sw/pkcs11 - PKCS #11 library for Cryptech on top of libhal RPC

Age	Commit message (Collapse)	Author
2020-07-13	Yet another wired-in python version	Rob Austein

2018-08-27	Support non-standard libhal/libtfm location	Paul Selkirk

2017-05-20	Clean up ancient cruft: p11util, SQL-based hsmbully test.	Rob Austein
	p11util has long since been overtaken by developments: everything it used to do is now doable on the console, and if for some reason we really needed a tool to change PINs via the RPC port, we could do it in a dozen lines of Python using the cryptech.libhal RPC API. hsmbully may still be a useful test, but all the antics with configuring SQL database and on-disk keystores is long since obsolete.
2017-05-10	Clean up default location of PKCS #11 library.	Rob Austein

2017-04-14	Python interface API will need to be cryptech.py11 for installation.	Rob Austein

2017-03-08	Check for cryptech_muxd when setting LIBHAL_TARGET.	Rob Austein

2017-03-01	Flip default connection method from "serial" to "daemon".	Rob Austein

2016-11-22	Remove SQLite3 from build, no longer needed.	Rob Austein

2016-10-16	Clean Python compiled byte code too.	Rob Austein

2016-09-03	Hack PKCS #11 to work with revised libhal pkey API.	Rob Austein

2016-08-10	Shared library symbol versioning support from Ondrej Sury (thanks!).	Rob Austein
	Apparently this is how the cool kids handle hiding library-internal symbols now, using objcopy is old hat. Ondrey tells us that this should work on GNU/Linux and on *BSD, which, at the moment, just leaves OSX, which we already handle with an OSX-specific kludge.
2016-08-10	Allow environment (eg, Debian build) to augment CFLAGS.	Rob Austein

2016-07-13	Add "cryptech" to public "pkcs11" names.	Rob Austein
	Database location environment variable is now CRYPTECH_PKCS11_DATABASE. Installed library is now libcryptech-pkcs11.{so,dylib}.
2016-07-07	Disable RPC daemon on all platforms for now.	Rob Austein

2016-06-30	libhal's RPC MUX daemon doesn't work with Apple's lame sockets implementation.	Rob Austein
	Apple, for reasons unknown, chose not to implement SOCK_SEQPACKET. This works on Linux and *BSD, and libhal's MUX daemon uses it to avoid having to add its own framing protocol on top of SOCK_STREAM. So, at least for now, Mac OS X will not support the multiplex daemon, only direct connection to the HSM by a single client.
2016-06-27	Apparently sw/pkcs11 somehow missed the great ${foo_LIB} => ${foo_SRC}, ↵	Rob Austein
	${foo_BLD} Makefile cleanup.
2016-06-26	More GNUmakefile cleanup.	Rob Austein

2016-06-25	Rename GNUmakefile to Makefile for consistency.	Paul Selkirk