Package pam_pkcs11: Information
Source package: pam_pkcs11
Version: 0.6.13.1-alt1
Build time: Jul 4, 2025, 01:13 PM in the task #386926
Category: System/Base
Report package bugHome page: https://github.com/OpenSC/pam_pkcs11
License: LGPL
Summary: PKCS #11 PAM Module and Login Tools
Description:
This Linux-PAM login module allows a X.509 certificate based user login. The certificate and its dedicated private key are thereby accessed by means of an appropriate PKCS #11 module. For the verification of the user certificates, locally stored CA certificates as well as either online or locally accessible CRLs are used. Adittional included pam_pkcs11 related tools: - pkcs11_eventmgr: Generate actions on card insert/removal/timeout events - pklogin_finder: Get the loginname that maps to a certificate - pkcs11_inspect: Inspect the contents of a certificate
List of RPM packages built from this SRPM:
pam_pkcs11 (x86_64, i586, armh, aarch64)
pam_pkcs11-debuginfo (x86_64, i586, armh, aarch64)
pam_pkcs11-ldap (x86_64, i586, armh, aarch64)
pam_pkcs11-ldap-debuginfo (x86_64, i586, armh, aarch64)
pam_pkcs11-pcsc (x86_64, i586, armh, aarch64)
pam_pkcs11-pcsc-debuginfo (x86_64, i586, armh, aarch64)
pam_pkcs11 (x86_64, i586, armh, aarch64)
pam_pkcs11-debuginfo (x86_64, i586, armh, aarch64)
pam_pkcs11-ldap (x86_64, i586, armh, aarch64)
pam_pkcs11-ldap-debuginfo (x86_64, i586, armh, aarch64)
pam_pkcs11-pcsc (x86_64, i586, armh, aarch64)
pam_pkcs11-pcsc-debuginfo (x86_64, i586, armh, aarch64)
Maintainer: Paul Wolneykien
List of contributors:
Paul Wolneykien
Alexey Shabalin
Oleg Solovyov
Ivan Zakharyaschev
Andrey Cherepanov
Eugeny A. Rostovtsev
Vitaly Kuznetsov
Igor Vlasenko
Sir Raorn
Paul Wolneykien
Alexey Shabalin
Oleg Solovyov
Ivan Zakharyaschev
Andrey Cherepanov
Eugeny A. Rostovtsev
Vitaly Kuznetsov
Igor Vlasenko
Sir Raorn
Last changed
March 26, 2025 Paul Wolneykien 0.6.13.1-alt1
- Added "kde-smartcard" to the list of screen savers. - Fixed some spelling errors. - Added Georgian translation (thx Ekaterine Papava).
Feb. 28, 2025 Paul Wolneykien 0.6.13-alt2
- Fix build on older branches.
Feb. 5, 2025 Paul Wolneykien 0.6.13-alt1
- Version 0.6.13 - Added pkcs11-eventmgr systemd service unit. - Updated Russian translations for pam_pkcs11 (thx Max Kosmach and Andrey Cherepanov). - Fixed possible authentication bypass: Use signatures to verify authentication by default (thx Frank Morgner) (Fixes: CVE-2025-24032). - Fixed possible authentication bypass: Restoring the original card_only / wait_for_card behavior (thx Matthias Gerstner, Frank Morgner) (Fixes: CVE-2025-24531). - Move pam_securetty.so upward in the example PAM config. - Set 'slot_num' configuration parameter to 0 by default (thx Jpereyra316). - Print details about configuration parse errors (thx Jpereyra316). - Add Chinese (Simplified) translation. - Capitalize all PAM messages (thx Alynx Zhou). - Made pkcs11_make_hash_link support whitespaces in file names (thx Ivan Skorikov).