Compare commits
1 commit
| Author | SHA1 | Date | |
|---|---|---|---|
|
9db0f4efef |
10 changed files with 4660 additions and 670 deletions
4
.gitignore
vendored
4
.gitignore
vendored
|
|
@ -13,7 +13,3 @@ xca-0.8.1.tar.gz
|
|||
/xca-2.2.1.tar.gz
|
||||
/xca-2.3.0.tar.gz
|
||||
/xca-2.4.0.tar.gz
|
||||
/xca-2.5.0.tar.gz
|
||||
/xca-2.6.0.tar.gz
|
||||
/xca-2.7.0.tar.gz
|
||||
/xca-2.9.0.tar.gz
|
||||
|
|
|
|||
2
sources
2
sources
|
|
@ -1 +1 @@
|
|||
SHA512 (xca-2.9.0.tar.gz) = e635b83668d0053acb1ad5a8a20a2a1854de90a1e2a8806ecd38e83528d17bc87042d44fcea0f75f2e17df1ed135cc473449547fe273e7e3ea1fe175a4ddf054
|
||||
SHA512 (xca-2.4.0.tar.gz) = e93e2cf9dc48ed43ee9b51e977f825d81ff08835eb4d77fcbe8f9dc8ce31c77c1da879b48c25ab535717542d1fe84faa6e46c410c116edbee02072040c59667c
|
||||
|
|
|
|||
4046
xca-2.4.0-lang-fr.patch
Normal file
4046
xca-2.4.0-lang-fr.patch
Normal file
File diff suppressed because it is too large
Load diff
312
xca-2.4.0-lang-it.patch
Normal file
312
xca-2.4.0-lang-it.patch
Normal file
|
|
@ -0,0 +1,312 @@
|
|||
From 36abc2b4980980d92a1acb697340c36b8cce6e64 Mon Sep 17 00:00:00 2001
|
||||
From: albanobattistella <34811668+albanobattistella@users.noreply.github.com>
|
||||
Date: Mon, 24 May 2021 17:52:22 +0200
|
||||
Subject: [PATCH] Update xca_it.ts
|
||||
|
||||
---
|
||||
lang/xca_it.ts | 80 +++++++++++++++++++++++++-------------------------
|
||||
1 file changed, 40 insertions(+), 40 deletions(-)
|
||||
|
||||
diff --git a/lang/xca_it.ts b/lang/xca_it.ts
|
||||
index 0bf93bc9..ba06ec62 100644
|
||||
--- a/lang/xca_it.ts
|
||||
+++ b/lang/xca_it.ts
|
||||
@@ -180,7 +180,7 @@
|
||||
</message>
|
||||
<message>
|
||||
<source>Revoked: </source>
|
||||
- <translation type="vanished">Revocato: </translation>
|
||||
+ <translation>Revocato: </translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="+5"/>
|
||||
@@ -1133,7 +1133,7 @@ Ciò eliminerà la chiave '%1' e la renderà non esportabile</translat
|
||||
</message>
|
||||
<message>
|
||||
<source>No deleted items found</source>
|
||||
- <translation type="vanished">Non trovati elementi cancellati</translation>
|
||||
+ <translation>Non trovati elementi cancellati</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location filename="../widgets/MW_menu.cpp" line="-49"/>
|
||||
@@ -1228,11 +1228,11 @@ Ciò eliminerà la chiave '%1' e la renderà non esportabile</translat
|
||||
</message>
|
||||
<message>
|
||||
<source>&New DataBase</source>
|
||||
- <translation type="vanished">&Nuovo database</translation>
|
||||
+ <translation>&Nuovo database</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>&Open DataBase</source>
|
||||
- <translation type="vanished">&Apri database</translation>
|
||||
+ <translation>&Apri database</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="+7"/>
|
||||
@@ -1246,7 +1246,7 @@ Ciò eliminerà la chiave '%1' e la renderà non esportabile</translat
|
||||
</message>
|
||||
<message>
|
||||
<source>&Close DataBase</source>
|
||||
- <translation type="vanished">&Chiudi database</translation>
|
||||
+ <translation>&Chiudi database</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="-10"/>
|
||||
@@ -1408,7 +1408,7 @@ Ciò eliminerà la chiave '%1' e la renderà non esportabile</translat
|
||||
</message>
|
||||
<message>
|
||||
<source>&Content</source>
|
||||
- <translation type="vanished">&Contenuti</translation>
|
||||
+ <translation>&Contenuti</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="+3"/>
|
||||
@@ -1417,7 +1417,7 @@ Ciò eliminerà la chiave '%1' e la renderà non esportabile</translat
|
||||
</message>
|
||||
<message>
|
||||
<source>no such option: %1</source>
|
||||
- <translation type="vanished">opzione inesistente: %1</translation>
|
||||
+ <translation>opzione inesistente: %1</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location filename="../widgets/MainWindow.cpp" line="-336"/>
|
||||
@@ -1483,30 +1483,30 @@ Ciò eliminerà la chiave '%1' e la renderà non esportabile</translat
|
||||
<message>
|
||||
<source>Please enter a password, that will be used to encrypt your private keys in the database:
|
||||
%1</source>
|
||||
- <translation type="vanished">Prego inserire una password che verrà utilizzata per crittare le chiavi private nel database:
|
||||
+ <translation>Prego inserire una password che verrà utilizzata per crittare le chiavi private nel database:
|
||||
%1</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Password verify error, please try again</source>
|
||||
- <translation type="vanished">Errore di verifica password, prego riprovare</translation>
|
||||
+ <translation>Errore di verifica password, prego riprovare</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Password</source>
|
||||
- <translation type="vanished">Password</translation>
|
||||
+ <translation>Password</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Please enter the password for unlocking the database:
|
||||
%1</source>
|
||||
- <translation type="vanished">Prego inserire la password per sbloccare il database:
|
||||
+ <translation>Prego inserire la password per sbloccare il database:
|
||||
%1</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>The following error occurred:</source>
|
||||
- <translation type="vanished">Incontrato l'errore seguente:</translation>
|
||||
+ <translation>Incontrato l'errore seguente:</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Copy to Clipboard</source>
|
||||
- <translation type="vanished">Copia negli appunti</translation>
|
||||
+ <translation>Copia negli appunti</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="+158"/>
|
||||
@@ -1533,7 +1533,7 @@ Prego inserire i bit dei parametri DH</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Error opening file: '%1': %2</source>
|
||||
- <translation type="vanished">Errore in apertura file: '%1': %2</translation>
|
||||
+ <translation>Errore in apertura file: '%1': %2</translation>
|
||||
</message>
|
||||
</context>
|
||||
<context>
|
||||
@@ -1769,7 +1769,7 @@ Prego inserire i bit dei parametri DH</translation>
|
||||
<message>
|
||||
<location line="+16"/>
|
||||
<source>Distinguished name</source>
|
||||
- <translation>Distinguished name</translation>
|
||||
+ <translation>Nome distinto</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="+26"/>
|
||||
@@ -2279,12 +2279,12 @@ nonostante siano stati dichiarati come obbligatori nel menu opzioni.</translatio
|
||||
<message>
|
||||
<location line="+10"/>
|
||||
<source>Hostname</source>
|
||||
- <translation></translation>
|
||||
+ <translation>Nome host</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="+10"/>
|
||||
<source>Username</source>
|
||||
- <translation></translation>
|
||||
+ <translation>Nome utente</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="+10"/>
|
||||
@@ -2309,11 +2309,11 @@ nonostante siano stati dichiarati come obbligatori nel menu opzioni.</translatio
|
||||
</message>
|
||||
<message>
|
||||
<source>Please enter the password to access the database server %2 as user '%1'.</source>
|
||||
- <translation type="vanished">Prego inserire la password di accesso al database server %2 come utente: '%1'.</translation>
|
||||
+ <translation>Prego inserire la password di accesso al database server %2 come utente: '%1'.</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>The database driver does not support transactions. This may happen if the client and server have different versions. Continue with care.</source>
|
||||
- <translation type="vanished">Il driver database non supporta le transazioni. Questo può succedere se il client e il server hanno versioni differenti. Continuare con attenzione.</translation>
|
||||
+ <translation>Il driver database non supporta le transazioni. Questo può succedere se il client e il server hanno versioni differenti. Continuare con attenzione.</translation>
|
||||
</message>
|
||||
</context>
|
||||
<context>
|
||||
@@ -2524,7 +2524,7 @@ Nello specifico EC e DSA sono definiti solo con SHA1 nelle specifiche PKCS#11.</
|
||||
</message>
|
||||
<message>
|
||||
<source>E&xit</source>
|
||||
- <translation type="vanished">E&sci</translation>
|
||||
+ <translation>E&sci</translation>
|
||||
</message>
|
||||
</context>
|
||||
<context>
|
||||
@@ -2614,15 +2614,15 @@ Nello specifico EC e DSA sono definiti solo con SHA1 nelle specifiche PKCS#11.</
|
||||
</message>
|
||||
<message>
|
||||
<source>DB: Rename: '%1' already in use</source>
|
||||
- <translation type="vanished">DB: Rinomina: '%1' già in uso</translation>
|
||||
+ <translation>DB: Rinomina: '%1' già in uso</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>DB: Entry to rename not found: %1</source>
|
||||
- <translation type="vanished">DB: Elemento da rinominare non trovato: %1</translation>
|
||||
+ <translation>DB: Elemento da rinominare non trovato: %1</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>DB: Write error %1 - %2</source>
|
||||
- <translation type="vanished">DB: Errore di scrittura %1 - %2</translation>
|
||||
+ <translation>DB: Errore di scrittura %1 - %2</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location filename="../lib/db.cpp" line="+280"/>
|
||||
@@ -2991,7 +2991,7 @@ Nello specifico EC e DSA sono definiti solo con SHA1 nelle specifiche PKCS#11.</
|
||||
</message>
|
||||
<message>
|
||||
<source>Failed to open PKCS11 library: %1</source>
|
||||
- <translation type="vanished">Impossibile aprire libreria PKCS#11: %1</translation>
|
||||
+ <translation>Impossibile aprire libreria PKCS#11: %1</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location filename="../lib/pkcs11_lib.cpp" line="+69"/>
|
||||
@@ -3456,7 +3456,7 @@ nella libreria %3
|
||||
<name>db_base</name>
|
||||
<message>
|
||||
<source>Error opening file: '%1': %2</source>
|
||||
- <translation type="vanished">Errore in apertura file: '%1': %2</translation>
|
||||
+ <translation>Errore in apertura file: '%1': %2</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location filename="../lib/db_base.cpp" line="+170"/>
|
||||
@@ -3607,15 +3607,15 @@ quindi non è stata importata</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>There are no CA certificates for CRL generation</source>
|
||||
- <translation type="vanished">Non esistono certificati CA per generare la CRL</translation>
|
||||
+ <translation>Non esistono certificati CA per generare la CRL</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Select CA certificate</source>
|
||||
- <translation type="vanished">Seleziona un certificato CA</translation>
|
||||
+ <translation>Seleziona un certificato CA</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Create CRL</source>
|
||||
- <translation type="vanished">Crea CRL</translation>
|
||||
+ <translation>Crea CRL</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="+63"/>
|
||||
@@ -3873,11 +3873,11 @@ e sarà completata con la nuova parte privata della chiave</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Plain View</source>
|
||||
- <translation type="vanished">Visualizzazione semplice</translation>
|
||||
+ <translation>Visualizzazione semplice</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Tree View</source>
|
||||
- <translation type="vanished">Visualizzazione ad albero</translation>
|
||||
+ <translation>Visualizzazione ad albero</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="+219"/>
|
||||
@@ -4000,7 +4000,7 @@ pertanto non è stato importato</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>X509 Certificates ( *.pem *.cer *.crt *.p12 *.p7b )</source>
|
||||
- <translation type="vanished">Certificati x509 ( *.pem *.cer *.crt *.p12 *.p7b )</translation>
|
||||
+ <translation>Certificati x509 ( *.pem *.cer *.crt *.p12 *.p7b )</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="+65"/>
|
||||
@@ -4015,7 +4015,7 @@ pertanto non è stato importato</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Error opening file: '%1': %2</source>
|
||||
- <translation type="vanished">Errore in apertura file: '%1': %2</translation>
|
||||
+ <translation>Errore in apertura file: '%1': %2</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="+69"/>
|
||||
@@ -4024,7 +4024,7 @@ pertanto non è stato importato</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source> days</source>
|
||||
- <translation type="vanished"> giorni</translation>
|
||||
+ <translation> giorni</translation>
|
||||
</message>
|
||||
</context>
|
||||
<context>
|
||||
@@ -4202,11 +4202,11 @@ pertanto non è stata salvata</translation>
|
||||
<name>pki_base</name>
|
||||
<message>
|
||||
<source>Error opening file: '%1': %2</source>
|
||||
- <translation type="vanished">Errore in apertura file: '%1': %2</translation>
|
||||
+ <translation>Errore in apertura file: '%1': %2</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Error writing to file: '%1': %2</source>
|
||||
- <translation type="vanished">Errore scrittura file: '%1': %2</translation>
|
||||
+ <translation>Errore scrittura file: '%1': %2</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location filename="../lib/pki_base.cpp" line="+289"/>
|
||||
@@ -4312,7 +4312,7 @@ Si trova nel database XCA '%5'</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>unknown</source>
|
||||
- <translation type="vanished">Sconosciuto</translation>
|
||||
+ <translation>Sconosciuto</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location line="-1"/>
|
||||
@@ -4322,22 +4322,22 @@ Si trova nel database XCA '%5'</translation>
|
||||
<message>
|
||||
<source>The XCA CRL '%1', issued by the CA '%2' on %3 will expire on %4.
|
||||
It is stored in the XCA database '%5'</source>
|
||||
- <translation type="vanished">La CRL XCA '%1', rilasciata dalla CA '%2' il %3, scadrà il %4. E' mantenuta nel database XCA '%5'</translation>
|
||||
+ <translation>La CRL XCA '%1', rilasciata dalla CA '%2' il %3, scadrà il %4. E' mantenuta nel database XCA '%5'</translation>
|
||||
</message>
|
||||
</context>
|
||||
<context>
|
||||
<name>pki_evp</name>
|
||||
<message>
|
||||
<source>Failed to decrypt the key (bad password) </source>
|
||||
- <translation type="vanished">Impossibile decrittare la chiave (password errata) </translation>
|
||||
+ <translation>Impossibile decrittare la chiave (password errata) </translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Failed to decrypt the key (bad password) %1</source>
|
||||
- <translation type="vanished">Impossibile decrittare la chiave (password errata) %1</translation>
|
||||
+ <translation>Impossibile decrittare la chiave (password errata) %1</translation>
|
||||
</message>
|
||||
<message>
|
||||
<source>Please enter the password to decrypt the private key.</source>
|
||||
- <translation type="vanished">Prego inserire la password per decrittare la chiave privata.</translation>
|
||||
+ <translation>Prego inserire la password per decrittare la chiave privata.</translation>
|
||||
</message>
|
||||
<message>
|
||||
<location filename="../lib/pki_evp.cpp" line="+260"/>
|
||||
17
xca-2.4.0-mimeicons.patch
Normal file
17
xca-2.4.0-mimeicons.patch
Normal file
|
|
@ -0,0 +1,17 @@
|
|||
diff -Naurp xca-2.4.0.orig/misc/xca.xml xca-2.4.0.new/misc/xca.xml
|
||||
--- xca-2.4.0.orig/misc/xca.xml 2021-05-07 22:40:29.000000000 +0200
|
||||
+++ xca-2.4.0.new/misc/xca.xml 2021-11-13 17:09:16.478893271 +0100
|
||||
@@ -3,11 +3,11 @@
|
||||
<mime-type type="application/x-xca-database">
|
||||
<comment>XCA database</comment>
|
||||
<glob pattern="*.xdb"/>
|
||||
- <icon name="x-xca-database"/>
|
||||
+ <generic-icon name="x-xca-database"/>
|
||||
</mime-type>
|
||||
<mime-type type="application/x-xca-template">
|
||||
<comment>XCA template</comment>
|
||||
<glob pattern="*.xca"/>
|
||||
- <icon name="x-xca-template"/>
|
||||
+ <generic-icon name="x-xca-template"/>
|
||||
</mime-type>
|
||||
</mime-info>
|
||||
14
xca-2.4.0-noclean.patch
Normal file
14
xca-2.4.0-noclean.patch
Normal file
|
|
@ -0,0 +1,14 @@
|
|||
diff -Naurp xca-2.4.0.orig/Makefile xca-2.4.0.new/Makefile
|
||||
--- xca-2.4.0.orig/Makefile 2021-05-07 22:40:29.000000000 +0200
|
||||
+++ xca-2.4.0.new/Makefile 2021-11-13 16:59:53.656274074 +0100
|
||||
@@ -69,7 +69,9 @@ PRINT=:
|
||||
endif
|
||||
export PRINT
|
||||
|
||||
-ifneq ($(TOPDIR), $(BUILD))
|
||||
+REALBUILD=$(shell realpath $(BUILD))
|
||||
+REALTOPDIR=$(shell realpath $(TOPDIR))
|
||||
+ifneq ($(REALTOPDIR), $(REALBUILD))
|
||||
do.ui: clean_topdir
|
||||
clean_topdir:
|
||||
$(MAKE) -C $(TOPDIR) clean
|
||||
233
xca-2.4.0-openssl3.patch
Normal file
233
xca-2.4.0-openssl3.patch
Normal file
|
|
@ -0,0 +1,233 @@
|
|||
diff -Naurp xca-2.4.0.orig/lib/pkcs11.cpp xca-2.4.0.new/lib/pkcs11.cpp
|
||||
--- xca-2.4.0.orig/lib/pkcs11.cpp 2021-05-07 22:40:29.000000000 +0200
|
||||
+++ xca-2.4.0.new/lib/pkcs11.cpp 2021-11-13 02:58:27.866824246 +0100
|
||||
@@ -840,8 +840,7 @@ EVP_PKEY *pkcs11::getPrivateKey(EVP_PKEY
|
||||
|
||||
switch (EVP_PKEY_type(keytype)) {
|
||||
case EVP_PKEY_RSA:
|
||||
- rsa = EVP_PKEY_get0_RSA(pub);
|
||||
- rsa = RSAPublicKey_dup(rsa);
|
||||
+ rsa = RSAPublicKey_dup(EVP_PKEY_get0_RSA(pub));
|
||||
openssl_error();
|
||||
if (!rsa_meth) {
|
||||
#if OPENSSL_VERSION_NUMBER >= 0x1010000L
|
||||
@@ -865,8 +864,7 @@ EVP_PKEY *pkcs11::getPrivateKey(EVP_PKEY
|
||||
EVP_PKEY_assign_RSA(evp, rsa);
|
||||
break;
|
||||
case EVP_PKEY_DSA:
|
||||
- dsa = EVP_PKEY_get0_DSA(pub);
|
||||
- dsa = DSAparams_dup(dsa);
|
||||
+ dsa = DSAparams_dup(EVP_PKEY_get0_DSA(pub));
|
||||
openssl_error();
|
||||
if (!dsa_meth) {
|
||||
#if OPENSSL_VERSION_NUMBER >= 0x10100000L
|
||||
@@ -889,8 +887,7 @@ EVP_PKEY *pkcs11::getPrivateKey(EVP_PKEY
|
||||
break;
|
||||
#if !defined(OPENSSL_NO_EC) && OPENSSL_VERSION_NUMBER >= 0x10100000L
|
||||
case EVP_PKEY_EC:
|
||||
- ec = EVP_PKEY_get0_EC_KEY(pub);
|
||||
- ec = EC_KEY_dup(ec);
|
||||
+ ec = EC_KEY_dup(EVP_PKEY_get0_EC_KEY(pub));
|
||||
openssl_error();
|
||||
if (!ec_key_meth) {
|
||||
ec_key_meth = setup_ec_key_meth();
|
||||
diff -Naurp xca-2.4.0.orig/lib/pki_evp.cpp xca-2.4.0.new/lib/pki_evp.cpp
|
||||
--- xca-2.4.0.orig/lib/pki_evp.cpp 2021-05-07 22:40:29.000000000 +0200
|
||||
+++ xca-2.4.0.new/lib/pki_evp.cpp 2021-11-13 03:00:39.279152488 +0100
|
||||
@@ -282,8 +282,8 @@ void pki_evp::fromPEMbyteArray(const QBy
|
||||
static void search_ec_oid(EVP_PKEY *pkey)
|
||||
{
|
||||
#ifndef OPENSSL_NO_EC
|
||||
- EC_KEY *ec;
|
||||
EC_GROUP *builtin;
|
||||
+ const EC_KEY *ec;
|
||||
const EC_GROUP *ec_group;
|
||||
|
||||
int keytype = EVP_PKEY_id(pkey);
|
||||
@@ -498,7 +498,7 @@ void pki_evp::fload(const QString &fname
|
||||
void pki_evp::fromData(const unsigned char *p, db_header_t *head)
|
||||
{
|
||||
int version, type, size;
|
||||
- void *ptr = NULL;
|
||||
+ const void *ptr = NULL;
|
||||
|
||||
if (key)
|
||||
EVP_PKEY_free(key);
|
||||
@@ -518,8 +518,23 @@ void pki_evp::fromData(const unsigned ch
|
||||
}
|
||||
pki_openssl_error();
|
||||
|
||||
- if (key)
|
||||
- ptr = EVP_PKEY_get0(key);
|
||||
+ if (key) {
|
||||
+ switch (EVP_PKEY_type(EVP_PKEY_id(key))) {
|
||||
+ case EVP_PKEY_RSA:
|
||||
+ ptr = EVP_PKEY_get0_RSA(key);
|
||||
+ break;
|
||||
+ case EVP_PKEY_DSA:
|
||||
+ ptr = EVP_PKEY_get0_DSA(key);
|
||||
+ break;
|
||||
+#ifndef OPENSSL_NO_EX
|
||||
+ case EVP_PKEY_EC:
|
||||
+ ptr = EVP_PKEY_get0_EC_KEY(key);
|
||||
+ break;
|
||||
+#endif
|
||||
+ default:
|
||||
+ ptr = EVP_PKEY_get0(key);
|
||||
+ }
|
||||
+ }
|
||||
if (!ptr)
|
||||
throw errorEx(tr("Ignoring unsupported private key"));
|
||||
|
||||
@@ -621,8 +636,8 @@ EVP_PKEY *pki_evp::legacyDecryptKey(QByt
|
||||
|
||||
pki_openssl_error();
|
||||
if (EVP_PKEY_type(getKeyType()) == EVP_PKEY_RSA) {
|
||||
- RSA *rsa = EVP_PKEY_get0_RSA(tmpkey);
|
||||
- RSA_blinding_on(rsa, NULL);
|
||||
+ const RSA *rsa = EVP_PKEY_get0_RSA(tmpkey);
|
||||
+ RSA_blinding_on((RSA *) rsa, NULL);
|
||||
}
|
||||
myencKey.fill(0);
|
||||
return tmpkey;
|
||||
@@ -930,7 +945,7 @@ bool pki_evp::verify_priv(EVP_PKEY *pkey
|
||||
EVP_MD_CTX_free(ctx);
|
||||
#endif
|
||||
if (EVP_PKEY_id(pkey) == EVP_PKEY_RSA && EVP_PKEY_isPrivKey(pkey)) {
|
||||
- RSA *rsa = EVP_PKEY_get0_RSA(pkey);
|
||||
+ const RSA *rsa = EVP_PKEY_get0_RSA(pkey);
|
||||
if (RSA_check_key(rsa) != 1)
|
||||
verify = false;
|
||||
}
|
||||
diff -Naurp xca-2.4.0.orig/lib/pki_key.cpp xca-2.4.0.new/lib/pki_key.cpp
|
||||
--- xca-2.4.0.orig/lib/pki_key.cpp 2021-05-07 22:40:29.000000000 +0200
|
||||
+++ xca-2.4.0.new/lib/pki_key.cpp 2021-11-13 02:58:27.866824246 +0100
|
||||
@@ -197,7 +197,7 @@ QString pki_key::length() const
|
||||
|
||||
if (EVP_PKEY_id(key) == EVP_PKEY_DSA) {
|
||||
const BIGNUM *p = NULL;
|
||||
- DSA *dsa = EVP_PKEY_get0_DSA(key);
|
||||
+ const DSA *dsa = EVP_PKEY_get0_DSA(key);
|
||||
if (dsa)
|
||||
DSA_get0_pqg(dsa, &p, NULL, NULL);
|
||||
dsa_unset = p == NULL;
|
||||
@@ -299,7 +299,7 @@ QString pki_key::modulus() const
|
||||
if (getKeyType() == EVP_PKEY_RSA) {
|
||||
const BIGNUM *n = NULL;
|
||||
|
||||
- RSA *rsa = EVP_PKEY_get0_RSA(key);
|
||||
+ const RSA *rsa = EVP_PKEY_get0_RSA(key);
|
||||
RSA_get0_key(rsa, &n, NULL, NULL);
|
||||
return BN2QString(n);
|
||||
}
|
||||
@@ -310,7 +310,7 @@ QString pki_key::pubEx() const
|
||||
{
|
||||
if (getKeyType() == EVP_PKEY_RSA) {
|
||||
const BIGNUM *e = NULL;
|
||||
- RSA *rsa = EVP_PKEY_get0_RSA(key);
|
||||
+ const RSA *rsa = EVP_PKEY_get0_RSA(key);
|
||||
RSA_get0_key(rsa, NULL, &e, NULL);
|
||||
return BN2QString(e);
|
||||
}
|
||||
@@ -321,7 +321,7 @@ QString pki_key::subprime() const
|
||||
{
|
||||
if (getKeyType() == EVP_PKEY_DSA) {
|
||||
const BIGNUM *q = NULL;
|
||||
- DSA *dsa = EVP_PKEY_get0_DSA(key);
|
||||
+ const DSA *dsa = EVP_PKEY_get0_DSA(key);
|
||||
if (dsa)
|
||||
DSA_get0_pqg(dsa, NULL, &q, NULL);
|
||||
return BN2QString(q);
|
||||
@@ -333,7 +333,7 @@ QString pki_key::pubkey() const
|
||||
{
|
||||
if (getKeyType() == EVP_PKEY_DSA) {
|
||||
const BIGNUM *pubkey = NULL;
|
||||
- DSA *dsa = EVP_PKEY_get0_DSA(key);
|
||||
+ const DSA *dsa = EVP_PKEY_get0_DSA(key);
|
||||
if (dsa)
|
||||
DSA_get0_key(dsa, &pubkey, NULL);
|
||||
return BN2QString(pubkey);
|
||||
@@ -766,7 +766,7 @@ QByteArray pki_key::SSH2publicQByteArray
|
||||
txt = "ssh-rsa";
|
||||
ssh_key_QBA2data(txt, &data);
|
||||
{
|
||||
- RSA *rsa = EVP_PKEY_get0_RSA(key);
|
||||
+ const RSA *rsa = EVP_PKEY_get0_RSA(key);
|
||||
const BIGNUM *n, *e;
|
||||
RSA_get0_key(rsa, &n, &e, NULL);
|
||||
ssh_key_bn2data(e, &data);
|
||||
@@ -777,7 +777,7 @@ QByteArray pki_key::SSH2publicQByteArray
|
||||
txt = "ssh-dss";
|
||||
ssh_key_QBA2data(txt, &data);
|
||||
{
|
||||
- DSA *dsa = EVP_PKEY_get0_DSA(key);
|
||||
+ const DSA *dsa = EVP_PKEY_get0_DSA(key);
|
||||
const BIGNUM *p, *q, *g, *pubkey;
|
||||
DSA_get0_pqg(dsa, &p, &q, &g);
|
||||
DSA_get0_key(dsa, &pubkey, NULL);
|
||||
diff -Naurp xca-2.4.0.orig/lib/pki_scard.cpp xca-2.4.0.new/lib/pki_scard.cpp
|
||||
--- xca-2.4.0.orig/lib/pki_scard.cpp 2021-05-07 22:40:29.000000000 +0200
|
||||
+++ xca-2.4.0.new/lib/pki_scard.cpp 2021-11-13 03:02:20.379174056 +0100
|
||||
@@ -293,10 +293,10 @@ void pki_scard::deleteFromToken()
|
||||
pk11_attlist pki_scard::objectAttributesNoId(EVP_PKEY *pk, bool priv) const
|
||||
{
|
||||
QByteArray ba;
|
||||
- RSA *rsa;
|
||||
- DSA *dsa;
|
||||
+ const RSA *rsa;
|
||||
+ const DSA *dsa;
|
||||
#ifndef OPENSSL_NO_EC
|
||||
- EC_KEY *ec;
|
||||
+ const EC_KEY *ec;
|
||||
#endif
|
||||
const BIGNUM *n = NULL;
|
||||
const BIGNUM *e = NULL;
|
||||
@@ -401,10 +401,10 @@ int pki_scard::renameOnToken(const sloti
|
||||
void pki_scard::store_token(const slotid &slot, EVP_PKEY *pkey)
|
||||
{
|
||||
QByteArray ba;
|
||||
- RSA *rsa;
|
||||
- DSA *dsa;
|
||||
+ const RSA *rsa;
|
||||
+ const DSA *dsa;
|
||||
#ifndef OPENSSL_NO_EC
|
||||
- EC_KEY *ec;
|
||||
+ const EC_KEY *ec;
|
||||
#endif
|
||||
pk11_attlist pub_atts;
|
||||
pk11_attlist priv_atts;
|
||||
@@ -691,7 +691,7 @@ pki_scard::~pki_scard()
|
||||
void pki_scard::fromData(const unsigned char *p, db_header_t *head )
|
||||
{
|
||||
int version, size;
|
||||
- void *ptr = NULL;
|
||||
+ const void *ptr = NULL;
|
||||
|
||||
size = head->len - sizeof(db_header_t);
|
||||
version = head->version;
|
||||
@@ -713,8 +713,23 @@ void pki_scard::fromData(const unsigned
|
||||
|
||||
d2i(ba);
|
||||
|
||||
- if (key)
|
||||
- ptr = EVP_PKEY_get0(key);
|
||||
+ if (key) {
|
||||
+ switch (EVP_PKEY_type(EVP_PKEY_id(key))) {
|
||||
+ case EVP_PKEY_RSA:
|
||||
+ ptr = EVP_PKEY_get0_RSA(key);
|
||||
+ break;
|
||||
+ case EVP_PKEY_DSA:
|
||||
+ ptr = EVP_PKEY_get0_DSA(key);
|
||||
+ break;
|
||||
+#ifndef OPENSSL_NO_EX
|
||||
+ case EVP_PKEY_EC:
|
||||
+ ptr = EVP_PKEY_get0_EC_KEY(key);
|
||||
+ break;
|
||||
+#endif
|
||||
+ default:
|
||||
+ ptr = EVP_PKEY_get0(key);
|
||||
+ }
|
||||
+ }
|
||||
|
||||
if (!ptr)
|
||||
throw errorEx(tr("Ignoring unsupported token key"));
|
||||
|
|
@ -1,28 +0,0 @@
|
|||
When trying to use a private key when working on a database protected by
|
||||
a password set by xca version < 2.0.0, version 2.5.0 and above might issue an
|
||||
error like:
|
||||
|
||||
---
|
||||
The following error occurred:
|
||||
(8pki_x509[]:foo)
|
||||
error:0300009C:digital envelope routines::unsupported algorithm
|
||||
error:068C0100:asn1 encoding routines::malloc failure
|
||||
error:068C0100:asn1 encoding routines::malloc failure
|
||||
|
||||
(pki_x509.cpp:574)
|
||||
---
|
||||
|
||||
The database is therefore unusable as it is in xca 2.5.0 for any operation
|
||||
involving some private key.
|
||||
|
||||
The solution is to reset the database password with xca version 2.4.0
|
||||
(Extra --> Change Database password). The new password may be the same as
|
||||
the old one.
|
||||
|
||||
If some private keys have their own password, reset the latter the same
|
||||
way (right click --> Change password).
|
||||
|
||||
Once these operations have been performed, the database is ready for use with
|
||||
xca version >= 2.5.
|
||||
|
||||
See https://github.com/chris2511/xca/discussions/468.
|
||||
|
|
@ -1,504 +0,0 @@
|
|||
diff -Naurp xca-2.9.0.orig/lib/asn1int.cpp xca-2.9.0.new/lib/asn1int.cpp
|
||||
--- xca-2.9.0.orig/lib/asn1int.cpp 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/lib/asn1int.cpp 2026-07-21 14:50:45.138768332 +0200
|
||||
@@ -10,6 +10,7 @@
|
||||
#include "func_base.h"
|
||||
#include "exception.h"
|
||||
#include "limits.h"
|
||||
+#include "openssl_compat.h"
|
||||
#include <openssl/err.h>
|
||||
#include <openssl/bn.h>
|
||||
|
||||
@@ -67,7 +68,7 @@ a1int &a1int::set(long l)
|
||||
QString a1int::toQString(int dec) const
|
||||
{
|
||||
QString r;
|
||||
- if (in->length == 0) {
|
||||
+ if (xca_asn1_string_length(in.get()) == 0) {
|
||||
return r;
|
||||
}
|
||||
QSharedPointer<BIGNUM> bn(ASN1_INTEGER_to_BN(get0(), NULL), BN_free);
|
||||
diff -Naurp xca-2.9.0.orig/lib/asn1time.cpp xca-2.9.0.new/lib/asn1time.cpp
|
||||
--- xca-2.9.0.orig/lib/asn1time.cpp 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/lib/asn1time.cpp 2026-07-21 15:48:01.479132516 +0200
|
||||
@@ -11,6 +11,7 @@
|
||||
#include "func.h"
|
||||
#include "exception.h"
|
||||
#include "asn1time.h"
|
||||
+#include "openssl_compat.h"
|
||||
#include <openssl/x509.h>
|
||||
#include <openssl/err.h>
|
||||
#include <openssl/opensslv.h>
|
||||
@@ -50,7 +51,8 @@ int a1time::from_asn1(const ASN1_TIME *a
|
||||
gt = ASN1_TIME_to_generalizedtime((ASN1_TIME*)a, NULL);
|
||||
if (!gt)
|
||||
return -1;
|
||||
- t = QString::fromLatin1((char*)gt->data, gt->length);
|
||||
+ t = QString::fromLatin1((char*)xca_asn1_string_get0_data(gt),
|
||||
+ xca_asn1_string_length(gt));
|
||||
ASN1_GENERALIZEDTIME_free(gt);
|
||||
return fromPlain(t);
|
||||
}
|
||||
@@ -68,11 +70,15 @@ int a1time::fromPlain(const QString &pla
|
||||
|
||||
int a1time::set_asn1(const QString &str, int type) const
|
||||
{
|
||||
- if (!atime)
|
||||
- atime = ASN1_TIME_new();
|
||||
- if (!atime)
|
||||
- return -1;
|
||||
- atime->type = type;
|
||||
+ if (atime && xca_asn1_string_type(atime) != type) {
|
||||
+ ASN1_STRING_free(atime);
|
||||
+ atime = NULL;
|
||||
+ }
|
||||
+ if (!atime) {
|
||||
+ atime = ASN1_STRING_type_new(type);
|
||||
+ if (!atime)
|
||||
+ return -1;
|
||||
+ }
|
||||
if (ASN1_STRING_set(atime, str.toLatin1(), str.length()))
|
||||
return -1;
|
||||
return 0;
|
||||
diff -Naurp xca-2.9.0.orig/lib/openssl_compat.h xca-2.9.0.new/lib/openssl_compat.h
|
||||
--- xca-2.9.0.orig/lib/openssl_compat.h 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/lib/openssl_compat.h 2026-07-21 16:05:30.252809689 +0200
|
||||
@@ -35,4 +35,15 @@ EVP_DigestVerify(EVP_MD_CTX *ctx, const
|
||||
}
|
||||
#endif
|
||||
|
||||
+
|
||||
+#if OPENSSL_VERSION_NUMBER < 0x40000000L
|
||||
+#define xca_asn1_string_length(p) ((p)->length)
|
||||
+#define xca_asn1_string_get0_data(p) ((p)->data)
|
||||
+#define xca_asn1_string_type(p) ((p)->type)
|
||||
+#else
|
||||
+#define xca_asn1_string_length(p) ASN1_STRING_length(p)
|
||||
+#define xca_asn1_string_get0_data(p) ASN1_STRING_get0_data(p)
|
||||
+#define xca_asn1_string_type(p) ASN1_STRING_type(p)
|
||||
+#endif
|
||||
+
|
||||
#endif
|
||||
diff -Naurp xca-2.9.0.orig/lib/pkcs11.cpp xca-2.9.0.new/lib/pkcs11.cpp
|
||||
--- xca-2.9.0.orig/lib/pkcs11.cpp 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/lib/pkcs11.cpp 2026-07-22 17:10:39.158463523 +0200
|
||||
@@ -650,29 +650,6 @@ int pkcs11::encrypt(int flen, const unsi
|
||||
return size;
|
||||
}
|
||||
|
||||
-#if not defined OPENSSL_NO_EC and defined EVP_PKEY_ED25519
|
||||
-// Shared between libressl and openssl
|
||||
-static int eng_idx = -1;
|
||||
-static int eng_finish(ENGINE *e)
|
||||
-{
|
||||
- pkcs11 *p11 = (pkcs11 *)ENGINE_get_ex_data(e, eng_idx);
|
||||
- delete p11;
|
||||
- ENGINE_set_ex_data(e, eng_idx, NULL);
|
||||
- return 1;
|
||||
-}
|
||||
-
|
||||
-#if (OPENSSL_VERSION_NUMBER >= 0x30000000L)
|
||||
-static int eng_pmeth_copy(EVP_PKEY_CTX *dst, const EVP_PKEY_CTX *src)
|
||||
-#else
|
||||
-static int eng_pmeth_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
|
||||
-#endif
|
||||
-{
|
||||
- void *p = EVP_PKEY_CTX_get_app_data((EVP_PKEY_CTX *)src);
|
||||
- EVP_PKEY_CTX_set_app_data(dst, p);
|
||||
- return 1;
|
||||
-}
|
||||
-#endif
|
||||
-
|
||||
static int rsa_privdata_free(RSA *rsa)
|
||||
{
|
||||
pkcs11 *priv = (pkcs11*)RSA_get_app_data(rsa);
|
||||
@@ -830,10 +807,33 @@ static EC_KEY_METHOD *setup_ec_key_meth(
|
||||
ec_set_private_proc, ec_set_public_proc);
|
||||
return ec_key_meth;
|
||||
}
|
||||
-#ifdef EVP_PKEY_ED25519
|
||||
+
|
||||
+
|
||||
+#if defined(EVP_PKEY_ED25519) && OPENSSL_VERSION_NUMBER < 0x40000000L
|
||||
|
||||
static EVP_PKEY_METHOD *p11_eddsa_method;
|
||||
|
||||
+// Shared between libressl and openssl
|
||||
+static int eng_idx = -1;
|
||||
+static int eng_finish(ENGINE *e)
|
||||
+{
|
||||
+ pkcs11 *p11 = (pkcs11 *)ENGINE_get_ex_data(e, eng_idx);
|
||||
+ delete p11;
|
||||
+ ENGINE_set_ex_data(e, eng_idx, NULL);
|
||||
+ return 1;
|
||||
+}
|
||||
+
|
||||
+#if (OPENSSL_VERSION_NUMBER >= 0x30000000L)
|
||||
+static int eng_pmeth_copy(EVP_PKEY_CTX *dst, const EVP_PKEY_CTX *src)
|
||||
+#else
|
||||
+static int eng_pmeth_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
|
||||
+#endif
|
||||
+{
|
||||
+ void *p = EVP_PKEY_CTX_get_app_data((EVP_PKEY_CTX *)src);
|
||||
+ EVP_PKEY_CTX_set_app_data(dst, p);
|
||||
+ return 1;
|
||||
+}
|
||||
+
|
||||
static int eddsa_eng_meths(ENGINE *e, EVP_PKEY_METHOD **m, const int **nids, int nid)
|
||||
{
|
||||
static const int my_nids[] = {EVP_PKEY_ED25519 };
|
||||
@@ -904,7 +904,7 @@ EVP_PKEY *pkcs11::getPrivateKey(EVP_PKEY
|
||||
#ifndef OPENSSL_NO_EC
|
||||
static EC_KEY_METHOD *ec_key_meth = NULL;
|
||||
EC_KEY *ec;
|
||||
-#ifdef EVP_PKEY_ED25519
|
||||
+#if defined(EVP_PKEY_ED25519) && OPENSSL_VERSION_NUMBER < 0x40000000L
|
||||
static ENGINE *e = NULL;
|
||||
|
||||
if (!e) {
|
||||
@@ -991,6 +991,7 @@ EVP_PKEY *pkcs11::getPrivateKey(EVP_PKEY
|
||||
#ifdef EVP_PKEY_ED25519
|
||||
case EVP_PKEY_ED25519:
|
||||
size_t len;
|
||||
+#if OPENSSL_VERSION_NUMBER < 0x40000000L
|
||||
if (ENGINE_get_ex_data(e, eng_idx))
|
||||
qWarning() << "We forgot to free the previous Card key.";
|
||||
ENGINE_set_ex_data(e, eng_idx, this);
|
||||
@@ -1003,6 +1004,17 @@ EVP_PKEY *pkcs11::getPrivateKey(EVP_PKEY
|
||||
openssl_error();
|
||||
OPENSSL_free(pubkey);
|
||||
//EVP_PKEY_set1_engine(evp, e);
|
||||
+#else
|
||||
+ p11obj = obj;
|
||||
+ EVP_PKEY_get_raw_public_key(pub, NULL, &len);
|
||||
+ unsigned char *pubkey = (unsigned char *)OPENSSL_malloc(len);
|
||||
+ Q_CHECK_PTR(pubkey);
|
||||
+ EVP_PKEY_get_raw_public_key(pub, pubkey, &len);
|
||||
+ evp = EVP_PKEY_new_raw_public_key_ex(OSSL_LIB_CTX_get0_global_default(),
|
||||
+ "ED25519", NULL, pubkey, len);
|
||||
+ openssl_error();
|
||||
+ OPENSSL_free(pubkey);
|
||||
+#endif
|
||||
break;
|
||||
#endif
|
||||
#endif
|
||||
diff -Naurp xca-2.9.0.orig/lib/pki_pkcs12.cpp xca-2.9.0.new/lib/pki_pkcs12.cpp
|
||||
--- xca-2.9.0.orig/lib/pki_pkcs12.cpp 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/lib/pki_pkcs12.cpp 2026-07-21 14:41:11.421805953 +0200
|
||||
@@ -85,7 +85,7 @@ pki_pkcs12::pki_pkcs12(const QString &fn
|
||||
}
|
||||
pki_ign_openssl_error();
|
||||
if (mycert) {
|
||||
- unsigned char *str = X509_alias_get0(mycert, NULL);
|
||||
+ const unsigned char *str = X509_alias_get0(mycert, NULL);
|
||||
if (str)
|
||||
alias = QString::fromUtf8((const char *)str);
|
||||
alias = QString::fromUtf8(alias.toLatin1());
|
||||
diff -Naurp xca-2.9.0.orig/lib/pki_scard.cpp xca-2.9.0.new/lib/pki_scard.cpp
|
||||
--- xca-2.9.0.orig/lib/pki_scard.cpp 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/lib/pki_scard.cpp 2026-07-21 16:07:19.266072856 +0200
|
||||
@@ -14,6 +14,7 @@
|
||||
#include "pkcs11.h"
|
||||
#include "x509name.h"
|
||||
#include "func.h"
|
||||
+#include "openssl_compat.h"
|
||||
#include "XcaProgress.h"
|
||||
|
||||
#include "XcaWarningCore.h"
|
||||
@@ -187,7 +188,8 @@ EVP_PKEY *pki_scard::load_pubkey(pkcs11
|
||||
d2i_bytearray(D2I_VOID(d2i_ASN1_OCTET_STRING), ba);
|
||||
pki_openssl_error();
|
||||
|
||||
- BIGNUM *bn = BN_bin2bn(os->data, os->length, NULL);
|
||||
+ BIGNUM *bn = BN_bin2bn(xca_asn1_string_get0_data(os),
|
||||
+ xca_asn1_string_length(os), NULL);
|
||||
pki_openssl_error();
|
||||
|
||||
EC_POINT *point = EC_POINT_bn2point(group, bn, NULL, NULL);
|
||||
@@ -215,8 +217,8 @@ EVP_PKEY *pki_scard::load_pubkey(pkcs11
|
||||
d2i_bytearray(D2I_VOID(d2i_ASN1_OCTET_STRING), ba);
|
||||
pki_openssl_error();
|
||||
pkey = EVP_PKEY_new_raw_public_key(EVP_PKEY_ED25519, NULL,
|
||||
- (const uint8_t *)os->data,
|
||||
- os->length);
|
||||
+ (const uint8_t *)xca_asn1_string_get0_data(os),
|
||||
+ xca_asn1_string_length(os));
|
||||
pki_openssl_error();
|
||||
ASN1_OCTET_STRING_free(os);
|
||||
pki_openssl_error();
|
||||
diff -Naurp xca-2.9.0.orig/lib/pki_x509.cpp xca-2.9.0.new/lib/pki_x509.cpp
|
||||
--- xca-2.9.0.orig/lib/pki_x509.cpp 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/lib/pki_x509.cpp 2026-07-21 16:09:29.644513174 +0200
|
||||
@@ -836,7 +836,7 @@ pki_key *pki_x509::getPubKey() const
|
||||
bool pki_x509::compareNameAndKey(pki_x509 *other)
|
||||
{
|
||||
int r;
|
||||
- X509_NAME *s1, *s2;
|
||||
+ const X509_NAME *s1, *s2;
|
||||
EVP_PKEY *pub1, *pub2;
|
||||
|
||||
if (!cert || !other->cert)
|
||||
diff -Naurp xca-2.9.0.orig/lib/pki_x509req.cpp xca-2.9.0.new/lib/pki_x509req.cpp
|
||||
--- xca-2.9.0.orig/lib/pki_x509req.cpp 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/lib/pki_x509req.cpp 2026-07-21 16:11:59.068866756 +0200
|
||||
@@ -15,6 +15,7 @@
|
||||
#include "db_base.h"
|
||||
#include "x509name.h"
|
||||
#include "exception.h"
|
||||
+#include "openssl_compat.h"
|
||||
#include <openssl/bio.h>
|
||||
|
||||
pki_x509req::pki_x509req(const QString &name)
|
||||
@@ -204,7 +205,9 @@ void pki_x509req::addAttribute(int nid,
|
||||
return;
|
||||
|
||||
ASN1_STRING *a = QStringToAsn1(content, nid);
|
||||
- X509_REQ_add1_attr_by_NID(request, nid, a->type, a->data, a->length);
|
||||
+ X509_REQ_add1_attr_by_NID(request, nid, xca_asn1_string_type(a),
|
||||
+ xca_asn1_string_get0_data(a),
|
||||
+ xca_asn1_string_length(a));
|
||||
ASN1_STRING_free(a);
|
||||
openssl_error_msg(QString("'%1' (%2)").arg(content).arg(OBJ_nid2ln(nid)));
|
||||
}
|
||||
diff -Naurp xca-2.9.0.orig/lib/x509name.cpp xca-2.9.0.new/lib/x509name.cpp
|
||||
--- xca-2.9.0.orig/lib/x509name.cpp 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/lib/x509name.cpp 2026-07-21 15:56:14.876877763 +0200
|
||||
@@ -9,6 +9,7 @@
|
||||
#include "base.h"
|
||||
#include "func_base.h"
|
||||
#include "BioByteArray.h"
|
||||
+#include "openssl_compat.h"
|
||||
#include <openssl/asn1.h>
|
||||
#include <openssl/err.h>
|
||||
#include "exception.h"
|
||||
@@ -89,7 +90,7 @@ QString x509name::getMostPopular() const
|
||||
QString x509name::getEntry(int i) const
|
||||
{
|
||||
QString ret;
|
||||
- ASN1_STRING *d;
|
||||
+ const ASN1_STRING *d;
|
||||
|
||||
if ( i<0 || i>entryCount() )
|
||||
return ret;
|
||||
@@ -102,7 +103,7 @@ QString x509name::getEntry(int i) const
|
||||
QString x509name::getEntryTag(int i) const
|
||||
{
|
||||
QString s = QObject::tr("Invalid");
|
||||
- ASN1_STRING *d;
|
||||
+ const ASN1_STRING *d;
|
||||
|
||||
if (i<0 || i>=entryCount())
|
||||
i = entryCount() - 1;
|
||||
@@ -111,7 +112,7 @@ QString x509name::getEntryTag(int i) con
|
||||
if (!d)
|
||||
return s;
|
||||
|
||||
- s = ASN1_tag2str(d->type);
|
||||
+ s = ASN1_tag2str(xca_asn1_string_type(d));
|
||||
return s;
|
||||
}
|
||||
|
||||
@@ -154,13 +155,13 @@ QStringList x509name::entryList(int i) c
|
||||
|
||||
int x509name::nid(int i) const
|
||||
{
|
||||
- X509_NAME_ENTRY *ne = X509_NAME_get_entry(get0(), i);
|
||||
+ const X509_NAME_ENTRY *ne = X509_NAME_get_entry(get0(), i);
|
||||
return ne ? OBJ_obj2nid(X509_NAME_ENTRY_get_object(ne)) : NID_undef;
|
||||
}
|
||||
|
||||
QString x509name::getOid(int i) const
|
||||
{
|
||||
- X509_NAME_ENTRY *ne = X509_NAME_get_entry(_get(), i);
|
||||
+ const X509_NAME_ENTRY *ne = X509_NAME_get_entry(_get(), i);
|
||||
return ne ? OBJ_obj2QString(X509_NAME_ENTRY_get_object(ne), 1) : QString();
|
||||
}
|
||||
|
||||
@@ -258,7 +259,10 @@ void x509name::addEntryByNid(int nid, co
|
||||
if (entry.isEmpty())
|
||||
return;
|
||||
ASN1_STRING *a = QStringToAsn1(entry.simplified(), nid);
|
||||
- X509_NAME_add_entry_by_NID(_get(), nid, a->type, a->data, a->length, -1, 0);
|
||||
+ X509_NAME_add_entry_by_NID(_get(), nid,
|
||||
+ xca_asn1_string_type(a),
|
||||
+ xca_asn1_string_get0_data(a),
|
||||
+ xca_asn1_string_length(a), -1, 0);
|
||||
ASN1_STRING_free(a);
|
||||
openssl_error_msg(QString("'%1' (%2)").arg(entry).arg(OBJ_nid2ln(nid)));
|
||||
}
|
||||
diff -Naurp xca-2.9.0.orig/lib/x509v3ext.cpp xca-2.9.0.new/lib/x509v3ext.cpp
|
||||
--- xca-2.9.0.orig/lib/x509v3ext.cpp 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/lib/x509v3ext.cpp 2026-07-22 17:43:52.060374543 +0200
|
||||
@@ -10,6 +10,7 @@
|
||||
#include "asn1int.h"
|
||||
#include "func.h"
|
||||
#include "exception.h"
|
||||
+#include "openssl_compat.h"
|
||||
#include <openssl/x509v3.h>
|
||||
#include <openssl/stack.h>
|
||||
#include <QStringList>
|
||||
@@ -49,8 +50,8 @@ x509v3ext::~x509v3ext()
|
||||
x509v3ext &x509v3ext::set(const X509_EXTENSION *n)
|
||||
{
|
||||
if (n) {
|
||||
- ASN1_OCTET_STRING *str = X509_EXTENSION_get_data((X509_EXTENSION *)n);
|
||||
- if (!str || !str->length)
|
||||
+ const ASN1_OCTET_STRING *str = X509_EXTENSION_get_data((X509_EXTENSION *)n);
|
||||
+ if (!str || !xca_asn1_string_length(str))
|
||||
n = nullptr;
|
||||
}
|
||||
if (ext != nullptr)
|
||||
@@ -116,7 +117,7 @@ x509v3ext &x509v3ext::create_ia5(int nid
|
||||
|
||||
const ASN1_OBJECT *x509v3ext::object() const
|
||||
{
|
||||
- ASN1_OBJECT *obj = nullptr;
|
||||
+ const ASN1_OBJECT *obj = nullptr;
|
||||
if (ext) {
|
||||
obj = X509_EXTENSION_get_object(ext);
|
||||
ign_openssl_error();
|
||||
@@ -166,9 +167,9 @@ int x509v3ext::getCritical() const
|
||||
return ext ? X509_EXTENSION_get_critical(ext) : 0;
|
||||
}
|
||||
|
||||
-ASN1_OCTET_STRING *x509v3ext::getData() const
|
||||
+const ASN1_OCTET_STRING *x509v3ext::getData() const
|
||||
{
|
||||
- return ext ? X509_EXTENSION_get_data(ext) : nullptr;;
|
||||
+ return ext ? X509_EXTENSION_get_data(ext) : nullptr;
|
||||
}
|
||||
|
||||
QString x509v3ext::getValue() const
|
||||
@@ -318,7 +319,7 @@ static QString ipv6_from_binary(const un
|
||||
static bool
|
||||
genName2conf(GENERAL_NAME *gen, QString tag, QString *single, QString *sect)
|
||||
{
|
||||
- unsigned char *p;
|
||||
+ const unsigned char *p;
|
||||
QString ret;
|
||||
|
||||
switch (gen->type) {
|
||||
@@ -335,22 +336,23 @@ genName2conf(GENERAL_NAME *gen, QString
|
||||
return true;
|
||||
}
|
||||
case GEN_IPADD:
|
||||
- p = gen->d.ip->data;
|
||||
- if (gen->d.ip->length == 4) {
|
||||
+ p = xca_asn1_string_get0_data(gen->d.ip);
|
||||
+ if (xca_asn1_string_length(gen->d.ip) == 4) {
|
||||
*single = QString("IP:%1.%2.%3.%4").
|
||||
arg(p[0]).arg(p[1]).arg(p[2]).arg(p[3]);
|
||||
return true;
|
||||
- } else if(gen->d.ip->length == 8) {
|
||||
+ } else if(xca_asn1_string_length(gen->d.ip) == 8) {
|
||||
*single = QString("IP:%1.%2.%3.%4/%5.%6.%7.%8").
|
||||
arg(p[0]).arg(p[1]).arg(p[2]).arg(p[3]).
|
||||
arg(p[4]).arg(p[5]).arg(p[6]).arg(p[7]);
|
||||
return true;
|
||||
- } else if(gen->d.ip->length == 16) {
|
||||
- *single = "IP:" + ipv6_from_binary(gen->d.ip->data);
|
||||
+ } else if(xca_asn1_string_length(gen->d.ip) == 16) {
|
||||
+ *single = "IP:" + ipv6_from_binary(xca_asn1_string_get0_data(gen->d.ip));
|
||||
return true;
|
||||
- } else if(gen->d.ip->length == 32) {
|
||||
- *single = "IP:" + ipv6_from_binary(gen->d.ip->data) +
|
||||
- "/" + ipv6_from_binary(gen->d.ip->data +16);
|
||||
+ } else if(xca_asn1_string_length(gen->d.ip) == 32) {
|
||||
+ *single = "IP:" +
|
||||
+ ipv6_from_binary(xca_asn1_string_get0_data(gen->d.ip)) +
|
||||
+ "/" + ipv6_from_binary(xca_asn1_string_get0_data(gen->d.ip) + 16);
|
||||
return true;
|
||||
}
|
||||
return false;
|
||||
@@ -372,9 +374,9 @@ genName2conf(GENERAL_NAME *gen, QString
|
||||
*single = QString("otherName:%1;FORMAT:HEX,%2").
|
||||
arg(obj2SnOid(gen->d.otherName->type_id)).
|
||||
arg(asn1Type2Name(type));
|
||||
- for (int i=0; i<a->length; i++) {
|
||||
+ for (int i=0; i<xca_asn1_string_length(a); i++) {
|
||||
*single += QString(":%1").
|
||||
- arg((int)(a->data[i]), 2, 16, QChar('0'));
|
||||
+ arg((int)(xca_asn1_string_get0_data(a)[i]), 2, 16, QChar('0'));
|
||||
}
|
||||
}
|
||||
return true;
|
||||
@@ -423,12 +425,12 @@ bool x509v3ext::parse_ia5(QString *singl
|
||||
return false;
|
||||
|
||||
if (!str) {
|
||||
- const unsigned char *p = getData()->data;
|
||||
- str = d2i_ASN1_OCTET_STRING(NULL, &p, getData()->length);
|
||||
+ const unsigned char *p = xca_asn1_string_get0_data(getData());
|
||||
+ str = d2i_ASN1_OCTET_STRING(NULL, &p, xca_asn1_string_length(getData()));
|
||||
if (ign_openssl_error() || !str)
|
||||
return false;
|
||||
ret = QString("<ERROR: NOT IA5 but %1>%2").
|
||||
- arg(asn1Type2Name(str->type)).
|
||||
+ arg(asn1Type2Name(xca_asn1_string_type(str))).
|
||||
arg(QString(asn1ToQString(str)));
|
||||
} else {
|
||||
ret = QString(asn1ToQString(str));
|
||||
@@ -824,10 +826,10 @@ bool x509v3ext::parse_generic(QString *,
|
||||
|
||||
const ASN1_OBJECT *o = object();
|
||||
QString der, obj = o ? obj2SnOid(o) : QString("INVALID");
|
||||
- ASN1_OCTET_STRING *v = getData();
|
||||
+ const ASN1_OCTET_STRING *v = getData();
|
||||
|
||||
- for (int i=0; v && i < v->length; i++)
|
||||
- der += QString(":%1").arg((int)(v->data[i]), 2, 16, QChar('0'));
|
||||
+ for (int i=0; v && i < xca_asn1_string_length(v); i++)
|
||||
+ der += QString(":%1").arg((int)(xca_asn1_string_get0_data(v)[i]), 2, 16, QChar('0'));
|
||||
|
||||
if (adv)
|
||||
*adv = QString("%1=%2DER%3\n").arg(obj).
|
||||
@@ -1037,7 +1039,7 @@ X509_EXTENSION *x509v3ext::get() const
|
||||
|
||||
bool x509v3ext::isValid() const
|
||||
{
|
||||
- return ext && getData() && getData()->length > 0 &&
|
||||
+ return ext && getData() && xca_asn1_string_length(getData()) > 0 &&
|
||||
OBJ_obj2nid(X509_EXTENSION_get_object(ext)) != NID_undef;
|
||||
}
|
||||
|
||||
diff -Naurp xca-2.9.0.orig/lib/x509v3ext.h xca-2.9.0.new/lib/x509v3ext.h
|
||||
--- xca-2.9.0.orig/lib/x509v3ext.h 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/lib/x509v3ext.h 2026-07-22 17:33:42.586049536 +0200
|
||||
@@ -35,7 +35,7 @@ class x509v3ext
|
||||
// bool operator == (const x509v3ext &x) const;
|
||||
QString getObject() const;
|
||||
int getCritical() const;
|
||||
- ASN1_OCTET_STRING *getData() const;
|
||||
+ const ASN1_OCTET_STRING *getData() const;
|
||||
QString getValue() const;
|
||||
QString getHtmlValue() const;
|
||||
QString getConsoleValue(const QString &indent) const;
|
||||
diff -Naurp xca-2.9.0.orig/widgets/CertDetail.cpp xca-2.9.0.new/widgets/CertDetail.cpp
|
||||
--- xca-2.9.0.orig/widgets/CertDetail.cpp 2025-03-28 19:28:15.000000000 +0100
|
||||
+++ xca-2.9.0.new/widgets/CertDetail.cpp 2026-07-22 17:48:13.703356907 +0200
|
||||
@@ -16,6 +16,7 @@
|
||||
#include "lib/func_base.h"
|
||||
#include "lib/func.h"
|
||||
#include "lib/XcaWarningCore.h"
|
||||
+#include "lib/openssl_compat.h"
|
||||
#include <QLabel>
|
||||
#include <QPushButton>
|
||||
#include <QLineEdit>
|
||||
@@ -269,7 +270,7 @@ void CertDetail::setReq(pki_x509req *req
|
||||
|
||||
int count = X509_ATTRIBUTE_count(att);
|
||||
for (int j=0; j<count; j++) {
|
||||
- ASN1_TYPE *at = X509_ATTRIBUTE_get0_type(att, j);
|
||||
+ const ASN1_TYPE *at = X509_ATTRIBUTE_get0_type(att, j);
|
||||
label = labelFromAsn1String(at->value.asn1_string);
|
||||
attrLayout->addWidget(label, ii, j +1);
|
||||
}
|
||||
@@ -289,7 +290,7 @@ QLabel *CertDetail::labelFromAsn1String(
|
||||
QLabel *label;
|
||||
label = new CopyLabel(this);
|
||||
label->setText(asn1ToQString(s));
|
||||
- label->setToolTip(QString(ASN1_tag2str(s->type)));
|
||||
+ label->setToolTip(QString(ASN1_tag2str(xca_asn1_string_type(s))));
|
||||
return label;
|
||||
}
|
||||
|
||||
170
xca.spec
170
xca.spec
|
|
@ -3,39 +3,32 @@
|
|||
|
||||
Summary: Graphical X.509 certificate management tool
|
||||
Name: xca
|
||||
Version: 2.9.0
|
||||
Release: 5%{?dist}
|
||||
# Automatically converted from old format: BSD - review is highly recommended.
|
||||
License: LicenseRef-Callaway-BSD
|
||||
Version: 2.4.0
|
||||
Release: 1%{?dist}
|
||||
License: BSD
|
||||
URL: https://hohnstaedt.de/xca/
|
||||
Source0: https://github.com/%{gitowner0}/%{gitproject0}/releases/download/RELEASE.%{version}/%{name}-%{version}.tar.gz
|
||||
Source1: xca-2.5.0-README.IMPORTANT
|
||||
Patch1: xca-2.4.0-openssl3.patch
|
||||
Patch2: xca-2.4.0-noclean.patch
|
||||
Patch3: xca-2.4.0-mimeicons.patch
|
||||
Patch4: xca-2.4.0-lang-it.patch
|
||||
Patch5: xca-2.4.0-lang-fr.patch
|
||||
|
||||
Patch1: xca-2.9.0-openssl4.patch
|
||||
|
||||
BuildRequires: cmake
|
||||
BuildRequires: make
|
||||
BuildRequires: gcc-c++
|
||||
BuildRequires: cmake(Qt6Core)
|
||||
BuildRequires: cmake(Qt6Widgets)
|
||||
BuildRequires: cmake(Qt6Sql)
|
||||
BuildRequires: cmake(Qt6Help)
|
||||
BuildRequires: cmake(Qt6LinguistTools)
|
||||
BuildRequires: cmake(Qt6Test)
|
||||
BuildRequires: qt5-qtbase-devel
|
||||
BuildRequires: qt5-qttools-devel
|
||||
BuildRequires: qt5-linguist
|
||||
BuildRequires: openssl-devel
|
||||
%if 0%{?fedora} >= 41 && 0%{?fedora} <= 44
|
||||
BuildRequires: openssl-devel-engine
|
||||
%endif
|
||||
BuildRequires: desktop-file-utils
|
||||
BuildRequires: libappstream-glib
|
||||
BuildRequires: xdg-utils
|
||||
BuildRequires: libtool-ltdl-devel
|
||||
BuildRequires: python3-sphinx
|
||||
BuildRequires: python3-sphinxcontrib-qthelp
|
||||
|
||||
Requires: hicolor-icon-theme
|
||||
|
||||
Suggests: qt6-qtbase-mysql
|
||||
Suggests: qt6-qtbase-postgresql
|
||||
Suggests: qt6-qtbase-odbc
|
||||
Suggests: qt5-qtbase-mysql
|
||||
Suggests: qt5-qtbase-postgresql
|
||||
Suggests: qt5-qtbase-odbc
|
||||
|
||||
|
||||
%description
|
||||
|
|
@ -46,10 +39,10 @@ OpenSSL library for the cryptographic operations.
|
|||
Certificate signing requests (PKCS#10), certificates (X509v3), the signing
|
||||
of requests, the creation of self-signed certificates, certificate revocation
|
||||
lists and SmartCards are supported. For an easy company-wide use, customizable
|
||||
templates can be used for certificate and request generation. The PKI
|
||||
structures can be imported and exported in several formats like PKCS#7,
|
||||
PKCS#12, PEM, DER, PKCS#8. All cryptographic data are stored in a byte order
|
||||
agnostic file format, portable across operating systems.
|
||||
templates can be used for certificate and request generation. The PKI structures
|
||||
can be imported and exported in several formats like PKCS#7, PKCS#12, PEM,
|
||||
DER, PKCS#8. All cryptographic data are stored in a byte order agnostic file
|
||||
format, portable across operating systems.
|
||||
|
||||
|
||||
#-------------------------------------------------------------------------------
|
||||
|
|
@ -57,23 +50,24 @@ agnostic file format, portable across operating systems.
|
|||
#-------------------------------------------------------------------------------
|
||||
|
||||
%autosetup -p 1
|
||||
cp '%{SOURCE1}' README.IMPORTANT
|
||||
|
||||
|
||||
#-------------------------------------------------------------------------------
|
||||
%build
|
||||
#-------------------------------------------------------------------------------
|
||||
|
||||
export CXXFLAGS='%{optflags} -DDOCDIR=\"%{_docdir}/xca\"'
|
||||
%cmake -DCMAKE_SHARED_LINKER_FLAGS="-Wl,--as-needed"
|
||||
%cmake_build
|
||||
%configure CXXFLAGS='%{optflags}' \
|
||||
STRIP=: \
|
||||
LIBS='-Wl,-as-needed'
|
||||
make %{?_smp_mflags}
|
||||
|
||||
|
||||
#-------------------------------------------------------------------------------
|
||||
%install
|
||||
#-------------------------------------------------------------------------------
|
||||
|
||||
%cmake_install
|
||||
make DESTDIR='%{buildroot}' \
|
||||
ICON_SIZES='16x16 32x32 48x48 64x64 128x128 256x256' install
|
||||
|
||||
# Do not include db statistics program and man.
|
||||
find '%{buildroot}' -name 'xca_db_stat*' -delete
|
||||
|
|
@ -81,50 +75,37 @@ find '%{buildroot}' -name 'xca_db_stat*' -delete
|
|||
# Do not use pixmaps directory.
|
||||
rm -rf '%{buildroot}%{_datadir}/pixmaps'
|
||||
|
||||
# Reinstall documentation.
|
||||
rm -rf '%{buildroot}%{_docdir}/xca'/*
|
||||
mv '%{buildroot}%{_datadir}/xca/html' '%{buildroot}%{_docdir}/xca/'
|
||||
|
||||
# Install mime file types.
|
||||
install -d -m 755 '%{buildroot}%{_datadir}/mime/packages'
|
||||
install -p -m 644 misc/xca.xml '%{buildroot}%{_datadir}/mime/packages/'
|
||||
|
||||
# Validate desktop files.
|
||||
desktop-file-validate \
|
||||
'%{buildroot}%{_datadir}/applications/de.hohnstaedt.xca.desktop'
|
||||
appstream-util validate-relax --nonet \
|
||||
'%{buildroot}%{_metainfodir}/de.hohnstaedt.xca.metainfo.xml'
|
||||
|
||||
# Template contains neither translations nor language code.
|
||||
rm -f '%{buildroot}%{_datadir}/xca/i18n/xca.qm'
|
||||
# Install desktop application file.
|
||||
desktop-file-install --mode 0644 \
|
||||
--dir '%{buildroot}%{_datadir}/applications' \
|
||||
--delete-original \
|
||||
--add-mime-type application/x-xca-database \
|
||||
--remove-category QT \
|
||||
--set-icon=xca \
|
||||
'%{buildroot}%{_datadir}/applications/xca.desktop'
|
||||
|
||||
# Tag translation files.
|
||||
%find_lang '%{name}' --with-qt
|
||||
|
||||
|
||||
#-------------------------------------------------------------------------------
|
||||
%check
|
||||
#-------------------------------------------------------------------------------
|
||||
|
||||
# Do not test GUI.
|
||||
%ctest -E '^testxca$' || :
|
||||
|
||||
|
||||
#-------------------------------------------------------------------------------
|
||||
%files -f %{name}.lang
|
||||
#-------------------------------------------------------------------------------
|
||||
|
||||
%doc AUTHORS COPYRIGHT README.IMPORTANT
|
||||
%doc AUTHORS COPYRIGHT
|
||||
%doc %{_docdir}/xca/*
|
||||
%{_bindir}/xca
|
||||
%{_bindir}/*
|
||||
%dir %{_datadir}/xca
|
||||
%{_datadir}/xca/*.txt
|
||||
%{_datadir}/xca/*.xca
|
||||
%{_datadir}/icons/*/*/*/*.png
|
||||
%{_datadir}/mime/packages/%{name}.*
|
||||
%{_datadir}/applications/de.hohnstaedt.xca.desktop
|
||||
%{_datadir}/applications/*
|
||||
%{_datadir}/bash-completion/
|
||||
%{_metainfodir}/de.hohnstaedt.xca.metainfo.xml
|
||||
%attr(0644, root, root) %{_mandir}/*/*
|
||||
|
||||
|
||||
|
|
@ -132,77 +113,6 @@ rm -f '%{buildroot}%{_datadir}/xca/i18n/xca.qm'
|
|||
%changelog
|
||||
#-------------------------------------------------------------------------------
|
||||
|
||||
* Wed Jul 22 2026 Patrick Monnerat <patrick@monnerat.net> 2.9.0-5
|
||||
- Patch "openssl4" for openssl version 4 compatibility.
|
||||
- Remove BR openssl-devel-engine for Fedora > 44.
|
||||
- Perform tests.
|
||||
|
||||
* Fri Jul 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2.9.0-4
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
|
||||
|
||||
* Sat Jun 13 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 2.9.0-3
|
||||
- Rebuilt for openssl 4.0
|
||||
|
||||
* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2.9.0-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
|
||||
|
||||
* Mon Sep 01 2025 Yaakov Selkowitz <yselkowi@redhat.com> - 2.9.0-1
|
||||
- Update to 2.9.0
|
||||
|
||||
* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 2.7.0-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
|
||||
|
||||
* Sun Jan 19 2025 Fedora Release Engineering <releng@fedoraproject.org> - 2.7.0-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
|
||||
|
||||
* Fri Sep 6 2024 Patrick Monnerat <patrick@monnerat.net> 2.7.0-1
|
||||
- New upstream release.
|
||||
|
||||
* Wed Sep 4 2024 Miroslav Suchý <msuchy@redhat.com> - 2.6.0-5
|
||||
- convert license to SPDX
|
||||
|
||||
* Tue Jul 23 2024 Patrick Monnerat <patrick@monnerat.net> 2.6.0-4
|
||||
- BR openssl-devel-engine for Fedora >= 41.
|
||||
|
||||
* Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.0-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
|
||||
|
||||
* Mon May 6 2024 Patrick Monnerat <patrick@monnerat.net> 2.6.0-2
|
||||
- Fix application icon.
|
||||
https://bugzilla.redhat.com/show_bug.cgi?id=2279161
|
||||
|
||||
* Sun Mar 17 2024 Patrick Monnerat <patrick@monnerat.net> 2.6.0-1
|
||||
- New upstream release.
|
||||
|
||||
* Mon Jan 22 2024 Patrick Monnerat <patrick@monnerat.net> 2.5.0-3
|
||||
- Patch "pastekey" fixes a crash pasting an encrypted private key.
|
||||
https://github.com/chris2511/xca/commit/d29d55a
|
||||
- Patch "revokedel" fixes a freeze when deleting a certificate.
|
||||
https://github.com/chris2511/xca/commit/43e1b33
|
||||
- Patch "delete_after_revoke" fixes a crash deleting+revoking a certificate.
|
||||
https://bugzilla.redhat.com/show_bug.cgi?id=2259477
|
||||
|
||||
* Tue Nov 07 2023 Miro Hrončok <mhroncok@redhat.com> - 2.5.0-2
|
||||
- Explicitly BuildRequire python3-sphinxcontrib-qthelp
|
||||
|
||||
* Fri Oct 6 2023 Patrick Monnerat <patrick@monnerat.net> 2.5.0-1
|
||||
- New upstream release.
|
||||
- Build using cmake.
|
||||
- Doc file "README.IMPORTANT" for needed passord reset.
|
||||
https://github.com/chris2511/xca/issues/458#issuecomment-1740106691
|
||||
|
||||
* Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-5
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
|
||||
|
||||
* Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-4
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
||||
|
||||
* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
||||
|
||||
* Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
||||
|
||||
* Sat Nov 13 2021 Patrick Monnerat <patrick@monnerat.net> 2.4.0-1
|
||||
- New upstream release.
|
||||
- Patch "openssl3" for openssl version 3 compatibility.
|
||||
|
|
@ -213,12 +123,6 @@ rm -f '%{buildroot}%{_datadir}/xca/i18n/xca.qm'
|
|||
- Uses sphinx instead of SGML for documentation.
|
||||
- Use new icons.
|
||||
|
||||
* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 2.3.0-5
|
||||
- Rebuilt with OpenSSL 3.0.0
|
||||
|
||||
* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.3.0-4
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
||||
|
||||
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.3.0-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue