments * code: address warnings from static code analysis tool CodeChecker - Update to 2.4.16.11 for fix CVE-2025-31492 - Update to 2.4.13.2 to fix CVE-2023-28625 - Upgrade to 2.4.15.3 for fix CVE-2024-24814 - Update to 2.4.16.6: * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting * info: fix requests to the info hook with extend_session=false * cookie: OIDCCookieSameSite default behaviour Lax * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory cannot be found on the system upon initaliizing cache mutexes and the file cache * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards compatibility with <=2.4.15.7 and to support private/test deployments * code: address warnings from static code analysis tool CodeChecker - Update to 2.4.16.11 for fix CVE-2025-31492 - Update to 2.4.13.2 to fix CVE-2023-28625 - Upgrade to 2.4.15.3 for fix CVE-2024-24814 - Update to 2.4.16.6: * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting * info: fix requests to the info hook with extend_session=false * cookie: OIDCCookieSameSite default behaviour Lax * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory cannot be found on the system upon initaliizing cache mutexes and the file cache * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards compatibility with <=2.4.15.7 and to support private/test deployments * code: address warnings from static code analysis tool CodeChecker - Update to 2.4.16.11 for fix CVE-2025-31492 - Update to 2.4.13.2 to fix CVE-2023-28625 - Upgrade to 2.4.15.3 for fix CVE-2024-24814 - Update to 2.4.16.6: * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting * info: fix requests to the info hook with extend_session=false * cookie: OIDCCookieSameSite default behaviour Lax * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory cannot be found on the system upon initaliizing cache mutexes and the file cache * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards compatibility with <=2.4.15.7 and to support private/test deployments * code: address warnings from static code analysis tool CodeChecker - Update to 2.4.16.11 for fix CVE-2025-31492 - package init - package init - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Fix CVE-2026-40253 - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Fix CVE-2026-40253 - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Fix CVE-2026-40253 - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Fix CVE-2026-40253 - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Fix CVE-2026-40253 - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Fix CVE-2026-40253 - Fix compilation on Rust-1.76 - Fix CVE-2024-12224 - Fix CVE-2025-3416 - Fix CVE-2023-53159 - Fix compilation on Rust-1.76 - Fix CVE-2024-12224 - Fix CVE-2025-3416 - Fix CVE-2023-53159 - Fix compilation on Rust-1.76 - Fix CVE-2024-12224 - Fix CVE-2025-3416 - Fix CVE-2023-53159 - Fix compilation on Rust-1.76 - Fix CVE-2024-12224 - Fix CVE-2025-3416 - Fix CVE-2023-53159 - Fix compilation on Rust-1.76 - Fix CVE-2024-12224 - Fix CVE-2025-3416 - Fix CVE-2023-53159 - Fix compilation on Rust-1.76 - Fix CVE-2024-12224 - Fix CVE-2025-3416 - Fix CVE-2023-53159 - package init - package init - package init - update to 5.8.11.3 - enable debuginfo for fix strip - feat: fix strip - feat: fix pie - feat: update vendor(update golang.org/x/sys) - upgrade to version 5.9.61 - update to 5.8.11.3 - enable debuginfo for fix strip - feat: fix strip - feat: fix pie - feat: update vendor(update golang.org/x/sys) - upgrade to version 5.9.61