.gitignore

@@ -1,2 +1 @@
 SOURCES/softhsm-2.6.1.tar.gz
-SOURCES/softhsm-2.6.1.tar.gz.sig

.softhsm.metadata

@@ -1,2 +1 @@
 c6fd316df6366960b8c8cda92408d7e02c3fb434 SOURCES/softhsm-2.6.1.tar.gz
-4713414ddb9fde918ff329f192a42a6d81505680 SOURCES/softhsm-2.6.1.tar.gz.sig

SOURCES/softhsm-2.6.1-uninitialized.patch

@@ -1,12 +0,0 @@
-diff --git a/src/lib/SoftHSM.cpp b/src/lib/SoftHSM.cpp
-index d2bf4037a..6eeac6103 100644
---- a/src/lib/SoftHSM.cpp
-+++ b/src/lib/SoftHSM.cpp
-@@ -972,6 +972,7 @@ CK_RV SoftHSM::C_GetMechanismInfo(CK_SLOT_ID slotID, CK_MECHANISM_TYPE type, CK_
- 	}
- 	CryptoFactory::i()->recycleAsymmetricAlgorithm(eddsa);
- #endif
-+	pInfo->flags = 0;	// initialize flags
- 	switch (type)
- 	{
- #ifndef WITH_FIPS

SOURCES/softhsm-disable-usage-of-openssl-engines.patch

@@ -1,93 +0,0 @@
-From 7c7bb855e133b6c998385171b2ec86247b86933e Mon Sep 17 00:00:00 2001
-From: Francisco Trivino <ftrivino@redhat.com>
-Date: Fri, 2 Aug 2024 11:53:44 +0200
-Subject: [PATCH] use pkcs11 provider for OPENSSL MAJOR >= 3
-
----
-diff --git a/cmake/modules/tests/test_openssl_gost.c b/cmake/modules/tests/test_openssl_gost.c
-index 33487e1..b2df4df 100644
---- a/modules/tests/test_openssl_gost.c
-+++ b/modules/tests/test_openssl_gost.c
-@@ -1,3 +1,4 @@
-+#ifndef OPENSSL_NO_ENGINE
- #include <openssl/engine.h>
- #include <openssl/crypto.h>
- #include <openssl/opensslv.h>
-@@ -39,3 +40,4 @@ int main()
- 
-         return 0;
- }
-+#endif
-diff --git a/src/lib/crypto/OSSLCryptoFactory.h b/src/lib/crypto/OSSLCryptoFactory.h
-index d718b69..18028c4 100644
---- a/src/lib/crypto/OSSLCryptoFactory.h
-+++ b/src/lib/crypto/OSSLCryptoFactory.h
-@@ -42,7 +42,16 @@
- #include "RNG.h"
- #include <memory>
- #include <openssl/conf.h>
--#include <openssl/engine.h>
-+#if OPENSSL_VERSION_MAJOR >= 3
-+# define USE_PKCS11_PROVIDER
-+# include <openssl/provider.h>
-+# include <openssl/store.h>
-+#else
-+# if !defined(OPENSSL_NO_ENGINE) && !defined(OPENSSL_NO_DEPRECATED_3_0)
-+#  define USE_PKCS11_ENGINE
-+#  include <openssl/engine.h>
-+# endif
-+#endif
- 
- class OSSLCryptoFactory : public CryptoFactory
- {
-diff --git a/src/lib/crypto/OSSLCryptoFactory.cpp b/src/lib/crypto/OSSLCryptoFactory.cpp
-index 32f8dc8..a719778 100644
---- a/src/lib/crypto/OSSLCryptoFactory.cpp
-+++ b/src/lib/crypto/OSSLCryptoFactory.cpp
-@@ -141,6 +141,11 @@ OSSLCryptoFactory::OSSLCryptoFactory()
- 	// Initialise OpenSSL
- 	OpenSSL_add_all_algorithms();
- 
-+	// Initialise the one-and-only RNG
-+	rng = new OSSLRNG();
-+
-+#ifndef OPENSSL_NO_ENGINE
-+
- #if !( OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) )
- 	// Make sure RDRAND is loaded first
- 	ENGINE_load_rdrand();
-@@ -221,13 +223,13 @@ err:
- 	eg = NULL;
- 	return;
- #endif
-+#endif // OPENSSL_NO_ENGINE
- }
- 
- // Destructor
- OSSLCryptoFactory::~OSSLCryptoFactory()
- {
- 	bool ossl_shutdown = false;
--
- #if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)
- 	// OpenSSL 1.1.0+ will register an atexit() handler to run
- 	// OPENSSL_cleanup(). If that has already happened we must
-@@ -243,6 +245,7 @@ OSSLCryptoFactory::~OSSLCryptoFactory()
- #endif
- 	if (!ossl_shutdown)
- 	{
-+#ifndef OPENSSL_NO_ENGINE
- #ifdef WITH_GOST
- 		// Finish the GOST engine
- 		if (eg != NULL)
-@@ -257,7 +260,7 @@ OSSLCryptoFactory::~OSSLCryptoFactory()
- 		ENGINE_finish(rdrand_engine);
- 		ENGINE_free(rdrand_engine);
- 		rdrand_engine = NULL;
--
-+#endif //OPENSSL_NO_ENGINE
- 		// Recycle locks
- #if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
- 		if (setLockingCallback)
--- 
-2.45.2
-

SOURCES/softhsm-prevent-global-deleted-objects-access.patch

@@ -1,667 +0,0 @@
-From 41968e7b742ad59046523a7eeb63514237fb63af Mon Sep 17 00:00:00 2001
-From: Neil Horman <nhorman@openssl.org>
-Date: Fri, 27 Oct 2023 14:57:37 -0400
-Subject: [PATCH] Prevent accessing of global c++ objects once they are deleted
-
-Fixes (Maybe) #729.
-Reset objects_deleted after reset is called.
----
- src/lib/SoftHSM.cpp |   5 ++
- src/lib/main.cpp    | 138 ++++++++++++++++++++++++++++++++++++++++++++
- 2 files changed, 143 insertions(+)
-
-diff --git a/src/lib/SoftHSM.cpp b/src/lib/SoftHSM.cpp
-index 02c0f95ec..95bf208da 100644
---- a/src/lib/SoftHSM.cpp
-+++ b/src/lib/SoftHSM.cpp
-@@ -89,6 +89,8 @@
- 
- // Initialise the one-and-only instance
- 
-+int objects_deleted = 0;
-+
- #ifdef HAVE_CXX11
- 
- std::unique_ptr<MutexFactory> MutexFactory::instance(nullptr);
-@@ -406,6 +408,8 @@ void SoftHSM::reset()
- {
- 	if (instance.get())
- 		instance.reset();
-+
-+	objects_deleted = 0;
- }
- 
- // Constructor
-@@ -445,6 +449,7 @@ SoftHSM::~SoftHSM()
- 
- 	isInitialised = false;
- 
-+	objects_deleted = 1;
- 	resetMutexFactoryCallbacks();
- }
- 
-diff --git a/src/lib/main.cpp b/src/lib/main.cpp
-index 2dfd0eb87..e89f18c10 100644
---- a/src/lib/main.cpp
-+++ b/src/lib/main.cpp
-@@ -49,6 +49,8 @@
- #define PKCS_API
- #endif
- 
-+extern int objects_deleted;
-+
- // PKCS #11 function list
- static CK_FUNCTION_LIST functionList =
- {
-@@ -130,6 +132,8 @@ PKCS_API CK_RV C_Initialize(CK_VOID_PTR pInitArgs)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_Initialize(pInitArgs);
- 	}
- 	catch (...)
-@@ -145,6 +149,8 @@ PKCS_API CK_RV C_Finalize(CK_VOID_PTR pReserved)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_Finalize(pReserved);
- 	}
- 	catch (...)
-@@ -160,6 +166,8 @@ PKCS_API CK_RV C_GetInfo(CK_INFO_PTR pInfo)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GetInfo(pInfo);
- 	}
- 	catch (...)
-@@ -175,6 +183,8 @@ PKCS_API CK_RV C_GetFunctionList(CK_FUNCTION_LIST_PTR_PTR ppFunctionList)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		if (ppFunctionList == NULL_PTR) return CKR_ARGUMENTS_BAD;
- 
- 		*ppFunctionList = &functionList;
-@@ -194,6 +204,8 @@ PKCS_API CK_RV C_GetSlotList(CK_BBOOL tokenPresent, CK_SLOT_ID_PTR pSlotList, CK
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GetSlotList(tokenPresent, pSlotList, pulCount);
- 	}
- 	catch (...)
-@@ -209,6 +221,8 @@ PKCS_API CK_RV C_GetSlotInfo(CK_SLOT_ID slotID, CK_SLOT_INFO_PTR pInfo)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GetSlotInfo(slotID, pInfo);
- 	}
- 	catch (...)
-@@ -224,6 +238,8 @@ PKCS_API CK_RV C_GetTokenInfo(CK_SLOT_ID slotID, CK_TOKEN_INFO_PTR pInfo)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GetTokenInfo(slotID, pInfo);
- 	}
- 	catch (...)
-@@ -239,6 +255,8 @@ PKCS_API CK_RV C_GetMechanismList(CK_SLOT_ID slotID, CK_MECHANISM_TYPE_PTR pMech
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GetMechanismList(slotID, pMechanismList, pulCount);
- 	}
- 	catch (...)
-@@ -254,6 +272,8 @@ PKCS_API CK_RV C_GetMechanismInfo(CK_SLOT_ID slotID, CK_MECHANISM_TYPE type, CK_
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GetMechanismInfo(slotID, type, pInfo);
- 	}
- 	catch (...)
-@@ -269,6 +289,8 @@ PKCS_API CK_RV C_InitToken(CK_SLOT_ID slotID, CK_UTF8CHAR_PTR pPin, CK_ULONG ulP
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_InitToken(slotID, pPin, ulPinLen, pLabel);
- 	}
- 	catch (...)
-@@ -284,6 +306,8 @@ PKCS_API CK_RV C_InitPIN(CK_SESSION_HANDLE hSession, CK_UTF8CHAR_PTR pPin, CK_UL
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_InitPIN(hSession, pPin, ulPinLen);
- 	}
- 	catch (...)
-@@ -299,6 +323,8 @@ PKCS_API CK_RV C_SetPIN(CK_SESSION_HANDLE hSession, CK_UTF8CHAR_PTR pOldPin, CK_
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_SetPIN(hSession, pOldPin, ulOldLen, pNewPin, ulNewLen);
- 	}
- 	catch (...)
-@@ -314,6 +340,8 @@ PKCS_API CK_RV C_OpenSession(CK_SLOT_ID slotID, CK_FLAGS flags, CK_VOID_PTR pApp
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_OpenSession(slotID, flags, pApplication, notify, phSession);
- 	}
- 	catch (...)
-@@ -329,6 +357,8 @@ PKCS_API CK_RV C_CloseSession(CK_SESSION_HANDLE hSession)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_CloseSession(hSession);
- 	}
- 	catch (...)
-@@ -344,6 +374,8 @@ PKCS_API CK_RV C_CloseAllSessions(CK_SLOT_ID slotID)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_CloseAllSessions(slotID);
- 	}
- 	catch (...)
-@@ -359,6 +391,8 @@ PKCS_API CK_RV C_GetSessionInfo(CK_SESSION_HANDLE hSession, CK_SESSION_INFO_PTR
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GetSessionInfo(hSession, pInfo);
- 	}
- 	catch (...)
-@@ -374,6 +408,8 @@ PKCS_API CK_RV C_GetOperationState(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pOper
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GetOperationState(hSession, pOperationState, pulOperationStateLen);
- 	}
- 	catch (...)
-@@ -389,6 +425,8 @@ PKCS_API CK_RV C_SetOperationState(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pOper
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_SetOperationState(hSession, pOperationState, ulOperationStateLen, hEncryptionKey, hAuthenticationKey);
- 	}
- 	catch (...)
-@@ -404,6 +442,8 @@ PKCS_API CK_RV C_Login(CK_SESSION_HANDLE hSession, CK_USER_TYPE userType, CK_UTF
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_Login(hSession, userType, pPin, ulPinLen);
- 	}
- 	catch (...)
-@@ -419,6 +459,8 @@ PKCS_API CK_RV C_Logout(CK_SESSION_HANDLE hSession)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_Logout(hSession);
- 	}
- 	catch (...)
-@@ -434,6 +476,8 @@ PKCS_API CK_RV C_CreateObject(CK_SESSION_HANDLE hSession, CK_ATTRIBUTE_PTR pTemp
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_CreateObject(hSession, pTemplate, ulCount, phObject);
- 	}
- 	catch (...)
-@@ -449,6 +493,8 @@ PKCS_API CK_RV C_CopyObject(CK_SESSION_HANDLE hSession, CK_OBJECT_HANDLE hObject
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_CopyObject(hSession, hObject, pTemplate, ulCount, phNewObject);
- 	}
- 	catch (...)
-@@ -464,6 +510,8 @@ PKCS_API CK_RV C_DestroyObject(CK_SESSION_HANDLE hSession, CK_OBJECT_HANDLE hObj
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DestroyObject(hSession, hObject);
- 	}
- 	catch (...)
-@@ -479,6 +527,8 @@ PKCS_API CK_RV C_GetObjectSize(CK_SESSION_HANDLE hSession, CK_OBJECT_HANDLE hObj
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GetObjectSize(hSession, hObject, pulSize);
- 	}
- 	catch (...)
-@@ -494,6 +544,8 @@ PKCS_API CK_RV C_GetAttributeValue(CK_SESSION_HANDLE hSession, CK_OBJECT_HANDLE
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GetAttributeValue(hSession, hObject, pTemplate, ulCount);
- 	}
- 	catch (...)
-@@ -509,6 +561,8 @@ PKCS_API CK_RV C_SetAttributeValue(CK_SESSION_HANDLE hSession, CK_OBJECT_HANDLE
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_SetAttributeValue(hSession, hObject, pTemplate, ulCount);
- 	}
- 	catch (...)
-@@ -524,6 +578,8 @@ PKCS_API CK_RV C_FindObjectsInit(CK_SESSION_HANDLE hSession, CK_ATTRIBUTE_PTR pT
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_FindObjectsInit(hSession, pTemplate, ulCount);
- 	}
- 	catch (...)
-@@ -539,6 +595,8 @@ PKCS_API CK_RV C_FindObjects(CK_SESSION_HANDLE hSession, CK_OBJECT_HANDLE_PTR ph
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_FindObjects(hSession, phObject, ulMaxObjectCount, pulObjectCount);
- 	}
- 	catch (...)
-@@ -554,6 +612,8 @@ PKCS_API CK_RV C_FindObjectsFinal(CK_SESSION_HANDLE hSession)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_FindObjectsFinal(hSession);
- 	}
- 	catch (...)
-@@ -569,6 +629,8 @@ PKCS_API CK_RV C_EncryptInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMecha
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_EncryptInit(hSession, pMechanism, hObject);
- 	}
- 	catch (...)
-@@ -584,6 +646,8 @@ PKCS_API CK_RV C_Encrypt(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pData, CK_ULONG
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_Encrypt(hSession, pData, ulDataLen, pEncryptedData, pulEncryptedDataLen);
- 	}
- 	catch (...)
-@@ -599,6 +663,8 @@ PKCS_API CK_RV C_EncryptUpdate(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pData, CK
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_EncryptUpdate(hSession, pData, ulDataLen, pEncryptedData, pulEncryptedDataLen);
- 	}
- 	catch (...)
-@@ -614,6 +680,8 @@ PKCS_API CK_RV C_EncryptFinal(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pEncrypted
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_EncryptFinal(hSession, pEncryptedData, pulEncryptedDataLen);
- 	}
- 	catch (...)
-@@ -629,6 +697,8 @@ PKCS_API CK_RV C_DecryptInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMecha
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DecryptInit(hSession, pMechanism, hObject);
- 	}
- 	catch (...)
-@@ -644,6 +714,8 @@ PKCS_API CK_RV C_Decrypt(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pEncryptedData,
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_Decrypt(hSession, pEncryptedData, ulEncryptedDataLen, pData, pulDataLen);
- 	}
- 	catch (...)
-@@ -659,6 +731,8 @@ PKCS_API CK_RV C_DecryptUpdate(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pEncrypte
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DecryptUpdate(hSession, pEncryptedData, ulEncryptedDataLen, pData, pDataLen);
- 	}
- 	catch (...)
-@@ -674,6 +748,8 @@ PKCS_API CK_RV C_DecryptFinal(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pData, CK_
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DecryptFinal(hSession, pData, pDataLen);
- 	}
- 	catch (...)
-@@ -689,6 +765,8 @@ PKCS_API CK_RV C_DigestInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechan
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DigestInit(hSession, pMechanism);
- 	}
- 	catch (...)
-@@ -704,6 +782,8 @@ PKCS_API CK_RV C_Digest(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pData, CK_ULONG
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_Digest(hSession, pData, ulDataLen, pDigest, pulDigestLen);
- 	}
- 	catch (...)
-@@ -719,6 +799,8 @@ PKCS_API CK_RV C_DigestUpdate(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pPart, CK_
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DigestUpdate(hSession, pPart, ulPartLen);
- 	}
- 	catch (...)
-@@ -734,6 +816,8 @@ PKCS_API CK_RV C_DigestKey(CK_SESSION_HANDLE hSession, CK_OBJECT_HANDLE hObject)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DigestKey(hSession, hObject);
- 	}
- 	catch (...)
-@@ -749,6 +833,8 @@ PKCS_API CK_RV C_DigestFinal(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pDigest, CK
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DigestFinal(hSession, pDigest, pulDigestLen);
- 	}
- 	catch (...)
-@@ -764,6 +850,8 @@ PKCS_API CK_RV C_SignInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanis
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_SignInit(hSession, pMechanism, hKey);
- 	}
- 	catch (...)
-@@ -779,6 +867,8 @@ PKCS_API CK_RV C_Sign(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pData, CK_ULONG ul
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_Sign(hSession, pData, ulDataLen, pSignature, pulSignatureLen);
- 	}
- 	catch (...)
-@@ -794,6 +884,8 @@ PKCS_API CK_RV C_SignUpdate(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pPart, CK_UL
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_SignUpdate(hSession, pPart, ulPartLen);
- 	}
- 	catch (...)
-@@ -809,6 +901,8 @@ PKCS_API CK_RV C_SignFinal(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSignature, C
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_SignFinal(hSession, pSignature, pulSignatureLen);
- 	}
- 	catch (...)
-@@ -824,6 +918,8 @@ PKCS_API CK_RV C_SignRecoverInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pM
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_SignRecoverInit(hSession, pMechanism, hKey);
- 	}
- 	catch (...)
-@@ -839,6 +935,8 @@ PKCS_API CK_RV C_SignRecover(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pData, CK_U
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_SignRecover(hSession, pData, ulDataLen, pSignature, pulSignatureLen);
- 	}
- 	catch (...)
-@@ -854,6 +952,8 @@ PKCS_API CK_RV C_VerifyInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechan
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_VerifyInit(hSession, pMechanism, hKey);
- 	}
- 	catch (...)
-@@ -869,6 +969,8 @@ PKCS_API CK_RV C_Verify(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pData, CK_ULONG
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_Verify(hSession, pData, ulDataLen, pSignature, ulSignatureLen);
- 	}
- 	catch (...)
-@@ -884,6 +986,8 @@ PKCS_API CK_RV C_VerifyUpdate(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pPart, CK_
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_VerifyUpdate(hSession, pPart, ulPartLen);
- 	}
- 	catch (...)
-@@ -899,6 +1003,8 @@ PKCS_API CK_RV C_VerifyFinal(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSignature,
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_VerifyFinal(hSession, pSignature, ulSignatureLen);
- 	}
- 	catch (...)
-@@ -914,6 +1020,8 @@ PKCS_API CK_RV C_VerifyRecoverInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_VerifyRecoverInit(hSession, pMechanism, hKey);
- 	}
- 	catch (...)
-@@ -929,6 +1037,8 @@ PKCS_API CK_RV C_VerifyRecover(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSignatur
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_VerifyRecover(hSession, pSignature, ulSignatureLen, pData, pulDataLen);
- 	}
- 	catch (...)
-@@ -944,6 +1054,8 @@ PKCS_API CK_RV C_DigestEncryptUpdate(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pPa
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DigestEncryptUpdate(hSession, pPart, ulPartLen, pEncryptedPart, pulEncryptedPartLen);
- 	}
- 	catch (...)
-@@ -959,6 +1071,8 @@ PKCS_API CK_RV C_DecryptDigestUpdate(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pPa
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DecryptDigestUpdate(hSession, pPart, ulPartLen, pDecryptedPart, pulDecryptedPartLen);
- 	}
- 	catch (...)
-@@ -974,6 +1088,8 @@ PKCS_API CK_RV C_SignEncryptUpdate(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pPart
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_SignEncryptUpdate(hSession, pPart, ulPartLen, pEncryptedPart, pulEncryptedPartLen);
- 	}
- 	catch (...)
-@@ -989,6 +1105,8 @@ PKCS_API CK_RV C_DecryptVerifyUpdate(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pEn
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DecryptVerifyUpdate(hSession, pEncryptedPart, ulEncryptedPartLen, pPart, pulPartLen);
- 	}
- 	catch (...)
-@@ -1004,6 +1122,8 @@ PKCS_API CK_RV C_GenerateKey(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMecha
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GenerateKey(hSession, pMechanism, pTemplate, ulCount, phKey);
- 	}
- 	catch (...)
-@@ -1029,6 +1149,8 @@ PKCS_API CK_RV C_GenerateKeyPair
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GenerateKeyPair(hSession, pMechanism, pPublicKeyTemplate, ulPublicKeyAttributeCount, pPrivateKeyTemplate, ulPrivateKeyAttributeCount, phPublicKey, phPrivateKey);
- 	}
- 	catch (...)
-@@ -1052,6 +1174,8 @@ PKCS_API CK_RV C_WrapKey
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_WrapKey(hSession, pMechanism, hWrappingKey, hKey, pWrappedKey, pulWrappedKeyLen);
- 	}
- 	catch (...)
-@@ -1077,6 +1201,8 @@ PKCS_API CK_RV C_UnwrapKey
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_UnwrapKey(hSession, pMechanism, hUnwrappingKey, pWrappedKey, ulWrappedKeyLen, pTemplate, ulCount, phKey);
- 	}
- 	catch (...)
-@@ -1100,6 +1226,8 @@ PKCS_API CK_RV C_DeriveKey
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_DeriveKey(hSession, pMechanism, hBaseKey, pTemplate, ulCount, phKey);
- 	}
- 	catch (...)
-@@ -1115,6 +1243,8 @@ PKCS_API CK_RV C_SeedRandom(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSeed, CK_UL
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_SeedRandom(hSession, pSeed, ulSeedLen);
- 	}
- 	catch (...)
-@@ -1130,6 +1260,8 @@ PKCS_API CK_RV C_GenerateRandom(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pRandomD
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GenerateRandom(hSession, pRandomData, ulRandomLen);
- 	}
- 	catch (...)
-@@ -1145,6 +1277,8 @@ PKCS_API CK_RV C_GetFunctionStatus(CK_SESSION_HANDLE hSession)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_GetFunctionStatus(hSession);
- 	}
- 	catch (...)
-@@ -1160,6 +1294,8 @@ PKCS_API CK_RV C_CancelFunction(CK_SESSION_HANDLE hSession)
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_CancelFunction(hSession);
- 	}
- 	catch (...)
-@@ -1175,6 +1311,8 @@ PKCS_API CK_RV C_WaitForSlotEvent(CK_FLAGS flags, CK_SLOT_ID_PTR pSlot, CK_VOID_
- {
- 	try
- 	{
-+		if (objects_deleted == 1)
-+			return CKR_FUNCTION_FAILED;
- 		return SoftHSM::i()->C_WaitForSlotEvent(flags, pSlot, pReserved);
- 	}
- 	catch (...)

SPECS/softhsm.spec

@@ -4,7 +4,7 @@
 Summary: Software version of a PKCS#11 Hardware Security Module
 Name: softhsm
 Version: 2.6.1
-Release: %{?prever:0.}14%{?prever:.%{prever}}%{?dist}.1
+Release: %{?prever:0.}7%{?prever:.%{prever}}%{?dist}.2
 License: BSD
 Url: http://www.opendnssec.org/
 Source: http://dist.opendnssec.org/source/%{?prever:testing/}%{name}-%{version}.tar.gz
@@ -12,12 +12,6 @@ Source1: http://dist.opendnssec.org/source/%{?prever:testing/}%{name}-%{version}
 
 Patch1: softhsm-2.6.1-rh1831086-exit.patch
 Patch2: softhsm-openssl3-tests.patch
-# based on https://github.com/opendnssec/SoftHSMv2/commit/f94aaffc879ade97a51b8e1308af42f86be1885f
-Patch3: softhsm-2.6.1-uninitialized.patch
-# from https://github.com/Emantor/SoftHSMv2/tree/fix/openssl3
-# as discussed at https://github.com/opendnssec/SoftHSMv2/issues/729
-Patch4: softhsm-prevent-global-deleted-objects-access.patch
-Patch5: softhsm-disable-usage-of-openssl-engines.patch
 
 BuildRequires: make
 BuildRequires: openssl-devel >= 1.0.1k-6, sqlite-devel >= 3.4.2, cppunit-devel
@@ -48,7 +42,9 @@ BuildRequires: autoconf, libtool, automake
 The devel package contains the libsofthsm include files
 
 %prep
-%autosetup -p1 -n %{name}-%{version}%{?prever}
+%setup -q -n %{name}-%{version}%{?prever}
+%patch1 -p1
+%patch2 -p1
 
 %if 0%{?prever:1} || 0%{?prerelease:1}
    # pre-release or post-release snapshots fixup
@@ -65,11 +61,13 @@ autoreconf -fiv
 # investigation
 %define _lto_cflags %{nil}
 
-%configure CFLAGS="${CFLAGS} -DOPENSSL_NO_ENGINE" --libdir=%{_libdir}/pkcs11 --with-openssl=%{_prefix} --enable-ecc --enable-eddsa --disable-gost \
+%configure --libdir=%{_libdir}/pkcs11 --with-openssl=%{_prefix} --enable-ecc --enable-eddsa --disable-gost \
            --with-migrate --enable-visibility --with-p11-kit=%{_datadir}/p11-kit/modules/
 
 %make_build
 
+%check
+make check
 
 %install
 rm -rf %{buildroot}
@@ -120,71 +118,24 @@ if [ -f /var/softhsm/slot0.db ]; then
 fi
 
 %changelog
-* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 2.6.1-14.1
+* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 2.6.1-7.2
-- Bump release for October 2024 mass rebuild:
+- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
-  Resolves: RHEL-64018
+  Related: rhbz#1991688
 
-* Fri Oct 25 2024 MSVSphere Packaging Team <packager@msvsphere-os.ru> - 2.6.1-14
+* Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 2.6.1-7.1
-- Rebuilt for MSVSphere 10
+- Rebuilt for RHEL 9 BETA for openssl 3.0
+  Related: rhbz#1971065
 
-* Tue Sep 17 2024 Rafael Jeffman <rjeffman@redhat.com> - 2.6.1-14
+* Wed Jun 02 2021 Alexander Bokovoy <abokovoy@redhat.com> - 2.6.1-7
-- Bump release due to beta release build issues.
+- Fix tests against OpenSSL 3.0: improve p11test
-  Resolves: RHEL-33748
+- Resolves: rhbz#1964838
 
-* Wed Sep 11 2024 Rafael Jeffman <rjeffman@redhat.com> - 2.6.1-13
+* Thu May 27 2021 Alexander Bokovoy <abokovoy@redhat.com> - 2.6.1-6
-- Bump release for exception phase.
+- Fix tests against OpenSSL 3.0
-  Resolves: RHEL-33748
+- Resolves: rhbz#1964838
 
-* Thu Sep 05 2024 Rafael Jeffman <rjeffman@redhat.com> - 2.6.1-12
+* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 2.6.1-5.2
-- Bump release for rebuild.
+- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
-  Related: RHEL-33748
-
-* Mon Sep 02 2024 Rafael Jeffman <rjeffman@redhat.com> - 2.6.1-11
-- Fix initialization of random number generator.
-  Related: RHEL-33748
-
-* Wed Aug 28 2024 Rafael Jeffman <rjeffman@redhat.com> - 2.6.1-10
-- Disable usage of OpenSSL engines when providers are available.
-  Resolves: RHEL-33748
-
-* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 2.6.1-9.1
-- Bump release for June 2024 mass rebuild
-
-* Fri Feb 09 2024 Alexander Bokovoy <abokovoy@redhat.com> - 2.6.1-9
-- Prevent access to global C++ variables once they destroyed
-- Patch from Neil Horman (OpenSSL)
-
-* Thu Feb 08 2024 Alexander Bokovoy <abokovoy@redhat.com> - 2.6.1-8
-- Run p11test tests individually
-- Resolves: rhbz#2261703
-
-* Sat Jan 27 2024 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.1-7.1
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
-
-* Thu Nov 09 2023 Alexander Bokovoy <abokovoy@redhat.com> - 2.6.1-7
-- fix uninitialized variable
-- bump build release to avoid confusion in the changelog
-
-* Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.1-5.7
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
-
-* Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.1-5.6
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
-
-* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.1-5.5
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
-
-* Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.1-5.4
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
-
-* Wed Nov 10 2021 Alexander Bokovoy <abokovoy@redhat.com> - 2.6.1-6
-- Resolves: rhbz#2021906 - softhsm: FTBFS with OpenSSL 3.0.0
-
-* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 2.6.1-5.3
-- Rebuilt with OpenSSL 3.0.0
-
-* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.1-5.2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
 
 * Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.1-5.1
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild