# Generate automatically. Do not edit.

commit fd8b56f3ee971f94dc6fc95411fc01e1c12153ab
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-18

    autotools: Fix SUFFIXES usage
    
    SUFFIXES must be defined in the top-level Makefile.am, when
    non-recursive make is used.

 Makefile.am         | 2 ++
 p11-kit/Makefile.am | 2 +-
 trust/Makefile.am   | 2 +-
 3 files changed, 4 insertions(+), 2 deletions(-)

commit 3c1304caae967b7cca40aae70c47c7f5138ea945
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-18

    Release 0.23.21

 NEWS         | 6 ++++++
 configure.ac | 2 +-
 meson.build  | 2 +-
 3 files changed, 8 insertions(+), 2 deletions(-)

commit 43961d4e9bdceee241ce25877aad327d4daa5a10
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-18

    packit: Adjust to doing propose-update through /packit comment

 .packit.yaml | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

commit b40f27af28406810d0f42a29b98086fb02173f0c
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-18

    README.md: Fix whitespace problem

 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 76f94b4ad111c4150a16d36aafd30ab8aa274a68
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-18

    conf: Add internal option to forcibly enable user config
    
    Some tests need user config enabled, though it is disabled under
    certain conditions (e.g., running as root) and makes those tests fail.

 p11-kit/conf.c            | 5 ++++-
 p11-kit/test-conf.c       | 7 +++++++
 p11-kit/test-deprecated.c | 4 ++++
 p11-kit/test-modules.c    | 4 ++++
 p11-kit/test-transport.c  | 4 ++++
 5 files changed, 23 insertions(+), 1 deletion(-)

commit 46c2ff05bf92e73735575aeb8bb9b9bec545f33c
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-18

    SECURITY.md: Split from README.md

 README.md   | 17 +----------------
 SECURITY.md |  5 +++++
 2 files changed, 6 insertions(+), 16 deletions(-)

commit da01718924623c1502eb45b7c946d6df798ea1be
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-18

    README.md: Add LGTM badges

 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit adbb94ea3ec3c39b71c05eff8ef86cc85a075955
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-15

    trust: Remove generated *.asn.h files from repository

 .gitignore          |   1 +
 configure.ac        |   1 +
 trust/Makefile.am   |  25 ++--
 trust/basic.asn.h   |  13 --
 trust/meson.build   |  43 +++---
 trust/openssl.asn.h |  26 ----
 trust/pkix.asn.h    | 366 ----------------------------------------------------
 7 files changed, 45 insertions(+), 430 deletions(-)

commit 015fe112def654cac562b85ca864dc279ca4e897
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-15

    uri: Limit characters in vendor query attribute names

 p11-kit/uri.c | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

commit 6f58217fd0590a52137b0d350d07cb4408a1bd77
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-15

    compat: Define static assertion macro

 common/compat.h       | 7 +++++++
 p11-kit/rpc-message.c | 8 ++------
 2 files changed, 9 insertions(+), 6 deletions(-)

commit 4e597e1858a3842798e8400eb2ac886612c1c6bf
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-14

    rpc-transport: Remove pointless FIXME comments
    
    Those actually shouldn't be closed.

 p11-kit/rpc-transport.c | 2 --
 1 file changed, 2 deletions(-)

commit d3dc234ce2ff08d0d7f29b4c464fb5a3406c341d
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-14

    trust: p11_index_snapshot: Remove redundant integer range check

 trust/index.c | 3 ---
 1 file changed, 3 deletions(-)

commit 4e9ca11deaab88f1297c812af55dfb0036d1e207
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-14

    build: Add header guards
    
    Signed-off-by: Daiki Ueno <ueno@gnu.org>

 common/init.h | 5 +++++
 1 file changed, 5 insertions(+)

commit a88e7c1cc9b23f1310f3dd1a6922e270aed524eb
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-14

    common/frob-getprogname: Avoid shadowing function parameter
    
    Signed-off-by: Daiki Ueno <ueno@gnu.org>

 common/frob-getprogname.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

commit d70d572610cd3ec7e246e898e93300615a02b267
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-14

    server: Avoid shadowing global variable

 p11-kit/server.c | 15 ++++++---------
 1 file changed, 6 insertions(+), 9 deletions(-)

commit 82374159ca3a5c0c252b2862a32dd96baeee1812
Author: David Halls <dahalls@gmail.com>
Date:   2019-12-14

    If server returns already initialized, don't mark as not initialized

 p11-kit/rpc-client.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 15f15549bf41dfe665583d4c1fe316a524939075
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-02

    common: Get program name based on executable path if possible
    
    Some programs (e.g., Chromium) pack command line arguments into argv[0].
    Check if it is the case by reading /proc/self/exe and extract the
    program name.
    
    Logic borrowed from:
    <https://github.com/mesa3d/mesa/commit/759b94038987bb983398cd4b1d2cb1c8f79817a9>.

 .gitignore                |   1 +
 common/Makefile.am        |   7 +++
 common/compat.c           |  29 +++++++++++
 common/frob-getprogname.c | 120 ++++++++++++++++++++++++++++++++++++++++++++++
 common/meson.build        |   5 ++
 common/test-compat.c      |  15 ++++++
 6 files changed, 177 insertions(+)

commit d10c5a35695df82f81f22c1e7d026be07c21aec5
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-02

    trust: Avoid uninitialized variable in session_for_store_on_module
    
    This suppresses the cppcheck error:
      trust/anchor.c:243,error,uninitvar,Uninitialized variable: count
    
    Also fixes calloc invocation when the slot count is 0.

 trust/anchor.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

commit e4f65d88076bf915dd969efd03b7d994196b7fa9
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-02

    test: Avoid uninitialized variable
    
    This suppresses the cppcheck error:
      p11-kit/test-deprecated.c:481,error,uninitvar,Uninitialized variable: manufacturerID

 p11-kit/test-deprecated.c | 1 +
 1 file changed, 1 insertion(+)

commit 5b6c66ec1121527a5db4339ff509a8fe6fdbc262
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-02

    mock: Avoid uninitialized variable in test_find_objects
    
    This suppresses the cppcheck errors:
      p11-kit/test-mock.c:769,error,uninitvar,Uninitialized variable: count
      p11-kit/test-mock.c:776,error,uninitvar,Uninitialized variable: count
      p11-kit/test-mock.c:783,error,uninitvar,Uninitialized variable: count

 p11-kit/test-mock.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 6242c67ed70ee95174267259ca804fd671725d91
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-08-02

    constants: Tighten handling of failure case in lookup_info
    
    This suppresses the cppcheck error:
      common/constants.c:649,error,invalidFunctionArg,Invalid bsearch() argument nr 3. The value is -1 but the valid values are '0:'.

 common/constants.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

commit 5e98a5471fa9cf136e092c279c72ff53ddebf76d
Author: Kai Takahashi <www.carrotsoft@gmail.com>
Date:   2020-08-02

    Avoid using setenv() for MinGW users.
    
    Signed-off-by: Kai Takahashi <www.carrotsoft@gmail.com>

 common/tool.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 714b216bbbaecf188685dddd98dd184e6c2721f4
Author: Albert Chin-A-Young <china@thewrittenword.com>
Date:   2020-07-25

    p11-kit/modules.c: Avoid passing 0 as first argument to calloc().
      Solves an issue #303 for AIX.

 p11-kit/modules.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

commit 7f5ef7c04a24ede94a31a7e7820d9d03b9522bd5
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-06-12

    anchor: Exit with non-zero code, if any error occurs
    
    Suggested by Nikos Mavrogiannopoulos in:
    https://github.com/p11-glue/p11-kit/issues/300

 trust/anchor.c | 35 ++++++++++++++++++++++++-----------
 1 file changed, 24 insertions(+), 11 deletions(-)

commit 51cd2fdd844772eae874e1d6060a8cae6ad15760
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-06-12

    tool: Don't override P11_KIT_DEBUG if it is already set

 common/tool.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

commit a9e5fe3968759f4b4e7948c231917ffda18f0c7b
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-06-12

    tool: Print messages by default

 common/tool.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

commit 71fdb9f5c4362c00bd9684793775f8ccc7ba6166
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-06-12

    debug: Remove unused debug_inited flag

 common/debug.c | 2 --
 1 file changed, 2 deletions(-)

commit 56be8eae5cc337659eaddb07c502e901be8db203
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-06-12

    meson: Fix typo

 doc/manual/meson.build | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 47e0c1fec418df1bbf2a056f1e983b64e3e23df0
Author: Daiki Ueno <ueno@gnu.org>
Date:   2020-05-30

    trust/*.asn: Drop standard types

 trust/basic.asn.h   |   2 +-
 trust/openssl.asn   |   3 --
 trust/openssl.asn.h |   8 ++---
 trust/pkix.asn      |  26 --------------
 trust/pkix.asn.h    | 102 ++++++++++++++++------------------------------------
 5 files changed, 34 insertions(+), 107 deletions(-)

commit adf2685b23b8a631e8092aaf707cd1bcf7b230bb
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-05-17

    README.md: Fix typo

 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 7eb041e573a5dd55cea97427ab1807772c0a7c83
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-05-17

    README.md: Revamp and add build instruction
    
    Also mention the required options for local installation.
    Suggested by Andrew Johnson in:
    https://github.com/p11-glue/p11-kit/issues/295

 README.md | 31 ++++++++++++++++++++++---------
 1 file changed, 22 insertions(+), 9 deletions(-)

commit 4ea7cf7e819bbf8415a2aad2c99e7aa0f7fa143d
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-05-17

    meson: Add option to control bash-completion installation

 bash-completion/meson.build | 2 +-
 meson_options.txt           | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

commit e0053798510a56057b7a77bb3c59e68725888200
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-04-13

    test-token: Check if the path is actually writable
    
    Instead of assuming a normal user cannot write to "/", this creates an
    unwritable directly and checks if it is writable; otherwise the test
    case is skipped.
    
    Reported by Jeffrey Walton in:
    https://github.com/p11-glue/p11-kit/issues/288

 trust/test-token.c | 63 ++++++++++++++++++++++++++++++++++++++++++------------
 1 file changed, 49 insertions(+), 14 deletions(-)

commit c1c71b03e08ffb9384438e7f94b1b8f699dce2cd
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-04-13

    test: Make p11_test_{skip,todo} actually work

 common/test.c | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

commit 825fd4e4526589eb73a54ada18127196fb65fde3
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-04-13

    meson: Add option to disable building test programs
    
    Suggested by Daniel Engberg in:
    https://github.com/p11-glue/p11-kit/issues/285

 common/meson.build  |  88 +++++++++---------
 meson_options.txt   |   4 +
 p11-kit/meson.build | 252 +++++++++++++++++++++++++++-------------------------
 trust/meson.build   | 148 +++++++++++++++---------------
 4 files changed, 256 insertions(+), 236 deletions(-)

commit 3de74dc6d916ce3dd2f76f0403be189387fe4d89
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-04-13

    meson: Add option to disable NLS support
    
    Suggested by Daniel Engberg in:
    https://github.com/p11-glue/p11-kit/issues/284

 meson.build       | 4 +++-
 meson_options.txt | 4 ++++
 2 files changed, 7 insertions(+), 1 deletion(-)

commit 99aa8329841b986380cc4f515d57f118f40158c4
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-04-13

    test-rpc: Suppress compiler warning on ILP32 platforms
    
    On ILP32 platforms CK_ULONG is 32-bit and 64-bit values are truncated.
    This patch determins the usable value from SIZEOF_UNSIGNED_LONG.
    Also, for consistency, use UINTxx_MAX for other accessors.
    
    Reported by Jeffrey Walton in:
    https://github.com/p11-glue/p11-kit/issues/289

 p11-kit/test-rpc.c | 47 ++++++++++++++++++++++++++++-------------------
 1 file changed, 28 insertions(+), 19 deletions(-)

commit 3eb79b75c2ee9870352fe4acc1ef6c8783364800
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-02-07

    rpc: Add missing null checks in attribute value serializers
    
    To get the length of an attribute value, the client calls
    C_GetAttributeValue with attr->pValue set to NULL and attr->ulValueLen
    set to -1.  In the RPC level, this is already indicated with a
    'validity' flag, but there were a couple of places where attr->pValue
    is non-NULL.
    
    This was uncovered by:
    https://bugzilla.redhat.com/show_bug.cgi?id=1766340

 p11-kit/rpc-message.c | 23 ++++++++++++++---------
 1 file changed, 14 insertions(+), 9 deletions(-)

commit 04cbdcf546f88d666fcb214ce42e777fa7840732
Author: Alvin Chen <sonoma001@gmail.com>
Date:   2020-03-02

    Update pkcs11 header to allow TPM2-PKCS11 to compile

 common/pkcs11.h | 2 ++
 1 file changed, 2 insertions(+)

commit 51c0781410cb1292d7efbafee23ee5876c9bd2e4
Author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Date:   2020-02-18

    test-proxy: Add test for slot ID reuse
    
    The test covers a case where duplicate slots IDs were assigned to two
    different slots in the mapping.
    
    Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>

 p11-kit/Makefile.am       |   7 ++-
 p11-kit/meson.build       |   3 +-
 p11-kit/mock-module-ep8.c | 110 ++++++++++++++++++++++++++++++++++++++++++++++
 p11-kit/test-proxy.c      |  39 ++++++++++++++++
 4 files changed, 157 insertions(+), 2 deletions(-)

commit c8f8053edc9098fdb36fbb34165b8d92ed596798
Author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Date:   2020-02-17

    proxy: Fix slot ID reuse, avoiding duplicating IDs
    
    Previously, when re-mapping the slots, a slot ID could be assigned to
    more than one device, causing errors when searching for the right
    mapping (it would use the first found).
    
    Also assign new slot IDs for new found slots, avoiding previously used
    slot IDs.  The last assigned slot ID is stored in the proxy structure
    in a new added field last_id.
    
    Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>

 p11-kit/proxy.c | 56 +++++++++++++++++++++++++++++++++++++-------------------
 1 file changed, 37 insertions(+), 19 deletions(-)

commit da22fd9f2a54d707db7f3021f22416b4af496ae8
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-30

    packit: Enable Fedora package building with Packit

 .packit.yaml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

commit 762cdaa2cd5c5ec09cc844f9a6bdc551c7f6c8ed
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-29

    Release 0.23.20

 NEWS         | 3 +++
 configure.ac | 2 +-
 meson.build  | 2 +-
 3 files changed, 5 insertions(+), 2 deletions(-)

commit ab180d64b909594bdafc9596f67a1913275c6474
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-29

    Revert "Fix RPC calls: ATTRIBUTE buf not null but length 0"
    
    This reverts commit 65409c0ebd5d9a4aaf55254256dcc878862a0be1.

 p11-kit/rpc-message.c |  8 +-------
 p11-kit/rpc-server.c  | 22 +++-------------------
 2 files changed, 4 insertions(+), 26 deletions(-)

commit 17a26f0948944635453a54d44c2565ed7ba91a14
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-29

    Revert "Fix RPC calls: BYTE buffer not null and length 0"
    
    This reverts commit 8cb21a6a09d18156c9002b97687e5ac0bfa0fc92.

 p11-kit/rpc-client.c  | 2 +-
 p11-kit/rpc-message.c | 6 ++----
 p11-kit/rpc-message.h | 3 +--
 p11-kit/rpc-server.c  | 7 ++-----
 4 files changed, 6 insertions(+), 12 deletions(-)

commit 83aaa2200bfa141b0c9e1c4f5af98252f8e826cc
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-29

    Revert "Fix C_GetSlotList() when length is 0"
    
    This reverts commit 1ede9b8d33c4bc9a4194ffca22ac6d7351f6bcf5.
    
    It turned out that this breaks compatibility of the RPC protocol.  The
    right fix to the original issue would be probably to add a new call ID
    associated with a different signature and add a fallback mechanism in
    both client and server.

 p11-kit/rpc-client.c  |  2 +-
 p11-kit/rpc-message.c |  6 ++----
 p11-kit/rpc-message.h |  3 +--
 p11-kit/rpc-server.c  |  7 ++-----
 p11-kit/test-server.c | 36 ------------------------------------
 5 files changed, 6 insertions(+), 48 deletions(-)

commit 69a420aaa70af5b89508b5140edb0ee4e166605b
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-21

    Release 0.23.19

 NEWS         | 9 +++++++++
 configure.ac | 2 +-
 meson.build  | 2 +-
 3 files changed, 11 insertions(+), 2 deletions(-)

commit 251dfdfd765e709b7d54420c685e19f70a5e9803
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-22

    travis: Tighten autotools build steps

 .travis/autotools/script.sh | 29 ++++++++++++++++++++++++++++-
 1 file changed, 28 insertions(+), 1 deletion(-)

commit e9dbeeea96b0b709631d1b6d62f9877f4872993b
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-22

    travis: Do 'make distcheck' in autotools build

 .travis/autotools/script.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 2a1ee21ca31a62274e0932572f972bf3340f8bde
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-21

    build: Add --with-bash-completion configure option
    
    This is needed for 'make distcheck' to not install those files in the
    system locations.

 Makefile.am  |  1 +
 configure.ac | 12 +++++++++---
 2 files changed, 10 insertions(+), 3 deletions(-)

commit cee7c2ad81d21795783ec28a67247cff740de2ce
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-21

    build: Only distribute XZ-compressed tarballs

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 5092f8dd5463b89642e29ca5ae7ea08aa30d5d66
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-21

    build: Add more files to .gitignore

 .gitignore | 2 ++
 1 file changed, 2 insertions(+)

commit a96af650e1ac2f5faecc9354ac30d128a7e93b9f
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-21

    meson: Expose only C_GetFunctionList from the mock modules

 p11-kit/meson.build | 4 ++++
 1 file changed, 4 insertions(+)

commit ba3c7d16760d177be43960c9eb9572817c60c4df
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-21

    mock: Handle memory allocation error in C_Initialize

 common/mock.c | 4 ++++
 1 file changed, 4 insertions(+)

commit 62b09608e3a311c8b8ae924805f936f8af593bfa
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-15

    meson: Use cc.has_type for types instead of cc.has_header_symbol

 meson.build | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

commit 45cd66e3a16f0102a50f33ebb4a58aac09f40f92
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-15

    meson: Check if <stdbool.h> exists

 meson.build | 10 ++++++++++
 1 file changed, 10 insertions(+)

commit 5fe875dc598e2dc50ba8e888099c116fe12999d3
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-15

    meson: Check program_invocation_short_name declaration
    
    Pointed by Rosen Penev in #268.

 meson.build | 5 +++++
 1 file changed, 5 insertions(+)

commit 869b657c7bfbd2f91331d5aabcf572cba6043d37
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-15

    meson: Check endianness

 meson.build | 4 ++++
 1 file changed, 4 insertions(+)

commit 1f8d523e5db688deff13329b4cba1dd6181d76a3
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-15

    build: Fix type mismatch in reallocarray usage

 common/attrs.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 1def8077a2bc1fc2a6bd3685a9d94a9a51f40e23
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-10-31

    trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER
    
    These new attributes are introduced in:
    https://bugzilla.mozilla.org/show_bug.cgi?id=1465613
    
    The value of the attribute can be either false (represented as a
    single octed "\x00"), or a UTCTime in a restricted form (i.e.,
    "YYMMDDHHMMSSZ").  For future proof, we also support GeneralizedTime
    in the form "YYYYMMDDHHMMSSZ".

 common/constants.c   |  2 ++
 common/pkcs11x.h     |  2 ++
 trust/builder.c      | 78 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 trust/test-builder.c | 75 ++++++++++++++++++++++++++++++++++++++++++++++++++
 4 files changed, 157 insertions(+)

commit e8b453383ace97fc1adfc213dc718e7b62fafd96
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-14

    build: Remove auto-generated gettext files from repository

 po/en@boldquot.header  | 25 -------------------------
 po/en@quot.header      | 22 ----------------------
 po/insert-header.sin   | 23 -----------------------
 po/remove-potcdate.sin | 19 -------------------
 4 files changed, 89 deletions(-)

commit 8d92053df8a2bfed89a6f3e835386e13c7f95b61
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-14

    build: Use AM_GNU_GETTEXT_REQUIRE_VERSION
    
    AM_GNU_GETTEXT_REQUIRE_VERSION was introduced a while back to instruct
    autopoint to pull the latest version of gettext infrastructure.  Use
    it instead of hacking around gettextize call in autogen.sh.

 autogen.sh   | 13 -------------
 configure.ac |  4 ++++
 2 files changed, 4 insertions(+), 13 deletions(-)

commit 5bb71e914532b8350dfc14697c4fa89e714e5812
Author: David Woodhouse <dwmw@amazon.co.uk>
Date:   2020-01-06

    rpc: Add vsock transport
    
    This allows PKCS#11 remoting between virtual machines, so a software
    token can be isolated into a microVM.

 common/Makefile.am      |   1 +
 common/meson.build      |   3 +-
 common/vsock.c          | 122 ++++++++++++++++++++++++++++++++++++++++++++++++
 common/vsock.h          |  46 ++++++++++++++++++
 configure.ac            |  15 ++++++
 meson.build             |   9 ++++
 p11-kit/rpc-transport.c |  97 ++++++++++++++++++++++++++++++++++++++
 p11-kit/server.c        | 118 ++++++++++++++++++++++++++++++++++++++++------
 8 files changed, 395 insertions(+), 16 deletions(-)

commit 877de5fadaf0067272e8d0eb24893d7c823afe08
Author: David Woodhouse <dwmw@amazon.co.uk>
Date:   2020-01-06

    rpc: Check for socket init failure
    
    In some cases, rpc_unix_init() or rpc_exec_init() can return NULL but
    p11_rpc_transport_new() doesn't check and may dereference it.

 p11-kit/rpc-transport.c | 2 ++
 1 file changed, 2 insertions(+)

commit 96af147637f0dc10792c3abdcec1894c361229da
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-09

    build: Suppress cppcheck false-positive on tracking array length

 p11-kit/proxy.c | 2 ++
 1 file changed, 2 insertions(+)

commit e931efd17950786ee61cbfc70ddf94d02ae473ba
Author: Daiki Ueno <dueno@redhat.com>
Date:   2020-01-08

    build: Fix realloc usage
    
    As realloc() doesn't touch the original memory block, we need to use a
    local variable to avoid potential memory leak in failure cases.
    
    Pointed by David Woodhouse.

 common/attrs.c   |  6 ++++--
 p11-kit/filter.c |  9 +++++----
 p11-kit/iter.c   | 20 ++++++++++++++------
 p11-kit/proxy.c  |  7 +++++--
 trust/index.c    | 12 ++++++++++--
 5 files changed, 38 insertions(+), 16 deletions(-)

commit 6563ad8ececec05f2b6269b509d4e12c07d2a87e
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-10-26

    CONTRIBUTING.md: Mention contribution rules and coding style

 CONTRIBUTING.md | 35 +++++++++++++++++++++++++++++++++++
 HACKING         | 16 ----------------
 Makefile.am     |  2 +-
 3 files changed, 36 insertions(+), 17 deletions(-)

commit 65409c0ebd5d9a4aaf55254256dcc878862a0be1
Author: Vincent JARDIN <vjardin@free.fr>
Date:   2019-10-22

    Fix RPC calls: ATTRIBUTE buf not null but length 0
    
    Let's add a support for cases when the buffer != NULL but the
    length is 0. According to Oasis, buffer = NULL and length = 0
    means a query of the length so the subsequent calls with a
    buffer != NULL should fill then buffer when length is long enough.
    If not, according to Oasis, one should get a CKR_BUFFER_TOO_SMALL.
    
    See the previous commit for IN_ULONG_BUFFER(). This patch is
    follow a similar design pattern.
    
    Fix: issue #257

 p11-kit/rpc-message.c |  8 +++++++-
 p11-kit/rpc-server.c  | 22 +++++++++++++++++++---
 2 files changed, 26 insertions(+), 4 deletions(-)

commit 8cb21a6a09d18156c9002b97687e5ac0bfa0fc92
Author: Vincent JARDIN <vjardin@free.fr>
Date:   2019-10-22

    Fix RPC calls: BYTE buffer not null and length 0
    
    Let's add a support for cases when the buffer != NULL but the
    length is 0. According to Oasis, buffer = NULL and length = 0
    means a query of the length so the subsequent calls with a
    buffer != NULL should fill buffer when length is long enough.
    If not, according to Oasis, one should get a CKR_BUFFER_TOO_SMALL.
    
    This current fix is for IN_BYTE_BUFFER(), same
    for IN_ATTRIBUTE_BUFFER().
    
    See the previous commit for IN_ULONG_BUFFER(). This patch is
    strictly using the same design pattern.
    
    Fix: issue #257
    
    Suggested-by: Daiki Ueno <dueno@redhat.com>

 p11-kit/rpc-client.c  | 2 +-
 p11-kit/rpc-message.c | 6 ++++--
 p11-kit/rpc-message.h | 3 ++-
 p11-kit/rpc-server.c  | 7 +++++--
 4 files changed, 12 insertions(+), 6 deletions(-)

commit 1ede9b8d33c4bc9a4194ffca22ac6d7351f6bcf5
Author: Vincent JARDIN <vjardin@free.fr>
Date:   2019-10-21

    Fix C_GetSlotList() when length is 0
    
    Let's add a support for cases when the buffer != NULL but the
    length is 0. According to Oasis, buffer = NULL and length = 0
    means a query of the length so the subsequent calls with a
    buffer != NULL should fill buffer when length is long enough.
    If not, according to Oasis, one should get a CKR_BUFFER_TOO_SMALL.
    
    This current fix is for IN_ULONG_BUFFER(), same
    should be applied for IN_BYTE_BUFFER() and for IN_ATTRIBUTE_BUFFER().
    
    Include a test_no_slots()
    
    Fix: issue #257
    
    Suggested-by: Daiki Ueno <dueno@redhat.com>

 p11-kit/rpc-client.c  |  2 +-
 p11-kit/rpc-message.c |  6 ++++--
 p11-kit/rpc-message.h |  3 ++-
 p11-kit/rpc-server.c  |  7 +++++--
 p11-kit/test-server.c | 36 ++++++++++++++++++++++++++++++++++++
 5 files changed, 48 insertions(+), 6 deletions(-)

commit 9763fc8edcc5dd41e07ddf068dce6bc429dfe6b6
Author: Jakub Jelen <jjelen@redhat.com>
Date:   2019-10-23

    test-proxy: Implement reproducer for bad prefix list matching

 p11-kit/test-proxy.c | 7 +++++++
 1 file changed, 7 insertions(+)

commit 298ad811540c538fea1906528fe8cf8a6784e5ee
Author: Jakub Jelen <jjelen@redhat.com>
Date:   2019-10-23

    modules: Implement correct search in list
    
    The current version of matching was failing, when the list contained
    also a searched string with some suffix, for example, when we ran from
    p11-kit and the p11-kit-proxy was first in the list and p11-kit later,
    it was not matched, because the test did not find a separator after
    the first match, decided that it does not match and did not try further.
    
    example program p11-kit
    example enable-in: p11-kit-proxy,p11-kit

 p11-kit/modules.c | 26 ++++++++++++++++++--------
 1 file changed, 18 insertions(+), 8 deletions(-)

commit 7c94eab51d08650eaa66184344325d42e812973c
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-10-23

    autotools: Fix bash-completion installation

 Makefile.am         | 13 ++++---------
 configure.ac        |  5 ++++-
 p11-kit/Makefile.am |  4 ++++
 trust/Makefile.am   |  4 ++++
 4 files changed, 16 insertions(+), 10 deletions(-)

commit ef2716d18e1098effb8f3a90653c6264b2fec426
Author: Jakub Jelen <jjelen@redhat.com>
Date:   2019-10-22

    Install bash completion in the CI

 .travis/autotools/before_install.sh | 2 +-
 .travis/cppcheck/before_install.sh  | 2 +-
 .travis/linux/before_install.sh     | 2 +-
 .travis/osx/before_install.sh       | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

commit 387594893ee8d09267a7b788f3dae6905093d3c9
Author: Jakub Jelen <jjelen@redhat.com>
Date:   2019-10-21

    Add simple bash completion for provided commands

 Makefile.am                 |  8 ++++++
 bash-completion/meson.build | 11 ++++++++
 bash-completion/p11-kit     | 19 +++++++++++++
 bash-completion/trust       | 67 +++++++++++++++++++++++++++++++++++++++++++++
 configure.ac                |  7 +++++
 meson.build                 |  1 +
 6 files changed, 113 insertions(+)

commit b879b9b8395d0a99dbc9b8ae8057dc84bdd551e6
Author: Jakub Jelen <jjelen@redhat.com>
Date:   2019-10-22

    configure: Fix typo to avoid errors during configure

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 6b33efaa82848bac7fd73888963a106cf4c03151
Author: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
Date:   2019-10-07

    common: add Russian PKCS#11 extensions to pkcs11x.h header
    
    Add values defined to support Russian GOST cryptography to pkcs11x.h
    header.
    
    Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

 common/pkcs11x.h | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

commit a92894c80d880b6047327a276395b1f88fc733ee
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-09-30

    autotools: Add more files from meson build in distribution

 Makefile.am | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

commit b0ebe7555c291808db29377ba79cb8326301f0a6
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-09-30

    autotools: Add more files from meson build in distribution

 p11-kit/Makefile.am | 7 +++++++
 1 file changed, 7 insertions(+)

commit 3530d4946f9b9233bb0c132f3eda77c5f593fe9a
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-09-30

    build: Fix 'make distcheck'

 Makefile.am            | 3 ++-
 doc/manual/Makefile.am | 1 -
 p11-kit/Makefile.am    | 1 +
 3 files changed, 3 insertions(+), 2 deletions(-)

commit 25df8dfd2fac77d8c00d87a114d6d89dd945055f
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-09-30

    Release 0.23.18

 NEWS         | 5 +++++
