~noskcaj/ubuntu/vivid/gnome-keyring/3.15.90

Changes in version 3.6.2 are:

 * Accept XDG_DATA_HOME environment variable during initialization

 * Handle empty secrets correctly

Changes in version 3.6.1 are:

 * Fix regressions with keyring master password changing

 * Load schema for secret items correctly, prevents storing multiple times

   for items stored via libsecret

 * Setup translations properly when daemon starts

 * Fix memory leak in PKCS#11 module

 * Updated translations

Changes in version 3.6.0 are:

 * Updated translations

Changes in version 3.5.92 are:

 * Updated translations

Changes in version 3.5.91 are:

 * Updated translations

Changes in version 3.5.90 are:

 * Use the XDG directories for storing keys

 * Updated translations

 * Better handling of the --replace argument to gnome-keyring-daemon

 * Fix ability to store keyring files without using hardlinks

 * Make the GPG agent password caching options work correctly

Changes in version 3.5.5 are:

 * Initialize PKCS#11 correctly in gnome-keyring tool

 * Rename the p11-kit module file

 * Use setsid() to become a process leader when daemonizing

 * Build fixes

Changes in version 3.5.4 are:

 * Support the xdg:schema attribute on secret items

 * Update to newer glib dependency and remove redundant code

 * Encode passwords correctly for gpg2 in the gpg-agent

 * Fix types of the DBus Created and Modified properties

 * Expose the 'session' and 'login' keyrings as aliases

 * Emit Secret Service signals when collections/items change

 * Fix some spurious warnings

 * Testing fixes

Changes in version 3.5.3 are:

 * Return correct introspect data for Secret Service

 * Fix the gnome2-store for gcr importer, and test

 * Debug and logging fixes

 * Updated translations

 * Build fixes

Changes in version 3.4.1 are:

 * Set 'text/plain' content type on secrets returned from daemon

 * Use correct XDG_RUNTIME_DIR when started from PAM

 * Updated translations

 * License fix

 * More tests

 * Build fixes

Changes in version 3.4.0 are:

 * Updated translations

Changes in version 3.3.92 are:

 * Use runtime dir instead of /tmp for sockets

 * Updated translations

 * Fix copyright headers

 * Build fixes

Changes in version 3.3.91 are:

 * Fix regression in changing a keyring master password

 * Set better button labels for the prompts

 * Fix assertion when cancelling a unlock prompt

 * Use a single CA certificates file by default

 * Updated translations

Changes in version 3.3.5 are:

 * Updated translations

 * Fix introspection data for SearchItems()

 * Fix regression when an invalid password used to unlock keyring

Changes in version 3.3.4 are:

 * Updated translations

 * Build fixes

Changes in version 3.3.3.1 are:

 * No message in gnome-keyring-pkcs11.so module, when no daemon running

 * Updated translations

 * Build fixes

Changes in version 3.3.3 are:

 * Distribute correct desktop autostart files

 * Use GcrPrompt and GcrSystemPrompt for prompting

 * Do not crash when reading a truncated keyring file

 * Add test tool for dumping the keyring format

 * Update for GckBuilder changes in libgck

 * Fix for deprecations in glib 2.31.x

 * Fix ReadAlias() returning null when 'login' keyring exists

 * Build fixes, bug fixes

Changes in version 3.3.2 are:

 * Do not make label selectionnable in prompt dialog

 * Fix deadlock in the 'unsafe storage' prompt

 * Better locking for the old gnome2-store

 * Updated translations

 * Build fixes

Changes in version 3.3.1.1 are:

 * Build correctly against glib 2.31

Changes in version 3.3.1 are:

 * Return most recent secret first when searching

 * Split the Gcr and Gck libraries out of gnome-keyring

 * Build fixes

 * Updated translations

Changes in version 3.2.2 are:

 * Fix problem with 'unsafe storage' prompt deadlocking

 * Remove XFCE & LXDE from OnlyShowIn for autostart files

 * Use g_random_int_range() for pseudo-random hash iteration count

 * Return password results with the most recent result first

 * Make clear source of warnings from the rpc module

 * Updated translations

 * Build fixes

Changes in version 3.2.1 are:

 * Fix debugging output, and erroneous warnings

 * Updated translations

Changes in version 3.2.0 are:

 * Don't install setuid when filesystem capabilities not available

 * Updated translations

Changes in version 3.1.92 are:

 * Add back the file format "documentation"

 * Make .desktop file match prompt process so icon and title are shown

 * Fix packaging issues installing the pkcs11 module

 * return correct error code in gpg-agent for unimplemented stuff

 * Fixes for parsing/viewing various (sometimes slightly invalid) PKCS#12 files

 * Allow daemon to access secrets of internal PKCS#11 modules, so that we can

   do things like hash NTLM and Kerberos secrets in the future.

 * Build and documentation fixes

 * Updated translations

Changes in version 3.1.91 are:

 * gcr-viewer will now display errors when failing to load a file.

 * gcr-viewer can now prompt for passwords to unlock files

 * Add support for getting the current data block being parsed in GcrParser.

 * Add debug output to various points in the GCR and GCK libraries.

 * When replacing another gnome-keyring-daemon, wait a moment before initializing.

 * Fix GCR library initialization bugs loading PKCS#11 modules.

 * Fine tuning of GcrParser when parsing PKCS#12 files.

 * Build and packaging fixes

 * Updated translations

Changes in version 3.1.90 are:

 * Install better xdg-mime files for identifying crypto related file types

 * New gcr-viewer for viewing certificates and keys, hooked up to file types

 * Display tweaks for the certificate and key widgets

 * Don't initialize PKCS#11 modules automatically in gcr library unless needed.

 * Cleanup the libgck API since we're bumping the major version.

 * ABI fixes for the GCR library for changes in the 3.1.x release cycle

 * New automatic checks for symbols that have changed in the ABI

 * Add async PKCS#11 initialization functions to libgck

 * Display Certificate otherName subject-alt-name for xmppAddr and DNS SRV

 * Documentation, testing, translation and build fixes.

Changes in version 3.1.4 are:

 * New GcrListSelector class for selecting multiple keys.

 * Add icons for key and key pair.

 * Gcr now has support for loading of GnuPG keys from gpg, including photos.

 * New gcr dependency on p11-kit for loading PKCS#11 modules.

 * Remove support for GTK+ 2.x

 * Implement calculation of fingerprints in gcr for keys.

 * Fix problems in daemon if IPC lock or FS capabilities are not available.

 * Bug fixes and build fixes.

 * Code cleanup and refactoring.

Changes in version 3.1.1 are:

 * Add 'Export Certificate' option to right click of certificate widget.

 * Use file system linux capabilities for memory locking.

 * Set correct daemon SELinux context when started from PAM module.

 * Fix assertions in parser.

 * Add GcrCollection interface to represent collections of objects.

 * Add GcrGnupgCollection to libgcr.

 * Implement functionality in renderers to populate GtkTreeModel

 * Add a GcrSelector widget.

 * Cleanup unregistering from session.

 * Translations and translation fixes.

Changes in version 3.0.3 are:

 * Build fixes on OpenBSD.

 * Don't prompt multiple times for simultaneous unlocking of keyrings.

Changes in version 3.0.2 are:

 * Add documentation images for gcr widgets.

 * Translation fixes.

 * Build fixes.

Changes in version 3.0.1 are:

 * Fix clicking buttons in 'unsafe storage' dialog on GTK+3

 * Build with GTK+3 by default

 * More tests and test fine tuning: --enable-tests=yes/no/full

 * Expand path in gnome-keyring-prompt.desktop properly

 * Implement debug tracing in parts of gcr library.

 * Complete documentation in gcr and gck libraries.

 * Fix assertions in gcr library during parsing of a stream.

 * Build fixes

Changes in version 3.0.0 are:

 * Translations

Changes in version 2.91.93 are:

 * Use full interface.Property form for CreateCollection and CreateItem

   in the DBus API.

 * Add deprecated functions for libgcr symbols lost since 2.32.x

 * Don't crash when the GPG agent is asked for a passhprase without a

   key id.

Changes in version 2.91.92 are:

 * Don't leak login name from PAM when logging error.

 * Also start daemon in XFCE

 * Fix inability to save password for other keyrings.

 * Build and test fixes.

 * Support removal of aliases via the secret service API

 * Fix race condition when multiple applications create the default

   keyring at the same time.

 * Add a desktop file for gnome-keyring-prompt, so the icon shows up

   properly in gnome-shell.

 * Implement HKDF for transport encryption security.

Changes in version 2.91.91 are:

 * Fix the certificate details expander when used with GTK+3

 * Calculate the minimum/natural size of the certificate widget better.

 * Fix gnome-keyring-prompt for GTK+3 release.

 * Fix problems with the URIs used for trust lookup and storage.

 * Pass around a content-type for secrets in the DBus Secret Service API.

 * If DBus couldn't be initialized when starting up the daemon, try

   again at a later point.

 * Build and testing fixes.

 * Remove support for the pkcs11-options file, and wait for a proper

   configuration file setup being worked on in p11-kit.

 * Add support for --version argument to gnome-keyring-daemon and

   gnome-keyring

 * Create necessary directory when storing trust assertion objects.

Changes in version 2.91.4 are:

 * gck library loads PKCS#11 modules from /usr/lib/pkcs11

 * PKCS#11 config file in /etc/xdg/pkcs11.conf[.defaults]

 * Many ASN.1 encoding fixes.

 * Refactor how tests work.

 * Install standalone PKCS#11 modules to a consistent location.

 * Memory leaks and other bug fixes.

 * Allow enumeration of objects in specific PKCS#11 slots as well

   as modules.

 * Add GcrCertificateChain for building certificate chains.

 * Implementation of the initial PKCS#11 Trust Assertions spec.

 * Add GcrPkcs11Certificate for looking up certificates in PKCS#11

   modules by issuer.

 * Expose gcr functionality for setting which PKCS#11 modules to use.

 * Find the root certificates by default.

 * Move to a single header model for libgcr.

 * Don't load *.la files when looking for PKCS#11 modules.

 * Fixes for GTK+3.0

 * New xdg-store PKCS#11 module with support for storing trust

   assertions.

 * Rename old user-store to gnome2-store since it stores its data

   in old formats in the old .gnome2 location.

Changes in version 2.91.3 are:

 * Shutdown module timer when holding proper mutex.

 * Linux capabilities to overcome limits on locked memory.

 * Update HACKING with coding style

 * Build fixes.

Changes in version 2.91.2 are:

 * Add timeout if PAM startup doesn't complete shortly.

 * Fix login keyring password when it doesn't match unix login.

 * Replace gp11-0 with gck in pkgconfig file

 * Fix broken dispose of GcrCertificateWidget

 * Remove gp11 library.

Changes in version 2.91.1 are:

 * Fix build problem in gpg-agent.

 * Properly distribute pkgconfig file for gck library.

 * Better certificate widget in gcr library.

 * Add extra debug guard around printing of prompt io.

 * Rework how the gcr parser and importer work together.

 * More GTK+ 3.0 fixes.

Changes in version 2.91.0 are:

 * String and punctuation fixes.

 * Add libgck library to soon replace libgp11

 * Migrate everything in gnome-keyring to libgp11

 * Fix invalid memory access in PKCS#11 rpc-layer

 * Fix race condition in tests

Changes in version 2.32.0 are:

 * Make bulids silent by default.

Changes in version 2.31.92 are:

 * Require glib 2.25 or later.

 * Require automake 1.7 or later.

 * Fix assertion in secure memory code.

 * Don't go into endless loop when GPG Agent client disconnects.

 * Fix double free in gp11 library.

 * Fix crash during keyring unlock operation.

 * Expand prompt details when a non-default unlock option is chosen.

 * Migrate to gsettings.

 * Use gsettings for GPG agent unlock options.

 * Fix library header installation directory for libgcr.

 * Fix some errors parsing certificates.

 * Rework how unlock options are loaded and handled.

 * Fix saving of auto-unlock passwords.

 * Support building with GTK+ 3.0

 * No warning message when SSH unlock prompt is cancelled.

 * Build fix finding PAM headers.

 * Build fix of PAM module for Hurd.

Changes in version 2.31.91 are:

 * Fix problem with keyring names that contain foreign charaters.

 * Build fixes and warning fixes.

 * Better GPG Agent prompt strings.

 * More internal documentation.

 * Remove gconf as part of migration to gsettings.

 * Add --replace option to daemon.

 * Fix race condition in tests.

 * Use new DER decoding and encoding routines.

 * Only try to authenticate once if PKCS#11 slot has

   protected auth path.

 * Better handling of when PKCS#11 token is write protected.

Changes in version 2.31.4 are:

 * New GPG Agent built into gnome-keyring-daemon

 * Start building (but not using) new DER parser and writer.

 * Fix building of desktop and service files.

 * Fix problems displaying prompts with certain characters in strings.

 * Fix deadlock on secure memory usage.

 * Refactor the way prompting works for PKCS#11 components.

 * Refactor the way testing works and files are named.

 * Implement coverage testing.

 * Cleanup whitespace issues and rename certain modules.

 * Tests can now involve prompts and responses.

 * Fix possible threading race condition in gp11.

 * Fix broken startup when used with gdm and password-less login.

 * Fix checking of uninitialized value in prompting code.

Changes in version 2.30.1 are:

 * Updated translations.

 * Build fixes for errors and distribution problems.

 * Fixes for building on recent GTK versions.

 * Remove accidental storage of user's login password in login keyring.

 * Fix assertion when exiting.

Changes in version 2.30.0 are:

 * More robust error display and handling.

 * Don't assert on va_list.

 * Don't save session keyring to disk.

 * Allow unlocking even when always unlock is not available.

 * Hide the automatically unlock check when login not usable.

 * Fix various issues storing and using auto unlock passwords.

 * Updated translations.

Changes in version 2.29.92 are:

 * Fix various problems with not storing secret value properly.

 * Return no results when a search includes a bad collection identifier.

 * Don't raise error if ssh client disconnects early.

 * Allow running in a test environment.

 * Fix error when setting default keyring to NULL.

 * Autostart gnome-keyring-daemon in LXDE as well.

 * Rework the startup again, to use a singleton crontrolled via dbus, to help

   when no process was started by pam.

 * Display password and confirm prompts when creating keyring.

 * Allow specifying CKA_ID when creating collection.

 * Give translatable label to created login keyring.

 * When no default keyring set, use login keyring.

 * Fix problem initializing socket path in rpc module.

 * Fix endless loop in reading data.

 * Potential fix or sporadic crash.

 * Solaris build fixes.

 * Updated translations.

Changes in version 2.29.90 are:

 * Quit daemon when the dbus session is disconnected.

 * GNU Hurd build fixes.

 * Solaris build fixes.

 * Translation fixes.

 * Don't print out warnings on SSH v1 keys.

 * Remove erroneous egg-dbus dependency.

 * Allow saving password for encryption keys.

 * Fix problems storing secrets in keyrings.

 * Expose idle and timeout lock options for keyrings in the

   prompt dialog. Fix remaining issues to get this to work.

 * Display a different message when unlocking the login keyring.

 * Fix problem with phantom 'xxx_1' keyrings appearing.

 * Load and use the default keyring properly.

 * Support accessing template style pkcs11 attributes.

 * Fix endless loop when looking for encryption key password

   in login keyring.

Changes in version 2.29.5 are:

 * Implement lookup collection passwords in login keyring.

 * Various prompting fixes.

 * Store PKCS#11 objects after any attribute change.

 * Add 'Type' property to Secret Service API DBus item interface

 * Various warning, and uninitialized memory fixes.

Changes in version 2.29.4 are:

 * Refactor how the daemon starts up.

 * Allow init with already present environment variables, using --start.

 * Install autostart files for each component of the daemon.

 * New DBus Secret Service API for accessing passwords and secrets.

 * Old protocol for accessing secrets is no longer present.

 * libgnome-keyring is now its own module, and no longer bundled

   with gnome-keyring.

 * Use normal GtkEntry when prompting for passwords.

 * Requires GTK+ 2.18

 * Implement new more flexible control protocol for pam and startup.

 * Complete more of the gp11 PKCS#11 wrapper library.

 * Implement AES key wrapping and unwrapping in PKCS#11 components.

 * Implement DH key generation and derivation in PKCS#11 components.

 * Integrate testing of PKCS#11 components via p11-tests.

 * Implement PKCS#11 component for storing 'keyring' style secrets.

 * Don't complain if we can't set session environment variables.

 * When running a debug build, warnings are fatal.

 * Refactor testing.

 * Encrypted channel for password with prompting dialog.

Changes in version 2.28.2 are:

 * Add license to reference documentation.

 * Sent output of g_printerr to syslog.

 * No error when can't unlock login keyring.

 * Fix assertion when comparing attributes.

 * Fix freeing of unallocated memory in test.

 * Don't barf on certificates with unsupported algorithm.

 * Fix some memory leaks.

Changes in version 2.28.1 are:

 * Fix support for SSH RSA1 keys.

 * Fix a delay when the daemon quits.

 * Use default D-Bus timeout when finding daemon.

 * Make custom pkcs11 constants unsigned longs.

 * Use unsigned long for module handle counter.

 * Fix assertion when releasing secure memory block.

Changes in version 2.28.0 are:

 * Fix build problems.

Changes in version 2.27.92 are:

 * Some uses of glib memory routines to explicitly allocate memory.

 * Fix erroneous assertion hit by gtk-doc and tests.

 * Revert change which bumped libtasn1 required to 1.0.

 * Fix logic for only_if option in PAM module.

 * Handle unix signals on one thread.

 * Better daemon startup and forking logic.

 * Optional use of automake silent rules when available.

 * No warning when a disk doesn't have a UDI identifier.

Changes in version 2.27.90 are:

 * Build fixes on Solaris and FreeBSD.

 * Take length of ASN.1 elements into account, when parsing.

Changes in version 2.27.5 are:

* Add support for lifetime constrained SSH identities.

* Use GtkBuilder files where glade files were used.

* Write private key files with tighter file permissions.

* Use gio instead of libhal for monitoring volumes.

Changes in version 2.27.4 are:

* Insurance in parsing keyring format for future changes.

* Add 'use_authtok' option to pam module.

* Test utility fix [Jon Downland]

* Add 'only_if=' option to pam module.

* Make 'Password:' prompt translatable in pam module.

* Use libgcrypt to generate iv/salt where needed.

* Remove old cu-test style unit tests.

* Code refactoring and cleanup, removed 'common' component.

* Auto generated ChangeLog.

* Cleanup unit tests, and make them run with 'make check'

Changes in version 2.26.3 are:

* Build fixes. [Alexis Ballier, Daniel Macks]

* Fix problem with RSA key sizes that are not a multiple of 8.

  This affected use of SSH keys in particular.

* Fix crash related to secure memory. [Ryan Beasley]

Changes in version 2.26.1 are:

* Fix many problems with the new secure memory allocator.

* DBus now automatically starts the gnome-keyring service properly.

* When auto activating the gnome-keyring DBus service, check for an

  already running daemon.

* Don't print critical warnings when registering with DBus fails.

* Bump glib dependency.

* Add DBus method for getting the gnome-keyring environment variables.

* Fix crash when prompting to unlock the keyring.

* Initialize daemon with LOGNAME and USERNAME environment variables.

* Build fixes [Ed Schouten]

Changes in version 2.26.0 are:

* Implement support for running gnome-keyring-daemon under valgrind.

* Checks for asn1Parser tool when configuring. [Alberto Ruiz].

* Only automatically expose PKCS#11 public key objects for private keys.

* Have the SSH agent only log into the token when we have a private

  key that we want to access.

* Disable input method in password. [Takao Fujiwara]

Changes in version 2.25.92 are:

* Fix problems when multiple processes tried to initialize the

  gnome-keyring-daemon at the same time, often resulting in a user

  session that hung on login.

* Add compatibility support for loading SSH unlock passwords from

  previous versions of gnome-keyring.

* Fix compiler warnings on 32-bit systems.

* Fix uninitialized variable usage. These resulted in crashes.

* Initialize PKCS#11 tokens before importing certificates or keys

  to them. Remove previous auto-initialize idea.

* Add basic support for PKCS#11 SO logins.

* Fix focus issues in the import certificate/key dialog.

* When looking for PKCS#11 objects, skip tokens that have not been

  initialized.

* Exit properly when an error occurs on importing a certificate or key.

* Hash objects when storing them in PKCS#11 user-store and validate the

  hashes when loading them.

* Build fix on Solaris [Jeff Cai]

* If login keyring doesn't exist when changing a PAM password, don't

  create it automatically. [Vincent Untz]

* Close stdin/stdout when not running the daemon in foreground. This

  fixes a regression in scripts starting gnome-keyring-daemon.

Changes in version 2.25.91 are:

* Complete certificate details display in the gcr library.

* Correctly escape prompt markup. [Joe Shaw, Magnus Boman]

* Show correct MD5 hash in certificate display. [Fabrizio Tarizzo]

* Overhaul the secure memory allocator to have memory guards,

  and also be more sparing with secure memory.

* Add C++ header guards to public headers. [Xan Lopez]

* Prompt to initialize new PKCS#11 tokens with a password.

* Fix output of RSA keys to be interoperable.

* Translation fixes.

* Fix problems importing certificates and keys.

* More code reorganization.

* Add support for netscape trust objects, so Root CA certificates

  can be trusted by NSS.

* Fixes to the PKCS#11 headers on 64-bit systems. [Christophe Fergeau]

Changes in version 2.25.90 are:

* Add certificate UI bit to gcr library.

* Can now again clear the cached authentication from an SSH key.

* Add some additional helper functions to gp11 library.

* Fix some corner cases in signal handling. [James Henstridge]

* Don't crash when trying to lock keyrings that don't have a password.

* Fix problems running on 64-bit systems. [Christophe Fergeau]

* Build fixes [Theppitak Karoonboonyanan, Saleem Abdulrasool]

Changes in version 2.25.5 are:

* Refactor out gcr library for crypto UI and related tasks.

* Code refactoring.

* Support automatically initializing a PKCS#11 token when not initialized.

* Add modular user-store module for general storage of keys and certs.

* Build fixes [Saleem Abdulrasool, Jeff Cai]

* Add modular roots-store module for storage of trusted CA certs.

* Add modular rpc-layer for communication between module and daemon.

* Add modular ssh-agent as the main gnome-keyring-daemon agent.

Changes in version 2.25.4.2 are:

* The modular ssh agent uses keys from all available PKCS#11 slots.

* Fix compiler warnings.

* Fix broken release.

Changes in version 2.25.4.1 are: