Development September 2024

development@lists.ipfire.org

11 participants
50 discussions

[PATCH] squid: Update to 6.11
by Matthias Fischer 23 Sep '24

23 Sep '24

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/squid | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/squid b/lfs/squid index d7fefe8c8..6b4f5f025 100644 --- a/lfs/squid +++ b/lfs/squid @@ -24,7 +24,7 @@ include Config -VER = 6.10 +VER = 6.11 THISAPP = squid-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -46,7 +46,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 608b49c25549e73bc58ee4ec82a4d582f6f28b6dd324261806931eb2e37f0b5d63f6c2f6373a3db43823e805f5d6df56b2a4b5a8324cd6e623c4302d2c4b9421 +$(DL_FILE)_BLAKE2 = 8143257e33dc23d3e22ae778990a1cc086740284cd356b3069f3c268c5648d08ddec7346028649c855dcd5c71fa4da555e81f9aac77e1bad8e06e9bd52655749 install : $(TARGET) -- 2.43.0

2 1

[PATCH] Updates to u-boot script for Raspberry Pi 4b devices
by Craig Setera 22 Sep '24

22 Sep '24

Updates to u-boot script for Raspberry Pi 4b devices to properly configure the serial console and to choose the proper boot address to be used on newer board revisions. With these changes in place, I'm able to fully boot into a serial console in u-boot. The serial console configuration was derived from the Grub configuration, while the boot address changes were taken from the IPFire Raspberry 4b documentation page: https://www.ipfire.org/docs/hardware/arm/rpi/four Per the conversation in the forums, I don't know why the boot address changes are required. I was simply trying to automate those changes such that downloaded builds will work out of the box. https://community.ipfire.org/t/hang-with-kernel-starting-on-raspberry-pi/11… NOTE: The use of the different parameter options to the test command to minimize the need for deeply nested conditionals. I did try more bash-shell like syntax, but u-boot didn't seem to like that. The operators used here were found in the u-boot source. Tested-by: Craig Setera <craigjunk(a)setera.org> Signed-off-by: Craig Setera <craigjunk(a)setera.org> --- config/u-boot/boot.cmd | 27 ++++++++++++++++++++++++--- 1 file changed, 24 insertions(+), 3 deletions(-) diff --git a/config/u-boot/boot.cmd b/config/u-boot/boot.cmd index a27996780..eedd5776d 100644 --- a/config/u-boot/boot.cmd +++ b/config/u-boot/boot.cmd @@ -51,7 +51,11 @@ if test "${SERIAL-CONSOLE}" = "ON"; then if test "${fdtfile}" = "broadcom/bcm2837-rpi-3-b.dtb"; then setenv console ttyS1,115200n8; else - setenv console ttyAMA0,115200n8; + if test "${fdtfile}" = "broadcom/bcm2711-rpi-4-b.dtb"; then + setenv console ttyS0,115200n8; + else + setenv console ttyAMA0,115200n8; + fi; fi; fi; else @@ -95,11 +99,28 @@ else setenv ramdisk_addr -; fi; +# +# Handle Raspberry Pi 4 address differences +# https://www.ipfire.org/docs/hardware/arm/rpi/four +# +setenv booti_fdt_addr ${fdt_addr_r}; +if test "${board}" -eq "rpi" -a ${cpu} -eq "armv8" -a "${fdtfile}" -eq "broadcom/bcm2711-rpi-4-b.dtb"; then + # Hardware revision 1.4 + if test ${board_revision} -eq 0xB03114 -o ${board_revision} -eq 0xC03114 -o ${board_revision} -eq 0xD03114; then + setenv booti_fdt_addr ${fdt_addr}; + fi + + # Hardware revision 1.5 + if test ${board_revision} -eq 0xB03115 -o ${board_revision} -eq 0xC03115 -o ${board_revision} -eq 0xD03115; then + setenv booti_fdt_addr ${fdt_addr}; + fi +fi; + bootz ${kernel_addr_r} ${ramdisk_addr} ${fdt_addr_r}; -booti ${kernel_addr_r} ${ramdisk_addr} ${fdt_addr_r}; +booti ${kernel_addr_r} ${ramdisk_addr} ${booti_fdt_addr}; bootz ${kernel_addr_r} - ${fdt_addr_r}; -booti ${kernel_addr_r} - ${fdt_addr_r}; +booti ${kernel_addr_r} - ${booti_fdt_addr}; # Recompile with: # mkimage -C none -A arm -T script -d /boot/boot.cmd /boot/boot.scr -- 2.40.1

2 6

[PATCH] linux: Disable cachestat() system call
by Peter Müller 22 Sep '24

22 Sep '24

From the kernel's documentation: > Enable the cachestat system call, which queries the page > cache statistics of a file (number of cached pages, dirty > pages, pages marked for writeback, (recently) evicted pages). There is no legitimate use-case for this feature in IPFire, and grsecurity recommends disabling it to cut attack surface. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/kernel/kernel.config.aarch64-ipfire | 2 +- config/kernel/kernel.config.riscv64-ipfire | 2 +- config/kernel/kernel.config.x86_64-ipfire | 2 +- config/rootfiles/common/aarch64/linux | 1 - config/rootfiles/common/riscv64/linux | 1 - config/rootfiles/common/x86_64/linux | 1 - 6 files changed, 3 insertions(+), 6 deletions(-) diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire index 74085de00..b2753cdbf 100644 --- a/config/kernel/kernel.config.aarch64-ipfire +++ b/config/kernel/kernel.config.aarch64-ipfire @@ -243,7 +243,7 @@ CONFIG_KALLSYMS_BASE_RELATIVE=y CONFIG_ARCH_HAS_MEMBARRIER_SYNC_CORE=y CONFIG_KCMP=y CONFIG_RSEQ=y -CONFIG_CACHESTAT_SYSCALL=y +# CONFIG_CACHESTAT_SYSCALL is not set # CONFIG_DEBUG_RSEQ is not set CONFIG_HAVE_PERF_EVENTS=y CONFIG_GUEST_PERF_EVENTS=y diff --git a/config/kernel/kernel.config.riscv64-ipfire b/config/kernel/kernel.config.riscv64-ipfire index 451607c17..77487de34 100644 --- a/config/kernel/kernel.config.riscv64-ipfire +++ b/config/kernel/kernel.config.riscv64-ipfire @@ -245,7 +245,7 @@ CONFIG_KALLSYMS_ALL=y CONFIG_KALLSYMS_BASE_RELATIVE=y CONFIG_KCMP=y CONFIG_RSEQ=y -CONFIG_CACHESTAT_SYSCALL=y +# CONFIG_CACHESTAT_SYSCALL is not set # CONFIG_DEBUG_RSEQ is not set CONFIG_HAVE_PERF_EVENTS=y # CONFIG_PC104 is not set diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire index 6f0f1bfa5..c17757421 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -264,7 +264,7 @@ CONFIG_KALLSYMS_BASE_RELATIVE=y CONFIG_ARCH_HAS_MEMBARRIER_SYNC_CORE=y CONFIG_KCMP=y CONFIG_RSEQ=y -CONFIG_CACHESTAT_SYSCALL=y +# CONFIG_CACHESTAT_SYSCALL is not set # CONFIG_DEBUG_RSEQ is not set CONFIG_HAVE_PERF_EVENTS=y CONFIG_GUEST_PERF_EVENTS=y diff --git a/config/rootfiles/common/aarch64/linux b/config/rootfiles/common/aarch64/linux index 53dedd2f3..98eee80a7 100644 --- a/config/rootfiles/common/aarch64/linux +++ b/config/rootfiles/common/aarch64/linux @@ -7608,7 +7608,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER/build/include/config/BUILD_SALT #lib/modules/KVER/build/include/config/BUILTIN_RETURN_ADDRESS_STRIPS_PAC #lib/modules/KVER/build/include/config/CACHEFILES -#lib/modules/KVER/build/include/config/CACHESTAT_SYSCALL #lib/modules/KVER/build/include/config/CARL9170 #lib/modules/KVER/build/include/config/CARL9170_HWRNG #lib/modules/KVER/build/include/config/CARL9170_LEDS diff --git a/config/rootfiles/common/riscv64/linux b/config/rootfiles/common/riscv64/linux index dca2c7370..626238714 100644 --- a/config/rootfiles/common/riscv64/linux +++ b/config/rootfiles/common/riscv64/linux @@ -6940,7 +6940,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER/build/include/config/BUILDTIME_TABLE_SORT #lib/modules/KVER/build/include/config/BUILD_SALT #lib/modules/KVER/build/include/config/CACHEFILES -#lib/modules/KVER/build/include/config/CACHESTAT_SYSCALL #lib/modules/KVER/build/include/config/CADENCE_WATCHDOG #lib/modules/KVER/build/include/config/CARDBUS #lib/modules/KVER/build/include/config/CARL9170 diff --git a/config/rootfiles/common/x86_64/linux b/config/rootfiles/common/x86_64/linux index cecaf36fa..6505e9a54 100644 --- a/config/rootfiles/common/x86_64/linux +++ b/config/rootfiles/common/x86_64/linux @@ -7289,7 +7289,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER/build/include/config/BUILDTIME_TABLE_SORT #lib/modules/KVER/build/include/config/BUILD_SALT #lib/modules/KVER/build/include/config/CACHEFILES -#lib/modules/KVER/build/include/config/CACHESTAT_SYSCALL #lib/modules/KVER/build/include/config/CADENCE_WATCHDOG #lib/modules/KVER/build/include/config/CALL_DEPTH_TRACKING #lib/modules/KVER/build/include/config/CALL_PADDING -- 2.39.5

1 0

[PATCH] linux: Enforce userspace page table checks
by Peter Müller 22 Sep '24

22 Sep '24

This feature is already supported by and enabled on all architectures we support, this patch ensures IPFire will always make use of it to rule out memory page tampering by userspace applications. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/kernel/kernel.config.aarch64-ipfire | 2 +- config/kernel/kernel.config.riscv64-ipfire | 2 +- config/kernel/kernel.config.x86_64-ipfire | 2 +- config/rootfiles/common/aarch64/linux | 1 + config/rootfiles/common/riscv64/linux | 1 + config/rootfiles/common/x86_64/linux | 1 + 6 files changed, 6 insertions(+), 3 deletions(-) diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire index 74085de00..b7f64d10c 100644 --- a/config/kernel/kernel.config.aarch64-ipfire +++ b/config/kernel/kernel.config.aarch64-ipfire @@ -8661,7 +8661,7 @@ CONFIG_PAGE_EXTENSION=y # CONFIG_SLUB_DEBUG is not set # CONFIG_PAGE_OWNER is not set CONFIG_PAGE_TABLE_CHECK=y -# CONFIG_PAGE_TABLE_CHECK_ENFORCED is not set +CONFIG_PAGE_TABLE_CHECK_ENFORCED=y # CONFIG_PAGE_POISONING is not set # CONFIG_DEBUG_PAGE_REF is not set # CONFIG_DEBUG_RODATA_TEST is not set diff --git a/config/kernel/kernel.config.riscv64-ipfire b/config/kernel/kernel.config.riscv64-ipfire index 451607c17..e186bb9a8 100644 --- a/config/kernel/kernel.config.riscv64-ipfire +++ b/config/kernel/kernel.config.riscv64-ipfire @@ -7243,7 +7243,7 @@ CONFIG_PAGE_EXTENSION=y # CONFIG_SLUB_DEBUG is not set # CONFIG_PAGE_OWNER is not set CONFIG_PAGE_TABLE_CHECK=y -# CONFIG_PAGE_TABLE_CHECK_ENFORCED is not set +CONFIG_PAGE_TABLE_CHECK_ENFORCED=y CONFIG_PAGE_POISONING=y # CONFIG_DEBUG_PAGE_REF is not set # CONFIG_DEBUG_RODATA_TEST is not set diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire index 6f0f1bfa5..de6f76ce7 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -7800,7 +7800,7 @@ CONFIG_PAGE_EXTENSION=y # CONFIG_SLUB_DEBUG is not set # CONFIG_PAGE_OWNER is not set CONFIG_PAGE_TABLE_CHECK=y -# CONFIG_PAGE_TABLE_CHECK_ENFORCED is not set +CONFIG_PAGE_TABLE_CHECK_ENFORCED=y CONFIG_PAGE_POISONING=y # CONFIG_DEBUG_PAGE_REF is not set # CONFIG_DEBUG_RODATA_TEST is not set diff --git a/config/rootfiles/common/aarch64/linux b/config/rootfiles/common/aarch64/linux index 53dedd2f3..3c9760570 100644 --- a/config/rootfiles/common/aarch64/linux +++ b/config/rootfiles/common/aarch64/linux @@ -10154,6 +10154,7 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER/build/include/config/PAGE_SIZE_LESS_THAN_256KB #lib/modules/KVER/build/include/config/PAGE_SIZE_LESS_THAN_64KB #lib/modules/KVER/build/include/config/PAGE_TABLE_CHECK +#lib/modules/KVER/build/include/config/PAGE_TABLE_CHECK_ENFORCED #lib/modules/KVER/build/include/config/PAHOLE_VERSION #lib/modules/KVER/build/include/config/PANIC_ON_OOPS_VALUE #lib/modules/KVER/build/include/config/PANIC_TIMEOUT diff --git a/config/rootfiles/common/riscv64/linux b/config/rootfiles/common/riscv64/linux index dca2c7370..578e0d9fb 100644 --- a/config/rootfiles/common/riscv64/linux +++ b/config/rootfiles/common/riscv64/linux @@ -9249,6 +9249,7 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER/build/include/config/PAGE_SIZE_LESS_THAN_256KB #lib/modules/KVER/build/include/config/PAGE_SIZE_LESS_THAN_64KB #lib/modules/KVER/build/include/config/PAGE_TABLE_CHECK +#lib/modules/KVER/build/include/config/PAGE_TABLE_CHECK_ENFORCED #lib/modules/KVER/build/include/config/PAHOLE_VERSION #lib/modules/KVER/build/include/config/PANIC_ON_OOPS_VALUE #lib/modules/KVER/build/include/config/PANIC_TIMEOUT diff --git a/config/rootfiles/common/x86_64/linux b/config/rootfiles/common/x86_64/linux index cecaf36fa..2469ad645 100644 --- a/config/rootfiles/common/x86_64/linux +++ b/config/rootfiles/common/x86_64/linux @@ -9922,6 +9922,7 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER/build/include/config/PAGE_SIZE_LESS_THAN_256KB #lib/modules/KVER/build/include/config/PAGE_SIZE_LESS_THAN_64KB #lib/modules/KVER/build/include/config/PAGE_TABLE_CHECK +#lib/modules/KVER/build/include/config/PAGE_TABLE_CHECK_ENFORCED #lib/modules/KVER/build/include/config/PAGE_TABLE_ISOLATION #lib/modules/KVER/build/include/config/PAHOLE_VERSION #lib/modules/KVER/build/include/config/PANASONIC_LAPTOP -- 2.39.5

2 1

[PATCH v2 1/4] OpenSSH :Update to 9.9p1
by Peter Müller 21 Sep '24

21 Sep '24

Please refer to https://www.openssh.com/releasenotes.html#9.9p1 for the release announcement of this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/openssh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/openssh b/lfs/openssh index 036d0bb8e..c14c8267c 100644 --- a/lfs/openssh +++ b/lfs/openssh @@ -24,7 +24,7 @@ include Config -VER = 9.8p1 +VER = 9.9p1 THISAPP = openssh-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 3bf983c4ef5358054ed0104cd51d3e0069fbc2b80d8522d0df644d5508ec1d26a67bf061b1b5698d1cdf0d2cbba16b4cdca12a4ce30da24429094576a075e192 +$(DL_FILE)_BLAKE2 = 817d267e42b8be74a13e0cfd7999bdb4dab6355c7f62c1a4dd89adad310c5fb7fe3f17109ce1a36cd269a3639c1b8f1d18330c615ab3b419253ec027cfa20997 install : $(TARGET) -- 2.39.5

1 3

[PATCH 1/2] OpenSSH :Update to 9.9p1
by Peter Müller 21 Sep '24

21 Sep '24

1 1

[PATCH] apr: Update to 1.7.5
by Peter Müller 21 Sep '24

21 Sep '24

Full changelog of this release: *) SECURITY: CVE-2023-49582: Apache Portable Runtime (APR): Unexpected lax shared memory permissions (cve.mitre.org) Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h) Users are recommended to upgrade to APR version 1.7.5, which fixes this issue. Credits: Thomas Stangner *) Unix: Implement apr_shm_perms_set() for the "POSIX shm_open()" and "classic mmap" shared memory implementations. [Joe Orton, Ruediger Pluem] *) Fix missing ';' for XML/HTML hex entities from apr_escape_entity(). [Yann Ylavic] *) Fix crash in apr_pool_create() with --enable-pool-debug=all|owner. [Yann Ylavic] *) Improve platform detection by updating config.guess and config.sub. [Rainer Jung] *) CMake: Add support for CMAKE_WARNING_AS_ERROR. [Ivan Zhakov] *) CMake: Enable support for MSVC runtime library selection by abstraction. [Ivan Zhakov] *) CMake: Export installed targets (libapr-1, apr-1, libaprapp-1, aprapp-1) to apr:: namespace. [Ivan Zhakov] Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/rootfiles/common/apr | 2 +- lfs/apr | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/apr b/config/rootfiles/common/apr index c49b93a58..3de0b28e5 100644 --- a/config/rootfiles/common/apr +++ b/config/rootfiles/common/apr @@ -45,7 +45,7 @@ usr/bin/apr-1-config #usr/lib/libapr-1.la #usr/lib/libapr-1.so usr/lib/libapr-1.so.0 -usr/lib/libapr-1.so.0.7.4 +usr/lib/libapr-1.so.0.7.5 #usr/lib/pkgconfig/apr-1.pc #usr/share/apr-1 #usr/share/apr-1/build diff --git a/lfs/apr b/lfs/apr index 1375448ff..5df4e9925 100644 --- a/lfs/apr +++ b/lfs/apr @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -25,7 +25,7 @@ include Config -VER = 1.7.4 +VER = 1.7.5 THISAPP = apr-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = a93b9d3f2c46fe0a34ce1d544e7a43ba40720e2fae8b8a7d0957413ac695057902378dbf96f067ced7486da86c8e513b7fbd48fa79839efeeb40a3295fe2d3df +$(DL_FILE)_BLAKE2 = 1feacb24e213843c4d3312806abf698e332c45557b7cfd74c9c654d4f9d835dd3a8bf4f9a3bb8328483dcc244948ca118ed6fab9655e482ac6fb53cc7fd92908 install : $(TARGET) -- 2.39.5

1 0

[PATCH v2] samba: Update to version 4.21.0
by Adolf Belka 21 Sep '24

21 Sep '24

- Update from 4.20.4 to 4.21.0 - Update of rootfile for x86_64, aarch64 & riscv64 - Changelog 4.21.0 Hardening of "valid users", "invalid users", "read list" and "write list" In previous versions of Samba, if a user or group name in either of the mentioned options could not be resolved to a valid SID, the user (or group) would be skipped without any notification. This could result in unexpected and insecure behaviour. Starting with this version of Samba, if any user or group name in any of the options cannot be resolved due to a communication error with a domain controller, Samba will log an error and the tree connect will fail. Non existing users (or groups) are ignored. LDAP TLS/SASL channel binding support The ldap server supports SASL binds with kerberos or NTLMSSP over TLS connections now (either ldaps or starttls). Setups where 'ldap server require strong auth = allow_sasl_over_tls' was required before, can now most likely move to the default of 'ldap server require strong auth = yes'. If SASL binds without correct tls channel bindings are required 'ldap server require strong auth = allow_sasl_without_tls_channel_bindings' should be used now, as 'allow_sasl_over_tls' will generate a warning in every start of 'samba', as well as '[samba-tool ]testparm'. This is similar to LdapEnforceChannelBinding under HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters on Windows. All client tools using ldaps also include the correct channel bindings now. NEW FEATURES/CHANGES LDB no longer a standalone tarball LDB, Samba's LDAP-like local database and the power behind the Samba AD DC, is no longer available to build as a distinct tarball, but is instead provided as an optional public library. If you need ldb as a public library, say to build sssd, then use ./configure --private-libraries='!ldb' This re-integration allows LDB tests to use the Samba's full selftest system, including our knownfail infrastructure, and decreases the work required during security releases as a coordinated release of the ldb tarball is not also required. This approach has been demonstrated already in Debian, which is already building Samba and LDB is this way. As part of this work, the pyldb-util public library, not known to be used by any other software, is made private to Samba. LDB Module API Python bindings removed The LDB Modules API, which we do not promise a stable ABI or API for, was wrapped in python in early LDB development. However that wrapping never took into account later changes, and so has not worked for a number of years. Samba 4.21 and LDB 2.10 removes this unused and broken feature. Changes in LDB handling of Unicode Developers using LDB up to version 2.9 could call ldb_set_utf8_fns() to determine how LDB handled casefolding. This is used internally by string comparison functions. In LDB 2.10 this function is deprecated, and ldb_set_utf8_functions() is preferred. The new function allows a direct comparison function to be set as well as a casefold function. This improves performance and allows for more robust handling of degenerate cases. The function should be called just after ldb_init(), with the following arguments: ldb_set_utf8_functions(ldb, /* the struct ldb_ctx LDB object */ context_variable /* possibly NULL */ casefold_function, case_insensitive_comparison_function); The default behaviour of LDB remains to perform ASCII casefolding only, as if in the "C" locale. Recent versions have become increasingly consistent in this. Some Samba public libraries made private by default The following Samba C libraries are currently made public due to their use by OpenChange or for historical reasons that are no longer clear. dcerpc-samr, samba-policy, tevent-util, dcerpc, samba-hostconfig, samba-credentials, dcerpc_server, samdb The libraries used by the OpenChange client now private, but can be made public (like ldb above) with: ./configure --private-libraries='!dcerpc,!samba-hostconfig,!samba-credentials,!ldb' The C libraries without any known user or used only for the OpenChange server (a dead project) may be made private entirely in a future Samba version. If you use a Samba library in this list, please be in touch with the samba-technical mailing list. Using ldaps from 'winbindd' and 'net ads' Beginning with Samba 3.0.22 the 'ldap ssl = start tls' option also impacted LDAP connections to active directory domain controllers. Using the STARTTLS operation on LDAP port 389 connections. Starting with Samba 3.5.0 'ldap ssl ads = yes' was required in addition in order let to 'ldap ssl = start tls' have any effect on those connections. 'ldap ssl ads' was deprecated with Samba 4.8.0 and removed together with the whole functionality in Samba 4.14.0, because it didn't support tls channel bindings required for the sasl authentication. The functionality is now re-added using the correct channel bindings based on the gnutls based tls implementation we already have, instead of using the tls layer provided by openldap. This makes it available and consistent with all LDAP client libraries we use and implement on our own. The 'client ldap sasl wrapping' option gained the two new possible values: 'starttls' (using STARTTLS on tcp port 389) and 'ldaps' (using TLS directly on tcp port 636). If you had 'ldap ssl = start tls' and 'ldap ssl ads = yes' before, you can now use 'client ldap sasl wrapping = starttls' in order to get STARTTLS on tcp port 389. As we no longer use the openldap tls layer it is required to configure the correct certificate trusts with at least one of the following options: 'tls trust system cas', 'tls ca directories' or 'tls cafile'. While 'tls verify peer' and 'tls crlfile' are also relevant, see 'man smb.conf' for further details. New DNS hostname config option To get `net ads dns register` working correctly running manually or during a domain join a special entry in /etc/hosts was required. This not really documented and thus the DNS registration mostly didn't work. With the new option the default is [netbios name].[realm] which should be correct in the majority of use cases. We will also use the value to create service principal names during a Kerberos authentication and DNS functions. This is not supported in samba-tool yet. Samba AD will rotate expired passwords on smartcard-required accounts Traditionally in AD, accounts set to be "smart card require for logon" will have a password for NTLM fallback and local profile encryption (Windows DPAPI). This password previously would not expire. Matching Windows behaviour, when the DC in a FL 2016 domain and the msDS-ExpirePasswordsOnSmartCardOnlyAccounts attribute on the domain root is set to TRUE, Samba will now expire these passwords and rotate them shortly before they expire. Note that the password expiry time must be set to twice the TGT lifetime for smooth operation, e.g. daily expiry given a default 10 hour TGT lifetime, as the password is only rotated in the second half of its life. Again, this matches the Windows behaviour. Provided the default 2016 schema is used, new Samba domains provisioned with Samba 4.21 will have this enabled once the domain functional level is set to 2016. NOTE: Domains upgraded from older Samba versions will not have this set, even after the functional level preparation, matching the behaviour of upgraded Windows AD domains. Per-user and group "veto files" and "hide files" "veto files" and "hide files" can optionally be restricted to certain users and groups. To apply a veto or hide directive to a filename for a specific user or group, a parametric option like this can be used: hide files : USERNAME = /somefile.txt/ veto files : GROUPNAME = /otherfile.txt/ For details consult the updated smb.conf manpage. Automatic keytab update after machine password change When machine account password is updated, either by winbind doing regular updates or manually (e.g. net ads changetrustpw), now winbind will also support update of keytab entries in case you use newly added option 'sync machine password to keytab'. The new parameter allows you to describe what keytabs and how should be updated. From smb.conf(5) manpage - each keytab can have exactly one of these four forms: account_name sync_spns spn_prefixes=value1[,value2[...]] spns=value1[,value2[...]] The functionaity provided by the removed commands "net ads keytab add/delete/add_update_ads" can be achieved via the 'sync machine password to keytab' as in these examples: "net ads keytab add wurst/brot@REALM" - this command is not adding <principal> to AD, so the best fit can be specifier "spns" - add to smb.conf: sync machine password to keytab = /path/to/keytab1:spns=wurst/brot@REALM:machine_password - run: "net ads keytab create" "net ads keytab delete wurst/brot@REALM" - remove the principal (or the whole keytab line if there was just one) - run: "net ads keytab create" "net ads keytab add_update_ads wurst/brot@REALM" - this command was adding the principal to AD, so for this case use a keytab with specifier sync_spns - add to smb.conf: sync machine password to keytab = /path/to/keytab2:sync_spns:machine_password - run: "net ads setspn add wurst/brot@REALM" # this adds the principal to AD "net ads keytab create" # this sync it from AD to local keytab A new parameter 'sync machine password script' allows to specify external script that will be triggered after the automatic keytab update. If keytabs should be generated in clustered environments it is recommended to update them on all nodes. Check in smb.conf(5) the scripts winbind_ctdb_updatekeytab.sh and 46.update-keytabs.script in section 'sync machine password script' for details. For detailed information check the smb.conf(5) and net(8) manpages. New cephfs VFS module Introduce new vfs-to-cephfs bridge which uses libcephfs low-level APIs (instead of path-based operations in the existing module). It allows users to pass explicit user-credentials per call (including supplementary groups), as well as faster operations using inode and file-handle caching on the Samba side. Configuration is identical to existing module, but using 'ceph_new' instead of 'ceph' for the relevant smb.conf entries. This new module is expected to deprecate and replace the old one in next major release. Group Managed Service Accounts Samba 4.21 adds support for gMSAs (Group Managed Service Accounts), completing support for Functional Level 2012. The purpose of a gMSA is to allow a single host, or a cluster of hosts, to share access to an automatically rotating password, avoiding the weak static service passwords that are often the entrypoint of attackers to AD domains. Each server has a strong and regularly rotated password, which is used to access the gMSA account of (e.g.) the database server. Samba provides management and client tools, allowing services on Unix hosts to access the current and next gMSA passwords, as well as obtain a credentials cache. Samba 4.20 announced the client-side tools for this feature. To avoid duplication and provide consistency, the existing commands for password viewing have been extended, so these commands operate both on a gMSA (with credentials, over LDAP, specify -H) and locally for accounts that have a compatible password (e.g. plaintext via GPG, compatible hash) samba-tool user getpassword samba-tool user get-kerberos-ticket samba-tool domain exportkeytab An example command, which gets the NT hash for use with NTLM, is samba-tool user getpassword -H ldap://server --machine-pass \ TestUser1 --attributes=unicodePwd Kerberos is a better choice (gMSA accounts should not use LDAP simple binds, for reasons of both security and compatibility). Use samba-tool user get-kerberos-ticket -H ldap://server --machine-pass \ TestUser1 --output-krb5-ccache=/srv/service/krb5_ccache gMSAs disclose a current and previous password. To access the previous NT hash, use: samba-tool user getpassword -H ldap://server --machine-pass TestUser1 \ --attrs=unicodePwd;previous=1 To access the previous password as UTF8, use: samba-tool user getpassword -H ldap://server --machine-pass TestUser1 \ --attributes=pwdLastSet,virtualClearTextUTF8;previous=1 However, Windows tools for dealing with gMSAs tend to use Active Directory Web Services (ADWS) from Powershell for setting up the accounts, and this separate protocol is not supported by Samba 4.21. Samba-tool commands for handling gMSA (KDS) root keys Group managed service accounts rotate passwords based on root keys, which can be managed using samba-tool, with commands such as samba-tool domain kds root_key create samba-tool domain kds root_key list Samba will create a new root key for new domains at provision time, but users of gMSA accounts on upgraded domains will need to first create a root key. RFC 8070 PKINIT "Freshness extension" supported in the Heimdal KDC The Heimdal KDC will recognise when a client provides proof that they hold the hardware token used for smart-card authentication 'now' and has not used a saved future-dated reply. Samba 4.21 now matches Windows and will assign an extra SID to the user in this case, allowing sensitive resources to be additionally protected. Only Windows clients are known to support the client side of this feature at this time. New samba-tool Authentication Policy management command structure As foreshadowed in the Samba 4.20 release notes, the "samba-tool domain auth policy" commands have been reworked to be more intuitive based on user feedback and reflection. Support for key features of AD Domain/Forest Functional Level 2012R2 Combined with other changes in recent versions (such as claims support in 4.20), Samba can now claim Functional Level 2012R2 support. Build system In previous versions of Samba, packagers of Samba would set their package-specific version strings using a patch to the SAMBA_VERSION_VENDOR_SUFFIX line in the ./VERSION file. Now that is achieved by using --vendor-suffix (at configure time), allowing this to be more easily scripted. Vendors are encouraged to include their name and full package version to assist with upstream debugging. More deterministic builds Samba builds are now more reproducible, providing better assurance that the Samba binaries you run are the same as what is expected from the source code. If locale settings are not changed, the same objects will be produced from each compilation run. If Samba is built in a different path, the object code will remain the same, but DWARF debugging sections will change (while remaining functionally equivalent). Improved command-line redaction There are several options that can be used with Samba tools for specifying secrets. Although this is best avoided, when these options are used, Samba will redact the secrets in /proc, so that they won't be seen in ps or top. This is now carried out more thoroughly, redacting more options. There is a race inherent in this, and the passwords will be visible for a short time. The secrets are also not removed from .bash_history and similar files. REMOVED FEATURES Following commands are removed: net ads keytab add <principal> net ads keytab delete <principal> net ads keytab add_update_ads Changes smb.conf changes Parameter Name Description Default -------------- ----------- ------- client ldap sasl wrapping new values client use spnego principal removed ldap server require strong auth new values tls trust system cas new tls ca directories new dns hostname client dns name [netbios name].[realm] valid users Hardening invalid users Hardening read list Hardening write list Hardening veto files Added per-user and per-group vetos hide files Added per-user and per-group hides sync machine password to keytab keytabs sync machine password script script CHANGES SINCE 4.21.0rc4 * BUG 15699: Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated. * BUG 15702: Bad variable definition for ParseTuple causing test failure for Smb3UnixTests.test_create_context_reparse. * BUG 15686: Add new vfs_ceph module (based on low level API). CHANGES SINCE 4.21.0rc3 * BUG 15698: samba-tool can not load the default configuration file. * BUG 15700: Crash when readlinkat fails. CHANGES SINCE 4.21.0rc2 * BUG 15689: Can't add/delete special keys to keytab for nfs, cifs, http etc. * BUG 15696: Compound SMB2 requests don't return NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses MacOSX clients. * BUG 15689: Can't add/delete special keys to keytab for nfs, cifs, http etc. CHANGES SINCE 4.21.0rc1 * BUG 15673: --version-* options are still not ergonomic, and they reject tilde characters. * BUG 15686: Add new vfs_ceph module (based on low level API) * BUG 15673: --version-* options are still not ergonomic, and they reject tilde characters. * BUG 15690: ldb_version.h is missing from ldb public library * BUG 15689: Can not add/delete special keys to keytab for nfs, cifs, http etc * BUG 15686: Add new vfs_ceph module (based on low level API) * BUG 15673: --version-* options are still not ergonomic, and they reject tilde characters. * BUG 15687: undefined reference to winbind_lookup_name_ex * BUG 15688: per user veto and hide file syntax is to complex * BUG 15689: Can not add/delete special keys to keytab for nfs, cifs, http etc * BUG 15688: per user veto and hide file syntax is to complex Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/aarch64/samba | 131 ++++++++++++----------- config/rootfiles/packages/riscv64/samba | 127 +++++++++++----------- config/rootfiles/packages/x86_64/samba | 133 ++++++++++++------------ lfs/samba | 6 +- 4 files changed, 206 insertions(+), 191 deletions(-) diff --git a/config/rootfiles/packages/aarch64/samba b/config/rootfiles/packages/aarch64/samba index 82ad93a90..cb7407504 100644 --- a/config/rootfiles/packages/aarch64/samba +++ b/config/rootfiles/packages/aarch64/samba @@ -57,8 +57,6 @@ usr/bin/wspsearch #usr/include/samba-4.0/core/ntstatus_gen.h #usr/include/samba-4.0/core/werror.h #usr/include/samba-4.0/core/werror_gen.h -#usr/include/samba-4.0/credentials.h -#usr/include/samba-4.0/dcerpc.h #usr/include/samba-4.0/dcesrv_core.h #usr/include/samba-4.0/domain_credentials.h #usr/include/samba-4.0/gen_ndr @@ -80,7 +78,6 @@ usr/bin/wspsearch #usr/include/samba-4.0/gen_ndr/ndr_misc.h #usr/include/samba-4.0/gen_ndr/ndr_nbt.h #usr/include/samba-4.0/gen_ndr/ndr_samr.h -#usr/include/samba-4.0/gen_ndr/ndr_samr_c.h #usr/include/samba-4.0/gen_ndr/ndr_svcctl.h #usr/include/samba-4.0/gen_ndr/ndr_svcctl_c.h #usr/include/samba-4.0/gen_ndr/netlogon.h @@ -101,9 +98,7 @@ usr/bin/wspsearch #usr/include/samba-4.0/ndr/ndr_nbt.h #usr/include/samba-4.0/ndr/ndr_svcctl.h #usr/include/samba-4.0/netapi.h -#usr/include/samba-4.0/param.h #usr/include/samba-4.0/passdb.h -#usr/include/samba-4.0/policy.h #usr/include/samba-4.0/rpc_common.h #usr/include/samba-4.0/samba #usr/include/samba-4.0/samba/session.h @@ -129,9 +124,6 @@ usr/bin/wspsearch #usr/include/samba-4.0/util/idtree_random.h #usr/include/samba-4.0/util/signal.h #usr/include/samba-4.0/util/substitute.h -#usr/include/samba-4.0/util/tevent_ntstatus.h -#usr/include/samba-4.0/util/tevent_unix.h -#usr/include/samba-4.0/util/tevent_werror.h #usr/include/samba-4.0/util/tfork.h #usr/include/samba-4.0/util/time.h #usr/include/samba-4.0/util_ldb.h @@ -139,15 +131,9 @@ usr/bin/wspsearch usr/lib/libdcerpc-binding.so usr/lib/libdcerpc-binding.so.0 usr/lib/libdcerpc-binding.so.0.0.1 -usr/lib/libdcerpc-samr.so -usr/lib/libdcerpc-samr.so.0 -usr/lib/libdcerpc-samr.so.0.0.1 usr/lib/libdcerpc-server-core.so usr/lib/libdcerpc-server-core.so.0 usr/lib/libdcerpc-server-core.so.0.0.1 -usr/lib/libdcerpc.so -usr/lib/libdcerpc.so.0 -usr/lib/libdcerpc.so.0.0.1 usr/lib/libndr-krb5pac.so usr/lib/libndr-krb5pac.so.0 usr/lib/libndr-krb5pac.so.0.0.1 @@ -158,34 +144,22 @@ usr/lib/libndr-standard.so usr/lib/libndr-standard.so.0 usr/lib/libndr-standard.so.0.0.1 usr/lib/libndr.so -usr/lib/libndr.so.4 -usr/lib/libndr.so.4.0.0 +usr/lib/libndr.so.5 +usr/lib/libndr.so.5.0.0 usr/lib/libnetapi.so usr/lib/libnetapi.so.1 usr/lib/libnetapi.so.1.0.0 usr/lib/libnss_winbind.so.2 usr/lib/libnss_wins.so.2 -usr/lib/libsamba-credentials.so -usr/lib/libsamba-credentials.so.1 -usr/lib/libsamba-credentials.so.1.0.0 usr/lib/libsamba-errors.so usr/lib/libsamba-errors.so.1 usr/lib/libsamba-errors.so.1.0.0 -usr/lib/libsamba-hostconfig.so -usr/lib/libsamba-hostconfig.so.0 -usr/lib/libsamba-hostconfig.so.0.0.1 usr/lib/libsamba-passdb.so usr/lib/libsamba-passdb.so.0 -usr/lib/libsamba-passdb.so.0.28.0 -usr/lib/libsamba-policy.cpython-310-aarch64-linux-gnu.so -usr/lib/libsamba-policy.cpython-310-aarch64-linux-gnu.so.0 -usr/lib/libsamba-policy.cpython-310-aarch64-linux-gnu.so.0.0.1 +usr/lib/libsamba-passdb.so.0.29.0 usr/lib/libsamba-util.so usr/lib/libsamba-util.so.0 usr/lib/libsamba-util.so.0.0.1 -usr/lib/libsamdb.so -usr/lib/libsamdb.so.0 -usr/lib/libsamdb.so.0.0.1 usr/lib/libsmbclient.so usr/lib/libsmbclient.so.0 usr/lib/libsmbclient.so.0.8.0 @@ -195,24 +169,15 @@ usr/lib/libsmbconf.so.0.0.1 usr/lib/libsmbldap.so usr/lib/libsmbldap.so.2 usr/lib/libsmbldap.so.2.1.0 -usr/lib/libtevent-util.so -usr/lib/libtevent-util.so.0 -usr/lib/libtevent-util.so.0.0.1 usr/lib/libwbclient.so usr/lib/libwbclient.so.0 usr/lib/libwbclient.so.0.16 -#usr/lib/pkgconfig/dcerpc.pc -#usr/lib/pkgconfig/dcerpc_samr.pc #usr/lib/pkgconfig/ndr.pc #usr/lib/pkgconfig/ndr_krb5pac.pc #usr/lib/pkgconfig/ndr_nbt.pc #usr/lib/pkgconfig/ndr_standard.pc #usr/lib/pkgconfig/netapi.pc -#usr/lib/pkgconfig/samba-credentials.pc -#usr/lib/pkgconfig/samba-hostconfig.pc -#usr/lib/pkgconfig/samba-policy.cpython-310-aarch64-linux-gnu.pc #usr/lib/pkgconfig/samba-util.pc -#usr/lib/pkgconfig/samdb.pc #usr/lib/pkgconfig/smbclient.pc #usr/lib/pkgconfig/wbclient.pc usr/lib/python3.10/site-packages/_ldb_text.py @@ -283,6 +248,31 @@ usr/lib/python3.10/site-packages/samba/dcerpc/xattr.cpython-310-aarch64-linux-gn usr/lib/python3.10/site-packages/samba/descriptor.py usr/lib/python3.10/site-packages/samba/dnsresolver.py usr/lib/python3.10/site-packages/samba/dnsserver.py +#usr/lib/python3.10/site-packages/samba/domain +usr/lib/python3.10/site-packages/samba/domain/__init__.py +#usr/lib/python3.10/site-packages/samba/domain/models +usr/lib/python3.10/site-packages/samba/domain/models/__init__.py +usr/lib/python3.10/site-packages/samba/domain/models/auth_policy.py +usr/lib/python3.10/site-packages/samba/domain/models/auth_silo.py +usr/lib/python3.10/site-packages/samba/domain/models/claim_type.py +usr/lib/python3.10/site-packages/samba/domain/models/computer.py +usr/lib/python3.10/site-packages/samba/domain/models/constants.py +usr/lib/python3.10/site-packages/samba/domain/models/container.py +usr/lib/python3.10/site-packages/samba/domain/models/exceptions.py +usr/lib/python3.10/site-packages/samba/domain/models/fields.py +usr/lib/python3.10/site-packages/samba/domain/models/gmsa.py +usr/lib/python3.10/site-packages/samba/domain/models/group.py +usr/lib/python3.10/site-packages/samba/domain/models/model.py +usr/lib/python3.10/site-packages/samba/domain/models/org.py +usr/lib/python3.10/site-packages/samba/domain/models/person.py +usr/lib/python3.10/site-packages/samba/domain/models/query.py +usr/lib/python3.10/site-packages/samba/domain/models/registry.py +usr/lib/python3.10/site-packages/samba/domain/models/schema.py +usr/lib/python3.10/site-packages/samba/domain/models/site.py +usr/lib/python3.10/site-packages/samba/domain/models/subnet.py +usr/lib/python3.10/site-packages/samba/domain/models/types.py +usr/lib/python3.10/site-packages/samba/domain/models/user.py +usr/lib/python3.10/site-packages/samba/domain/models/value_type.py usr/lib/python3.10/site-packages/samba/domain_update.py usr/lib/python3.10/site-packages/samba/drs_utils.py usr/lib/python3.10/site-packages/samba/dsdb.cpython-310-aarch64-linux-gnu.so @@ -344,6 +334,7 @@ usr/lib/python3.10/site-packages/samba/kcc/graph_utils.py usr/lib/python3.10/site-packages/samba/kcc/kcc_utils.py usr/lib/python3.10/site-packages/samba/kcc/ldif_import_export.py usr/lib/python3.10/site-packages/samba/logger.py +usr/lib/python3.10/site-packages/samba/lsa_utils.py usr/lib/python3.10/site-packages/samba/mdb_util.py usr/lib/python3.10/site-packages/samba/messaging.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/ms_display_specifiers.py @@ -366,9 +357,18 @@ usr/lib/python3.10/site-packages/samba/netcmd/domain usr/lib/python3.10/site-packages/samba/netcmd/domain/__init__.py usr/lib/python3.10/site-packages/samba/netcmd/domain/auth usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/__init__.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo_member.py +#usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/computer_allowed_to_authenticate_to.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/policy.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/service_allowed_to_authenticate_from.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/service_allowed_to_authenticate_to.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/user_allowed_to_authenticate_from.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/user_allowed_to_authenticate_to.py +#usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo/member.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo/silo.py usr/lib/python3.10/site-packages/samba/netcmd/domain/backup.py usr/lib/python3.10/site-packages/samba/netcmd/domain/claim usr/lib/python3.10/site-packages/samba/netcmd/domain/claim/__init__.py @@ -381,24 +381,12 @@ usr/lib/python3.10/site-packages/samba/netcmd/domain/demote.py usr/lib/python3.10/site-packages/samba/netcmd/domain/functional_prep.py usr/lib/python3.10/site-packages/samba/netcmd/domain/info.py usr/lib/python3.10/site-packages/samba/netcmd/domain/join.py +#usr/lib/python3.10/site-packages/samba/netcmd/domain/kds +usr/lib/python3.10/site-packages/samba/netcmd/domain/kds/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/kds/root_key.py usr/lib/python3.10/site-packages/samba/netcmd/domain/keytab.py usr/lib/python3.10/site-packages/samba/netcmd/domain/leave.py usr/lib/python3.10/site-packages/samba/netcmd/domain/level.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/__init__.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/auth_policy.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/auth_silo.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/claim_type.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/exceptions.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/fields.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/group.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/model.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/query.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/schema.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/site.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/subnet.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/user.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/value_type.py usr/lib/python3.10/site-packages/samba/netcmd/domain/passwordsettings.py usr/lib/python3.10/site-packages/samba/netcmd/domain/provision.py usr/lib/python3.10/site-packages/samba/netcmd/domain/samba3upgrade.py @@ -422,6 +410,10 @@ usr/lib/python3.10/site-packages/samba/netcmd/processes.py usr/lib/python3.10/site-packages/samba/netcmd/pso.py usr/lib/python3.10/site-packages/samba/netcmd/rodc.py usr/lib/python3.10/site-packages/samba/netcmd/schema.py +#usr/lib/python3.10/site-packages/samba/netcmd/service_account +usr/lib/python3.10/site-packages/samba/netcmd/service_account/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/service_account/group_msa_membership.py +usr/lib/python3.10/site-packages/samba/netcmd/service_account/service_account.py usr/lib/python3.10/site-packages/samba/netcmd/shell.py usr/lib/python3.10/site-packages/samba/netcmd/sites.py usr/lib/python3.10/site-packages/samba/netcmd/spn.py @@ -513,10 +505,11 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/__init__.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/bug13653.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/check_output.py -usr/lib/python3.10/site-packages/samba/tests/blackbox/claims.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/claims.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/downgradedatabase.py -usr/lib/python3.10/site-packages/samba/tests/blackbox/http_chunk.py -usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/gmsa.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/http_chunk.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/mdsearch.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/misc_dfs_widelink.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/ndrdump.py @@ -548,10 +541,10 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/array.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/bare.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/binding.py -#usr/lib/python3.10/site-packages/samba/tests/dcerpc/createtrustrelax.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/dnsserver.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/integer.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/lsa.py +#usr/lib/python3.10/site-packages/samba/tests/dcerpc/lsa_utils.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/mdssvc.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/misc.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/raw_protocol.py @@ -583,6 +576,8 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_api.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_dns.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_lock.py +#usr/lib/python3.10/site-packages/samba/tests/dsdb_quiet_env_tests.py +#usr/lib/python3.10/site-packages/samba/tests/dsdb_quiet_provision_tests.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_schema_attributes.py #usr/lib/python3.10/site-packages/samba/tests/emulate #usr/lib/python3.10/site-packages/samba/tests/emulate/__init__.py @@ -620,6 +615,7 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/krb5/etype_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/fast_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/gkdi_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/gmsa_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/group_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kcrypto.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_base_test.py @@ -716,6 +712,7 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_policy.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_silo.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_claim.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_kds_root_key.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_models.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/drs_clone_dc_data_lmdb_size.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/dsacl.py @@ -738,6 +735,7 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/provision_userPassword_crypt.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/rodc.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/schema.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/service_account.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/silo_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/sites.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/timecmd.py @@ -782,7 +780,6 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/upgradeprovisionneeddc.py #usr/lib/python3.10/site-packages/samba/tests/usage.py #usr/lib/python3.10/site-packages/samba/tests/xattr.py -usr/lib/python3.10/site-packages/samba/trust_utils.py usr/lib/python3.10/site-packages/samba/upgrade.py usr/lib/python3.10/site-packages/samba/upgradehelpers.py usr/lib/python3.10/site-packages/samba/uptodateness.py @@ -808,6 +805,7 @@ usr/lib/samba/krb5/winbind_krb5_locator.so #usr/lib/samba/ldb usr/lib/samba/ldb/asq.so usr/lib/samba/ldb/ildap.so +usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so usr/lib/samba/ldb/paged_searches.so @@ -847,8 +845,10 @@ usr/lib/samba/libcom-err-private-samba.so usr/lib/samba/libcommon-auth-private-samba.so usr/lib/samba/libdbwrap-private-samba.so usr/lib/samba/libdcerpc-pkt-auth-private-samba.so +usr/lib/samba/libdcerpc-private-samba.so usr/lib/samba/libdcerpc-samba-private-samba.so usr/lib/samba/libdcerpc-samba4-private-samba.so +usr/lib/samba/libdcerpc-samr-private-samba.so usr/lib/samba/libdnsserver-common-private-samba.so usr/lib/samba/libdsdb-module-private-samba.so usr/lib/samba/libevents-private-samba.so @@ -901,14 +901,19 @@ usr/lib/samba/libregistry-private-samba.so usr/lib/samba/libreplace-private-samba.so usr/lib/samba/libroken-private-samba.so usr/lib/samba/libsamba-cluster-support-private-samba.so +usr/lib/samba/libsamba-credentials-private-samba.so usr/lib/samba/libsamba-debug-private-samba.so +usr/lib/samba/libsamba-hostconfig-private-samba.so usr/lib/samba/libsamba-modules-private-samba.so -usr/lib/samba/libsamba-net.cpython-310-aarch64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-net-join.cpython-310-aarch64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-net-private-samba.so +usr/lib/samba/libsamba-policy-private-samba.so usr/lib/samba/libsamba-python.cpython-310-aarch64-linux-gnu-private-samba.so usr/lib/samba/libsamba-security-private-samba.so usr/lib/samba/libsamba-sockets-private-samba.so usr/lib/samba/libsamba3-util-private-samba.so usr/lib/samba/libsamdb-common-private-samba.so +usr/lib/samba/libsamdb-private-samba.so usr/lib/samba/libsecrets3-private-samba.so usr/lib/samba/libserver-id-db-private-samba.so usr/lib/samba/libserver-role-private-samba.so @@ -928,9 +933,9 @@ usr/lib/samba/libtalloc-report-private-samba.so usr/lib/samba/libtdb-private-samba.so usr/lib/samba/libtdb-wrap-private-samba.so usr/lib/samba/libtevent-private-samba.so +usr/lib/samba/libtevent-util-private-samba.so usr/lib/samba/libtime-basic-private-samba.so usr/lib/samba/libtorture-private-samba.so -usr/lib/samba/libtrusts-util-private-samba.so usr/lib/samba/libutil-reg-private-samba.so usr/lib/samba/libutil-setid-private-samba.so usr/lib/samba/libutil-tdb-private-samba.so diff --git a/config/rootfiles/packages/riscv64/samba b/config/rootfiles/packages/riscv64/samba index 93e39e0e7..b530ea2b2 100644 --- a/config/rootfiles/packages/riscv64/samba +++ b/config/rootfiles/packages/riscv64/samba @@ -57,8 +57,6 @@ usr/bin/wspsearch #usr/include/samba-4.0/core/ntstatus_gen.h #usr/include/samba-4.0/core/werror.h #usr/include/samba-4.0/core/werror_gen.h -#usr/include/samba-4.0/credentials.h -#usr/include/samba-4.0/dcerpc.h #usr/include/samba-4.0/dcesrv_core.h #usr/include/samba-4.0/domain_credentials.h #usr/include/samba-4.0/gen_ndr @@ -80,7 +78,6 @@ usr/bin/wspsearch #usr/include/samba-4.0/gen_ndr/ndr_misc.h #usr/include/samba-4.0/gen_ndr/ndr_nbt.h #usr/include/samba-4.0/gen_ndr/ndr_samr.h -#usr/include/samba-4.0/gen_ndr/ndr_samr_c.h #usr/include/samba-4.0/gen_ndr/ndr_svcctl.h #usr/include/samba-4.0/gen_ndr/ndr_svcctl_c.h #usr/include/samba-4.0/gen_ndr/netlogon.h @@ -101,9 +98,7 @@ usr/bin/wspsearch #usr/include/samba-4.0/ndr/ndr_nbt.h #usr/include/samba-4.0/ndr/ndr_svcctl.h #usr/include/samba-4.0/netapi.h -#usr/include/samba-4.0/param.h #usr/include/samba-4.0/passdb.h -#usr/include/samba-4.0/policy.h #usr/include/samba-4.0/rpc_common.h #usr/include/samba-4.0/samba #usr/include/samba-4.0/samba/session.h @@ -129,9 +124,6 @@ usr/bin/wspsearch #usr/include/samba-4.0/util/idtree_random.h #usr/include/samba-4.0/util/signal.h #usr/include/samba-4.0/util/substitute.h -#usr/include/samba-4.0/util/tevent_ntstatus.h -#usr/include/samba-4.0/util/tevent_unix.h -#usr/include/samba-4.0/util/tevent_werror.h #usr/include/samba-4.0/util/tfork.h #usr/include/samba-4.0/util/time.h #usr/include/samba-4.0/util_ldb.h @@ -139,15 +131,9 @@ usr/bin/wspsearch usr/lib/libdcerpc-binding.so usr/lib/libdcerpc-binding.so.0 usr/lib/libdcerpc-binding.so.0.0.1 -usr/lib/libdcerpc-samr.so -usr/lib/libdcerpc-samr.so.0 -usr/lib/libdcerpc-samr.so.0.0.1 usr/lib/libdcerpc-server-core.so usr/lib/libdcerpc-server-core.so.0 usr/lib/libdcerpc-server-core.so.0.0.1 -usr/lib/libdcerpc.so -usr/lib/libdcerpc.so.0 -usr/lib/libdcerpc.so.0.0.1 usr/lib/libndr-krb5pac.so usr/lib/libndr-krb5pac.so.0 usr/lib/libndr-krb5pac.so.0.0.1 @@ -158,34 +144,22 @@ usr/lib/libndr-standard.so usr/lib/libndr-standard.so.0 usr/lib/libndr-standard.so.0.0.1 usr/lib/libndr.so -usr/lib/libndr.so.4 -usr/lib/libndr.so.4.0.0 +usr/lib/libndr.so.5 +usr/lib/libndr.so.5.0.0 usr/lib/libnetapi.so usr/lib/libnetapi.so.1 usr/lib/libnetapi.so.1.0.0 usr/lib/libnss_winbind.so.2 usr/lib/libnss_wins.so.2 -usr/lib/libsamba-credentials.so -usr/lib/libsamba-credentials.so.1 -usr/lib/libsamba-credentials.so.1.0.0 usr/lib/libsamba-errors.so usr/lib/libsamba-errors.so.1 usr/lib/libsamba-errors.so.1.0.0 -usr/lib/libsamba-hostconfig.so -usr/lib/libsamba-hostconfig.so.0 -usr/lib/libsamba-hostconfig.so.0.0.1 usr/lib/libsamba-passdb.so usr/lib/libsamba-passdb.so.0 -usr/lib/libsamba-passdb.so.0.28.0 -usr/lib/libsamba-policy.cpython-310-riscv64-linux-gnu.so -usr/lib/libsamba-policy.cpython-310-riscv64-linux-gnu.so.0 -usr/lib/libsamba-policy.cpython-310-riscv64-linux-gnu.so.0.0.1 +usr/lib/libsamba-passdb.so.0.29.0 usr/lib/libsamba-util.so usr/lib/libsamba-util.so.0 usr/lib/libsamba-util.so.0.0.1 -usr/lib/libsamdb.so -usr/lib/libsamdb.so.0 -usr/lib/libsamdb.so.0.0.1 usr/lib/libsmbclient.so usr/lib/libsmbclient.so.0 usr/lib/libsmbclient.so.0.8.0 @@ -195,24 +169,15 @@ usr/lib/libsmbconf.so.0.0.1 usr/lib/libsmbldap.so usr/lib/libsmbldap.so.2 usr/lib/libsmbldap.so.2.1.0 -usr/lib/libtevent-util.so -usr/lib/libtevent-util.so.0 -usr/lib/libtevent-util.so.0.0.1 usr/lib/libwbclient.so usr/lib/libwbclient.so.0 usr/lib/libwbclient.so.0.16 -#usr/lib/pkgconfig/dcerpc.pc -#usr/lib/pkgconfig/dcerpc_samr.pc #usr/lib/pkgconfig/ndr.pc #usr/lib/pkgconfig/ndr_krb5pac.pc #usr/lib/pkgconfig/ndr_nbt.pc #usr/lib/pkgconfig/ndr_standard.pc #usr/lib/pkgconfig/netapi.pc -#usr/lib/pkgconfig/samba-credentials.pc -#usr/lib/pkgconfig/samba-hostconfig.pc -#usr/lib/pkgconfig/samba-policy.cpython-310-riscv64-linux-gnu.pc #usr/lib/pkgconfig/samba-util.pc -#usr/lib/pkgconfig/samdb.pc #usr/lib/pkgconfig/smbclient.pc #usr/lib/pkgconfig/wbclient.pc usr/lib/python3.10/site-packages/_ldb_text.py @@ -283,6 +248,31 @@ usr/lib/python3.10/site-packages/samba/dcerpc/xattr.cpython-310-riscv64-linux-gn usr/lib/python3.10/site-packages/samba/descriptor.py usr/lib/python3.10/site-packages/samba/dnsresolver.py usr/lib/python3.10/site-packages/samba/dnsserver.py +#usr/lib/python3.10/site-packages/samba/domain +usr/lib/python3.10/site-packages/samba/domain/__init__.py +#usr/lib/python3.10/site-packages/samba/domain/models +usr/lib/python3.10/site-packages/samba/domain/models/__init__.py +usr/lib/python3.10/site-packages/samba/domain/models/auth_policy.py +usr/lib/python3.10/site-packages/samba/domain/models/auth_silo.py +usr/lib/python3.10/site-packages/samba/domain/models/claim_type.py +usr/lib/python3.10/site-packages/samba/domain/models/computer.py +usr/lib/python3.10/site-packages/samba/domain/models/constants.py +usr/lib/python3.10/site-packages/samba/domain/models/container.py +usr/lib/python3.10/site-packages/samba/domain/models/exceptions.py +usr/lib/python3.10/site-packages/samba/domain/models/fields.py +usr/lib/python3.10/site-packages/samba/domain/models/gmsa.py +usr/lib/python3.10/site-packages/samba/domain/models/group.py +usr/lib/python3.10/site-packages/samba/domain/models/model.py +usr/lib/python3.10/site-packages/samba/domain/models/org.py +usr/lib/python3.10/site-packages/samba/domain/models/person.py +usr/lib/python3.10/site-packages/samba/domain/models/query.py +usr/lib/python3.10/site-packages/samba/domain/models/registry.py +usr/lib/python3.10/site-packages/samba/domain/models/schema.py +usr/lib/python3.10/site-packages/samba/domain/models/site.py +usr/lib/python3.10/site-packages/samba/domain/models/subnet.py +usr/lib/python3.10/site-packages/samba/domain/models/types.py +usr/lib/python3.10/site-packages/samba/domain/models/user.py +usr/lib/python3.10/site-packages/samba/domain/models/value_type.py usr/lib/python3.10/site-packages/samba/domain_update.py usr/lib/python3.10/site-packages/samba/drs_utils.py usr/lib/python3.10/site-packages/samba/dsdb.cpython-310-riscv64-linux-gnu.so @@ -344,6 +334,7 @@ usr/lib/python3.10/site-packages/samba/kcc/graph_utils.py usr/lib/python3.10/site-packages/samba/kcc/kcc_utils.py usr/lib/python3.10/site-packages/samba/kcc/ldif_import_export.py usr/lib/python3.10/site-packages/samba/logger.py +usr/lib/python3.10/site-packages/samba/lsa_utils.py usr/lib/python3.10/site-packages/samba/mdb_util.py usr/lib/python3.10/site-packages/samba/messaging.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/ms_display_specifiers.py @@ -366,9 +357,18 @@ usr/lib/python3.10/site-packages/samba/netcmd/dns.py usr/lib/python3.10/site-packages/samba/netcmd/domain/__init__.py #usr/lib/python3.10/site-packages/samba/netcmd/domain/auth usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/__init__.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo_member.py +#usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/computer_allowed_to_authenticate_to.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/policy.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/service_allowed_to_authenticate_from.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/service_allowed_to_authenticate_to.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/user_allowed_to_authenticate_from.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/user_allowed_to_authenticate_to.py +#usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo/member.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo/silo.py usr/lib/python3.10/site-packages/samba/netcmd/domain/backup.py #usr/lib/python3.10/site-packages/samba/netcmd/domain/claim usr/lib/python3.10/site-packages/samba/netcmd/domain/claim/__init__.py @@ -381,24 +381,12 @@ usr/lib/python3.10/site-packages/samba/netcmd/domain/demote.py usr/lib/python3.10/site-packages/samba/netcmd/domain/functional_prep.py usr/lib/python3.10/site-packages/samba/netcmd/domain/info.py usr/lib/python3.10/site-packages/samba/netcmd/domain/join.py +#usr/lib/python3.10/site-packages/samba/netcmd/domain/kds +usr/lib/python3.10/site-packages/samba/netcmd/domain/kds/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/kds/root_key.py usr/lib/python3.10/site-packages/samba/netcmd/domain/keytab.py usr/lib/python3.10/site-packages/samba/netcmd/domain/leave.py usr/lib/python3.10/site-packages/samba/netcmd/domain/level.py -#usr/lib/python3.10/site-packages/samba/netcmd/domain/models -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/__init__.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/auth_policy.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/auth_silo.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/claim_type.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/exceptions.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/fields.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/group.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/model.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/query.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/schema.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/site.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/subnet.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/user.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/value_type.py usr/lib/python3.10/site-packages/samba/netcmd/domain/passwordsettings.py usr/lib/python3.10/site-packages/samba/netcmd/domain/provision.py usr/lib/python3.10/site-packages/samba/netcmd/domain/samba3upgrade.py @@ -422,6 +410,10 @@ usr/lib/python3.10/site-packages/samba/netcmd/processes.py usr/lib/python3.10/site-packages/samba/netcmd/pso.py usr/lib/python3.10/site-packages/samba/netcmd/rodc.py usr/lib/python3.10/site-packages/samba/netcmd/schema.py +#usr/lib/python3.10/site-packages/samba/netcmd/service_account +usr/lib/python3.10/site-packages/samba/netcmd/service_account/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/service_account/group_msa_membership.py +usr/lib/python3.10/site-packages/samba/netcmd/service_account/service_account.py usr/lib/python3.10/site-packages/samba/netcmd/shell.py usr/lib/python3.10/site-packages/samba/netcmd/sites.py usr/lib/python3.10/site-packages/samba/netcmd/spn.py @@ -515,6 +507,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/check_output.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/claims.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/downgradedatabase.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/gmsa.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/http_chunk.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/mdsearch.py @@ -548,10 +541,10 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/array.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/bare.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/binding.py -#usr/lib/python3.10/site-packages/samba/tests/dcerpc/createtrustrelax.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/dnsserver.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/integer.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/lsa.py +#usr/lib/python3.10/site-packages/samba/tests/dcerpc/lsa_utils.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/mdssvc.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/misc.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/raw_protocol.py @@ -583,6 +576,8 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_api.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_dns.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_lock.py +#usr/lib/python3.10/site-packages/samba/tests/dsdb_quiet_env_tests.py +#usr/lib/python3.10/site-packages/samba/tests/dsdb_quiet_provision_tests.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_schema_attributes.py #usr/lib/python3.10/site-packages/samba/tests/emulate #usr/lib/python3.10/site-packages/samba/tests/emulate/__init__.py @@ -620,6 +615,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/krb5/etype_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/fast_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/gkdi_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/gmsa_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/group_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kcrypto.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_base_test.py @@ -716,6 +712,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_policy.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_silo.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_claim.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_kds_root_key.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_models.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/drs_clone_dc_data_lmdb_size.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/dsacl.py @@ -738,6 +735,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/provision_userPassword_crypt.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/rodc.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/schema.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/service_account.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/silo_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/sites.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/timecmd.py @@ -782,7 +780,6 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/upgradeprovisionneeddc.py #usr/lib/python3.10/site-packages/samba/tests/usage.py #usr/lib/python3.10/site-packages/samba/tests/xattr.py -#usr/lib/python3.10/site-packages/samba/trust_utils.py usr/lib/python3.10/site-packages/samba/upgrade.py usr/lib/python3.10/site-packages/samba/upgradehelpers.py usr/lib/python3.10/site-packages/samba/uptodateness.py @@ -808,6 +805,7 @@ usr/lib/samba/krb5/winbind_krb5_locator.so #usr/lib/samba/ldb usr/lib/samba/ldb/asq.so usr/lib/samba/ldb/ildap.so +usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so usr/lib/samba/ldb/paged_searches.so @@ -847,8 +845,10 @@ usr/lib/samba/libcom-err-private-samba.so usr/lib/samba/libcommon-auth-private-samba.so usr/lib/samba/libdbwrap-private-samba.so usr/lib/samba/libdcerpc-pkt-auth-private-samba.so +usr/lib/samba/libdcerpc-private-samba.so usr/lib/samba/libdcerpc-samba-private-samba.so usr/lib/samba/libdcerpc-samba4-private-samba.so +usr/lib/samba/libdcerpc-samr-private-samba.so usr/lib/samba/libdnsserver-common-private-samba.so usr/lib/samba/libdsdb-module-private-samba.so usr/lib/samba/libevents-private-samba.so @@ -901,14 +901,19 @@ usr/lib/samba/libregistry-private-samba.so usr/lib/samba/libreplace-private-samba.so usr/lib/samba/libroken-private-samba.so usr/lib/samba/libsamba-cluster-support-private-samba.so +usr/lib/samba/libsamba-credentials-private-samba.so usr/lib/samba/libsamba-debug-private-samba.so +usr/lib/samba/libsamba-hostconfig-private-samba.so usr/lib/samba/libsamba-modules-private-samba.so -usr/lib/samba/libsamba-net.cpython-310-riscv64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-net-join.cpython-310-riscv64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-net-private-samba.so +usr/lib/samba/libsamba-policy-private-samba.so usr/lib/samba/libsamba-python.cpython-310-riscv64-linux-gnu-private-samba.so usr/lib/samba/libsamba-security-private-samba.so usr/lib/samba/libsamba-sockets-private-samba.so usr/lib/samba/libsamba3-util-private-samba.so usr/lib/samba/libsamdb-common-private-samba.so +usr/lib/samba/libsamdb-private-samba.so usr/lib/samba/libsecrets3-private-samba.so usr/lib/samba/libserver-id-db-private-samba.so usr/lib/samba/libserver-role-private-samba.so @@ -928,9 +933,9 @@ usr/lib/samba/libtalloc-report-private-samba.so usr/lib/samba/libtdb-private-samba.so usr/lib/samba/libtdb-wrap-private-samba.so usr/lib/samba/libtevent-private-samba.so +usr/lib/samba/libtevent-util-private-samba.so usr/lib/samba/libtime-basic-private-samba.so usr/lib/samba/libtorture-private-samba.so -usr/lib/samba/libtrusts-util-private-samba.so usr/lib/samba/libutil-reg-private-samba.so usr/lib/samba/libutil-setid-private-samba.so usr/lib/samba/libutil-tdb-private-samba.so @@ -1019,4 +1024,4 @@ var/log/samba var/spool/samba srv/web/ipfire/cgi-bin/samba.cgi var/ipfire/menu.d/EX-samba.menu -usr/local/bin/sambactrl +usr/local/bin/sambactrl \ No newline at end of file diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba index 92862313d..e720457a3 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -57,8 +57,6 @@ usr/bin/wspsearch #usr/include/samba-4.0/core/ntstatus_gen.h #usr/include/samba-4.0/core/werror.h #usr/include/samba-4.0/core/werror_gen.h -#usr/include/samba-4.0/credentials.h -#usr/include/samba-4.0/dcerpc.h #usr/include/samba-4.0/dcesrv_core.h #usr/include/samba-4.0/domain_credentials.h #usr/include/samba-4.0/gen_ndr @@ -80,7 +78,6 @@ usr/bin/wspsearch #usr/include/samba-4.0/gen_ndr/ndr_misc.h #usr/include/samba-4.0/gen_ndr/ndr_nbt.h #usr/include/samba-4.0/gen_ndr/ndr_samr.h -#usr/include/samba-4.0/gen_ndr/ndr_samr_c.h #usr/include/samba-4.0/gen_ndr/ndr_svcctl.h #usr/include/samba-4.0/gen_ndr/ndr_svcctl_c.h #usr/include/samba-4.0/gen_ndr/netlogon.h @@ -101,9 +98,7 @@ usr/bin/wspsearch #usr/include/samba-4.0/ndr/ndr_nbt.h #usr/include/samba-4.0/ndr/ndr_svcctl.h #usr/include/samba-4.0/netapi.h -#usr/include/samba-4.0/param.h #usr/include/samba-4.0/passdb.h -#usr/include/samba-4.0/policy.h #usr/include/samba-4.0/rpc_common.h #usr/include/samba-4.0/samba #usr/include/samba-4.0/samba/session.h @@ -129,9 +124,6 @@ usr/bin/wspsearch #usr/include/samba-4.0/util/idtree_random.h #usr/include/samba-4.0/util/signal.h #usr/include/samba-4.0/util/substitute.h -#usr/include/samba-4.0/util/tevent_ntstatus.h -#usr/include/samba-4.0/util/tevent_unix.h -#usr/include/samba-4.0/util/tevent_werror.h #usr/include/samba-4.0/util/tfork.h #usr/include/samba-4.0/util/time.h #usr/include/samba-4.0/util_ldb.h @@ -139,15 +131,9 @@ usr/bin/wspsearch usr/lib/libdcerpc-binding.so usr/lib/libdcerpc-binding.so.0 usr/lib/libdcerpc-binding.so.0.0.1 -usr/lib/libdcerpc-samr.so -usr/lib/libdcerpc-samr.so.0 -usr/lib/libdcerpc-samr.so.0.0.1 usr/lib/libdcerpc-server-core.so usr/lib/libdcerpc-server-core.so.0 usr/lib/libdcerpc-server-core.so.0.0.1 -usr/lib/libdcerpc.so -usr/lib/libdcerpc.so.0 -usr/lib/libdcerpc.so.0.0.1 usr/lib/libndr-krb5pac.so usr/lib/libndr-krb5pac.so.0 usr/lib/libndr-krb5pac.so.0.0.1 @@ -158,34 +144,22 @@ usr/lib/libndr-standard.so usr/lib/libndr-standard.so.0 usr/lib/libndr-standard.so.0.0.1 usr/lib/libndr.so -usr/lib/libndr.so.4 -usr/lib/libndr.so.4.0.0 +usr/lib/libndr.so.5 +usr/lib/libndr.so.5.0.0 usr/lib/libnetapi.so usr/lib/libnetapi.so.1 usr/lib/libnetapi.so.1.0.0 usr/lib/libnss_winbind.so.2 usr/lib/libnss_wins.so.2 -usr/lib/libsamba-credentials.so -usr/lib/libsamba-credentials.so.1 -usr/lib/libsamba-credentials.so.1.0.0 usr/lib/libsamba-errors.so usr/lib/libsamba-errors.so.1 usr/lib/libsamba-errors.so.1.0.0 -usr/lib/libsamba-hostconfig.so -usr/lib/libsamba-hostconfig.so.0 -usr/lib/libsamba-hostconfig.so.0.0.1 usr/lib/libsamba-passdb.so usr/lib/libsamba-passdb.so.0 -usr/lib/libsamba-passdb.so.0.28.0 -usr/lib/libsamba-policy.cpython-310-x86-64-linux-gnu.so -usr/lib/libsamba-policy.cpython-310-x86-64-linux-gnu.so.0 -usr/lib/libsamba-policy.cpython-310-x86-64-linux-gnu.so.0.0.1 +usr/lib/libsamba-passdb.so.0.29.0 usr/lib/libsamba-util.so usr/lib/libsamba-util.so.0 usr/lib/libsamba-util.so.0.0.1 -usr/lib/libsamdb.so -usr/lib/libsamdb.so.0 -usr/lib/libsamdb.so.0.0.1 usr/lib/libsmbclient.so usr/lib/libsmbclient.so.0 usr/lib/libsmbclient.so.0.8.0 @@ -195,24 +169,15 @@ usr/lib/libsmbconf.so.0.0.1 usr/lib/libsmbldap.so usr/lib/libsmbldap.so.2 usr/lib/libsmbldap.so.2.1.0 -usr/lib/libtevent-util.so -usr/lib/libtevent-util.so.0 -usr/lib/libtevent-util.so.0.0.1 usr/lib/libwbclient.so usr/lib/libwbclient.so.0 usr/lib/libwbclient.so.0.16 -#usr/lib/pkgconfig/dcerpc.pc -#usr/lib/pkgconfig/dcerpc_samr.pc #usr/lib/pkgconfig/ndr.pc #usr/lib/pkgconfig/ndr_krb5pac.pc #usr/lib/pkgconfig/ndr_nbt.pc #usr/lib/pkgconfig/ndr_standard.pc #usr/lib/pkgconfig/netapi.pc -#usr/lib/pkgconfig/samba-credentials.pc -#usr/lib/pkgconfig/samba-hostconfig.pc -#usr/lib/pkgconfig/samba-policy.cpython-310-x86_64-linux-gnu.pc #usr/lib/pkgconfig/samba-util.pc -#usr/lib/pkgconfig/samdb.pc #usr/lib/pkgconfig/smbclient.pc #usr/lib/pkgconfig/wbclient.pc usr/lib/python3.10/site-packages/_ldb_text.py @@ -283,6 +248,31 @@ usr/lib/python3.10/site-packages/samba/dcerpc/xattr.cpython-310-x86_64-linux-gnu usr/lib/python3.10/site-packages/samba/descriptor.py usr/lib/python3.10/site-packages/samba/dnsresolver.py usr/lib/python3.10/site-packages/samba/dnsserver.py +#usr/lib/python3.10/site-packages/samba/domain +usr/lib/python3.10/site-packages/samba/domain/__init__.py +#usr/lib/python3.10/site-packages/samba/domain/models +usr/lib/python3.10/site-packages/samba/domain/models/__init__.py +usr/lib/python3.10/site-packages/samba/domain/models/auth_policy.py +usr/lib/python3.10/site-packages/samba/domain/models/auth_silo.py +usr/lib/python3.10/site-packages/samba/domain/models/claim_type.py +usr/lib/python3.10/site-packages/samba/domain/models/computer.py +usr/lib/python3.10/site-packages/samba/domain/models/constants.py +usr/lib/python3.10/site-packages/samba/domain/models/container.py +usr/lib/python3.10/site-packages/samba/domain/models/exceptions.py +usr/lib/python3.10/site-packages/samba/domain/models/fields.py +usr/lib/python3.10/site-packages/samba/domain/models/gmsa.py +usr/lib/python3.10/site-packages/samba/domain/models/group.py +usr/lib/python3.10/site-packages/samba/domain/models/model.py +usr/lib/python3.10/site-packages/samba/domain/models/org.py +usr/lib/python3.10/site-packages/samba/domain/models/person.py +usr/lib/python3.10/site-packages/samba/domain/models/query.py +usr/lib/python3.10/site-packages/samba/domain/models/registry.py +usr/lib/python3.10/site-packages/samba/domain/models/schema.py +usr/lib/python3.10/site-packages/samba/domain/models/site.py +usr/lib/python3.10/site-packages/samba/domain/models/subnet.py +usr/lib/python3.10/site-packages/samba/domain/models/types.py +usr/lib/python3.10/site-packages/samba/domain/models/user.py +usr/lib/python3.10/site-packages/samba/domain/models/value_type.py usr/lib/python3.10/site-packages/samba/domain_update.py usr/lib/python3.10/site-packages/samba/drs_utils.py usr/lib/python3.10/site-packages/samba/dsdb.cpython-310-x86_64-linux-gnu.so @@ -344,6 +334,7 @@ usr/lib/python3.10/site-packages/samba/kcc/graph_utils.py usr/lib/python3.10/site-packages/samba/kcc/kcc_utils.py usr/lib/python3.10/site-packages/samba/kcc/ldif_import_export.py usr/lib/python3.10/site-packages/samba/logger.py +usr/lib/python3.10/site-packages/samba/lsa_utils.py usr/lib/python3.10/site-packages/samba/mdb_util.py usr/lib/python3.10/site-packages/samba/messaging.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/ms_display_specifiers.py @@ -366,9 +357,18 @@ usr/lib/python3.10/site-packages/samba/netcmd/domain usr/lib/python3.10/site-packages/samba/netcmd/domain/__init__.py usr/lib/python3.10/site-packages/samba/netcmd/domain/auth usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/__init__.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo_member.py +#usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/computer_allowed_to_authenticate_to.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/policy.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/service_allowed_to_authenticate_from.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/service_allowed_to_authenticate_to.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/user_allowed_to_authenticate_from.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/policy/user_allowed_to_authenticate_to.py +#usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo/member.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/auth/silo/silo.py usr/lib/python3.10/site-packages/samba/netcmd/domain/backup.py usr/lib/python3.10/site-packages/samba/netcmd/domain/claim usr/lib/python3.10/site-packages/samba/netcmd/domain/claim/__init__.py @@ -381,24 +381,12 @@ usr/lib/python3.10/site-packages/samba/netcmd/domain/demote.py usr/lib/python3.10/site-packages/samba/netcmd/domain/functional_prep.py usr/lib/python3.10/site-packages/samba/netcmd/domain/info.py usr/lib/python3.10/site-packages/samba/netcmd/domain/join.py +#usr/lib/python3.10/site-packages/samba/netcmd/domain/kds +usr/lib/python3.10/site-packages/samba/netcmd/domain/kds/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/kds/root_key.py usr/lib/python3.10/site-packages/samba/netcmd/domain/keytab.py usr/lib/python3.10/site-packages/samba/netcmd/domain/leave.py usr/lib/python3.10/site-packages/samba/netcmd/domain/level.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/__init__.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/auth_policy.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/auth_silo.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/claim_type.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/exceptions.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/fields.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/group.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/model.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/query.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/schema.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/site.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/subnet.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/user.py -usr/lib/python3.10/site-packages/samba/netcmd/domain/models/value_type.py usr/lib/python3.10/site-packages/samba/netcmd/domain/passwordsettings.py usr/lib/python3.10/site-packages/samba/netcmd/domain/provision.py usr/lib/python3.10/site-packages/samba/netcmd/domain/samba3upgrade.py @@ -422,6 +410,10 @@ usr/lib/python3.10/site-packages/samba/netcmd/processes.py usr/lib/python3.10/site-packages/samba/netcmd/pso.py usr/lib/python3.10/site-packages/samba/netcmd/rodc.py usr/lib/python3.10/site-packages/samba/netcmd/schema.py +#usr/lib/python3.10/site-packages/samba/netcmd/service_account +usr/lib/python3.10/site-packages/samba/netcmd/service_account/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/service_account/group_msa_membership.py +usr/lib/python3.10/site-packages/samba/netcmd/service_account/service_account.py usr/lib/python3.10/site-packages/samba/netcmd/shell.py usr/lib/python3.10/site-packages/samba/netcmd/sites.py usr/lib/python3.10/site-packages/samba/netcmd/spn.py @@ -513,16 +505,17 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/__init__.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/bug13653.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/check_output.py -usr/lib/python3.10/site-packages/samba/tests/blackbox/claims.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/claims.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/downgradedatabase.py -usr/lib/python3.10/site-packages/samba/tests/blackbox/http_chunk.py -usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/gmsa.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/http_chunk.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/mdsearch.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/misc_dfs_widelink.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/ndrdump.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_dns.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_json.py -usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/samba_dnsupdate.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_basic.py @@ -548,10 +541,10 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/array.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/bare.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/binding.py -#usr/lib/python3.10/site-packages/samba/tests/dcerpc/createtrustrelax.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/dnsserver.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/integer.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/lsa.py +#usr/lib/python3.10/site-packages/samba/tests/dcerpc/lsa_utils.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/mdssvc.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/misc.py #usr/lib/python3.10/site-packages/samba/tests/dcerpc/raw_protocol.py @@ -583,6 +576,8 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_api.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_dns.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_lock.py +#usr/lib/python3.10/site-packages/samba/tests/dsdb_quiet_env_tests.py +#usr/lib/python3.10/site-packages/samba/tests/dsdb_quiet_provision_tests.py #usr/lib/python3.10/site-packages/samba/tests/dsdb_schema_attributes.py #usr/lib/python3.10/site-packages/samba/tests/emulate #usr/lib/python3.10/site-packages/samba/tests/emulate/__init__.py @@ -620,6 +615,7 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py #usr/lib/python3.10/site-packages/samba/tests/krb5/etype_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/fast_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/gkdi_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/gmsa_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/group_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kcrypto.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_base_test.py @@ -716,6 +712,7 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_policy.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_silo.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_claim.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_kds_root_key.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_models.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/drs_clone_dc_data_lmdb_size.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/dsacl.py @@ -738,6 +735,7 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/provision_userPassword_crypt.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/rodc.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/schema.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/service_account.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/silo_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/sites.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/timecmd.py @@ -782,7 +780,6 @@ usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py #usr/lib/python3.10/site-packages/samba/tests/upgradeprovisionneeddc.py #usr/lib/python3.10/site-packages/samba/tests/usage.py #usr/lib/python3.10/site-packages/samba/tests/xattr.py -usr/lib/python3.10/site-packages/samba/trust_utils.py usr/lib/python3.10/site-packages/samba/upgrade.py usr/lib/python3.10/site-packages/samba/upgradehelpers.py usr/lib/python3.10/site-packages/samba/uptodateness.py @@ -808,6 +805,7 @@ usr/lib/samba/krb5/winbind_krb5_locator.so #usr/lib/samba/ldb usr/lib/samba/ldb/asq.so usr/lib/samba/ldb/ildap.so +usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so usr/lib/samba/ldb/paged_searches.so @@ -847,8 +845,10 @@ usr/lib/samba/libcom-err-private-samba.so usr/lib/samba/libcommon-auth-private-samba.so usr/lib/samba/libdbwrap-private-samba.so usr/lib/samba/libdcerpc-pkt-auth-private-samba.so +usr/lib/samba/libdcerpc-private-samba.so usr/lib/samba/libdcerpc-samba-private-samba.so usr/lib/samba/libdcerpc-samba4-private-samba.so +usr/lib/samba/libdcerpc-samr-private-samba.so usr/lib/samba/libdnsserver-common-private-samba.so usr/lib/samba/libdsdb-module-private-samba.so usr/lib/samba/libevents-private-samba.so @@ -901,14 +901,19 @@ usr/lib/samba/libregistry-private-samba.so usr/lib/samba/libreplace-private-samba.so usr/lib/samba/libroken-private-samba.so usr/lib/samba/libsamba-cluster-support-private-samba.so +usr/lib/samba/libsamba-credentials-private-samba.so usr/lib/samba/libsamba-debug-private-samba.so +usr/lib/samba/libsamba-hostconfig-private-samba.so usr/lib/samba/libsamba-modules-private-samba.so -usr/lib/samba/libsamba-net.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-net-join.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-net-private-samba.so +usr/lib/samba/libsamba-policy-private-samba.so usr/lib/samba/libsamba-python.cpython-310-x86-64-linux-gnu-private-samba.so usr/lib/samba/libsamba-security-private-samba.so usr/lib/samba/libsamba-sockets-private-samba.so usr/lib/samba/libsamba3-util-private-samba.so usr/lib/samba/libsamdb-common-private-samba.so +usr/lib/samba/libsamdb-private-samba.so usr/lib/samba/libsecrets3-private-samba.so usr/lib/samba/libserver-id-db-private-samba.so usr/lib/samba/libserver-role-private-samba.so @@ -928,9 +933,9 @@ usr/lib/samba/libtalloc-report-private-samba.so usr/lib/samba/libtdb-private-samba.so usr/lib/samba/libtdb-wrap-private-samba.so usr/lib/samba/libtevent-private-samba.so +usr/lib/samba/libtevent-util-private-samba.so usr/lib/samba/libtime-basic-private-samba.so usr/lib/samba/libtorture-private-samba.so -usr/lib/samba/libtrusts-util-private-samba.so usr/lib/samba/libutil-reg-private-samba.so usr/lib/samba/libutil-setid-private-samba.so usr/lib/samba/libutil-tdb-private-samba.so diff --git a/lfs/samba b/lfs/samba index 8d2c6a3a3..8358264a3 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ include Config -VER = 4.20.4 +VER = 4.21.0 SUMMARY = A SMB/CIFS File, Print, and Authentication Server THISAPP = samba-$(VER) @@ -35,7 +35,7 @@ TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba PAK_VER = 105 -DEPS = avahi cups perl-Parse-Yapp wsdd +DEPS = avahi cups perl-Parse-Yapp perl-JSON wsdd SERVICES = samba @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 1e5d99ed249f7a2bc21d0efec1d795262c556276984d48a774aef133bc1a9e182b7f20ce85aef2fc2b7d7e0b8b3a4edf1a6a855f679ed4d2408bd69b059463ee +$(DL_FILE)_BLAKE2 = 0889f2be3b78affee88250114397de87a77da77d9674815ec5605780a6bb3e2e28dbbae53b66695196408f4aef550acce793e6397045fbea4bb236fdd095ce1a install : $(TARGET) -- 2.46.0

1 0

[PATCH 1/5] sshd: Do not generate new RSA host key on first boot
by Peter Müller 20 Sep '24

20 Sep '24

This patch will also ensure the maximum supported key length is used for ECDSA. Existing installations will remain unaffected. Note that the key size for ED25519 is fixed, and explicitly setting it to 521 bytes will not have any impact. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- src/initscripts/system/sshd | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/initscripts/system/sshd b/src/initscripts/system/sshd index fa40bc11d..e5a9931af 100644 --- a/src/initscripts/system/sshd +++ b/src/initscripts/system/sshd @@ -2,7 +2,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,14 +24,14 @@ case "$1" in start) - for algo in rsa ecdsa ed25519; do + for algo in ecdsa ed25519; do keyfile="/etc/ssh/ssh_host_${algo}_key" # If the key already exists, there is nothing to do. [ -e "${keyfile}" ] && continue boot_mesg "Generating SSH key (${algo})..." - ssh-keygen -qf "${keyfile}" -N '' -t ${algo} + ssh-keygen -qf "${keyfile}" -N '' -b 521 -t ${algo} evaluate_retval done -- 2.39.5

1 4

[PATCH 1/2] ca-certificates: Update root CA certificates bundle
by Peter Müller 20 Sep '24

20 Sep '24

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/ca-certificates/certdata.txt | 772 +++++++++++++++++++++++++++- lfs/ca-certificates | 2 +- 2 files changed, 769 insertions(+), 5 deletions(-) diff --git a/config/ca-certificates/certdata.txt b/config/ca-certificates/certdata.txt index ea914d409..110a81471 100644 --- a/config/ca-certificates/certdata.txt +++ b/config/ca-certificates/certdata.txt @@ -3645,7 +3645,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL \002\006\040\006\005\026\160\002 END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE @@ -7252,7 +7252,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL \002\010\136\303\267\246\103\177\244\340 END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE @@ -17020,8 +17020,14 @@ CKA_VALUE MULTILINE_OCTAL \155\015\277\173\327\222 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE -CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE -CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE +# For Server Distrust After: Sun Jun 30 00:00:00 2024 +CKA_NSS_SERVER_DISTRUST_AFTER MULTILINE_OCTAL +\062\064\060\066\063\060\060\060\060\060\060\060\132 +END +# For Email Distrust After: Sun Jun 30 00:00:00 2024 +CKA_NSS_EMAIL_DISTRUST_AFTER MULTILINE_OCTAL +\062\064\060\066\063\060\060\060\060\060\060\060\132 +END # Trust for "GLOBALTRUST 2020" # Issuer: CN=GLOBALTRUST 2020,O=e-commerce monitoring GmbH,C=AT @@ -25483,3 +25489,761 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE +# +# Certificate "TWCA CYBER Root CA" +# +# Issuer: CN=TWCA CYBER Root CA,OU=Root CA,O=TAIWAN-CA,C=TW +# Serial Number:40:01:34:8c:c2:00:00:00:00:00:00:00:01:3c:f2:c6 +# Subject: CN=TWCA CYBER Root CA,OU=Root CA,O=TAIWAN-CA,C=TW +# Not Valid Before: Tue Nov 22 06:54:29 2022 +# Not Valid After : Fri Nov 22 15:59:59 2047 +# Fingerprint (SHA-256): 3F:63:BB:28:14:BE:17:4E:C8:B6:43:9C:F0:8D:6D:56:F0:B7:C4:05:88:3A:56:48:A3:34:42:4D:6B:3E:C5:58 +# Fingerprint (SHA1): F6:B1:1C:1A:83:38:E9:7B:DB:B3:A8:C8:33:24:E0:2D:9C:7F:26:66 +CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "TWCA CYBER Root CA" +CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +CKA_SUBJECT MULTILINE_OCTAL +\060\120\061\013\060\011\006\003\125\004\006\023\002\124\127\061 +\022\060\020\006\003\125\004\012\023\011\124\101\111\127\101\116 +\055\103\101\061\020\060\016\006\003\125\004\013\023\007\122\157 +\157\164\040\103\101\061\033\060\031\006\003\125\004\003\023\022 +\124\127\103\101\040\103\131\102\105\122\040\122\157\157\164\040 +\103\101 +END +CKA_ID UTF8 "0" +CKA_ISSUER MULTILINE_OCTAL +\060\120\061\013\060\011\006\003\125\004\006\023\002\124\127\061 +\022\060\020\006\003\125\004\012\023\011\124\101\111\127\101\116 +\055\103\101\061\020\060\016\006\003\125\004\013\023\007\122\157 +\157\164\040\103\101\061\033\060\031\006\003\125\004\003\023\022 +\124\127\103\101\040\103\131\102\105\122\040\122\157\157\164\040 +\103\101 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\020\100\001\064\214\302\000\000\000\000\000\000\000\001\074 +\362\306 +END +CKA_VALUE MULTILINE_OCTAL +\060\202\005\215\060\202\003\165\240\003\002\001\002\002\020\100 +\001\064\214\302\000\000\000\000\000\000\000\001\074\362\306\060 +\015\006\011\052\206\110\206\367\015\001\001\014\005\000\060\120 +\061\013\060\011\006\003\125\004\006\023\002\124\127\061\022\060 +\020\006\003\125\004\012\023\011\124\101\111\127\101\116\055\103 +\101\061\020\060\016\006\003\125\004\013\023\007\122\157\157\164 +\040\103\101\061\033\060\031\006\003\125\004\003\023\022\124\127 +\103\101\040\103\131\102\105\122\040\122\157\157\164\040\103\101 +\060\036\027\015\062\062\061\061\062\062\060\066\065\064\062\071 +\132\027\015\064\067\061\061\062\062\061\065\065\071\065\071\132 +\060\120\061\013\060\011\006\003\125\004\006\023\002\124\127\061 +\022\060\020\006\003\125\004\012\023\011\124\101\111\127\101\116 +\055\103\101\061\020\060\016\006\003\125\004\013\023\007\122\157 +\157\164\040\103\101\061\033\060\031\006\003\125\004\003\023\022 +\124\127\103\101\040\103\131\102\105\122\040\122\157\157\164\040 +\103\101\060\202\002\042\060\015\006\011\052\206\110\206\367\015 +\001\001\001\005\000\003\202\002\017\000\060\202\002\012\002\202 +\002\001\000\306\370\312\036\331\011\040\176\035\154\116\316\217 +\343\107\063\104\234\307\311\151\252\072\133\170\356\160\322\222 +\370\004\263\122\122\035\147\162\050\241\337\213\135\225\012\376 +\352\315\355\367\051\316\360\157\177\254\315\075\357\263\034\105 +\152\367\050\220\361\141\127\305\014\304\243\120\135\336\324\265 +\313\031\312\200\271\165\316\051\316\322\205\042\354\002\143\314 +\104\060\040\332\352\221\133\126\346\035\034\325\235\146\307\077 +\337\206\312\113\123\304\331\215\262\035\352\370\334\047\123\243 +\107\341\141\314\175\265\260\370\356\163\221\305\316\163\157\316 +\356\020\037\032\006\317\351\047\140\305\117\031\344\353\316\042 +\046\105\327\140\231\335\316\117\067\340\177\347\143\255\260\270 +\131\270\320\006\150\065\140\323\066\256\161\103\004\361\151\145 +\170\174\363\037\363\312\050\237\132\040\225\146\264\315\267\356 +\217\170\244\105\030\351\046\057\215\233\051\050\261\244\267\072 +\155\271\324\034\070\162\105\130\261\136\353\360\050\233\267\202 +\312\375\317\326\063\017\237\373\227\236\261\034\234\236\352\137 +\136\333\252\335\124\351\060\041\050\155\216\171\363\165\222\214 +\046\376\334\305\366\303\260\337\104\131\103\243\266\003\050\366 +\010\060\252\015\063\341\357\234\251\007\042\343\131\133\100\217 +\332\210\267\151\010\250\267\043\056\104\011\131\067\133\307\343 +\027\362\042\353\156\071\122\305\336\124\247\230\311\113\040\225 +\334\106\211\137\264\022\371\205\051\216\353\310\047\025\040\300 +\113\324\314\174\014\154\064\014\046\233\046\061\246\074\247\366 +\331\320\113\242\144\377\073\231\101\162\301\340\160\227\361\044 +\273\053\304\164\042\261\254\153\042\062\044\323\170\052\300\300 +\241\057\361\122\005\311\077\357\166\146\342\105\330\015\075\255 +\225\310\307\211\046\310\017\256\247\003\056\373\301\137\372\040 +\341\160\255\260\145\040\067\063\140\260\325\257\327\014\034\302 +\220\160\327\112\030\274\176\001\260\260\353\025\036\104\006\315 +\244\117\350\014\321\303\040\020\341\124\145\236\266\121\320\032 +\166\153\102\132\130\166\064\352\267\067\031\256\056\165\371\226 +\345\301\131\367\224\127\051\045\215\072\114\253\115\232\101\320 +\137\046\003\002\003\001\000\001\243\143\060\141\060\016\006\003 +\125\035\017\001\001\377\004\004\003\002\001\006\060\017\006\003 +\125\035\023\001\001\377\004\005\060\003\001\001\377\060\037\006 +\003\125\035\043\004\030\060\026\200\024\235\205\141\024\174\301 +\142\157\227\150\344\117\067\100\341\255\340\015\126\067\060\035 +\006\003\125\035\016\004\026\004\024\235\205\141\024\174\301\142 +\157\227\150\344\117\067\100\341\255\340\015\126\067\060\015\006 +\011\052\206\110\206\367\015\001\001\014\005\000\003\202\002\001 +\000\144\217\172\304\142\016\265\210\314\270\307\206\016\241\112 +\026\315\160\013\267\247\205\013\263\166\266\017\247\377\010\213 +\013\045\317\250\324\203\165\052\270\226\210\266\373\337\055\055 +\264\151\123\041\065\127\326\211\115\163\277\151\217\160\243\141 +\314\232\333\036\232\340\040\370\154\273\233\042\235\135\204\061 +\232\054\212\335\152\241\327\050\151\312\376\166\125\172\106\147 +\353\314\103\210\026\242\003\326\271\027\370\031\154\155\043\002 +\177\361\137\320\012\051\043\073\321\252\012\355\251\027\046\124 +\012\115\302\245\115\370\305\375\270\201\317\053\054\170\243\147 +\114\251\007\232\363\337\136\373\174\365\211\315\164\227\141\020 +\152\007\053\201\132\322\216\267\347\040\321\040\156\044\250\204 +\047\241\127\254\252\125\130\057\334\331\312\372\150\004\236\355 +\104\044\371\164\100\073\043\063\253\203\132\030\046\102\266\155 +\124\265\026\140\060\154\261\240\370\270\101\240\135\111\111\322 +\145\005\072\352\376\235\141\274\206\331\277\336\323\272\072\261 +\177\176\222\064\216\311\000\156\334\230\275\334\354\200\005\255 +\002\075\337\145\355\013\003\367\367\026\204\004\061\272\223\224 +\330\362\022\370\212\343\277\102\257\247\324\315\021\027\026\310 +\102\035\024\250\102\366\322\100\206\240\117\043\312\226\105\126 +\140\006\315\267\125\001\246\001\224\145\376\156\005\011\272\264 +\244\252\342\357\130\276\275\047\126\330\357\163\161\133\104\063 +\362\232\162\352\260\136\076\156\251\122\133\354\160\155\265\207 +\217\067\136\074\214\234\316\344\360\316\014\147\101\314\316\366 +\200\253\116\314\114\126\365\301\141\131\223\264\076\246\332\270 +\067\022\237\052\062\343\213\270\041\354\303\053\145\014\357\042 +\336\210\051\073\114\327\372\376\267\341\107\276\234\076\076\203 +\373\121\135\365\150\367\056\041\205\334\277\361\132\342\174\327 +\305\344\203\301\152\353\272\200\132\336\134\055\160\166\370\310 +\345\207\207\312\240\235\241\345\042\022\047\017\104\075\035\154 +\352\324\302\213\057\157\171\253\177\120\246\304\031\247\241\172 +\267\226\371\301\037\142\132\242\103\007\100\136\046\306\254\355 +\256\160\026\305\252\312\162\212\115\260\317\001\213\003\077\156 +\327 +END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE + +# Trust for "TWCA CYBER Root CA" +# Issuer: CN=TWCA CYBER Root CA,OU=Root CA,O=TAIWAN-CA,C=TW +# Serial Number:40:01:34:8c:c2:00:00:00:00:00:00:00:01:3c:f2:c6 +# Subject: CN=TWCA CYBER Root CA,OU=Root CA,O=TAIWAN-CA,C=TW +# Not Valid Before: Tue Nov 22 06:54:29 2022 +# Not Valid After : Fri Nov 22 15:59:59 2047 +# Fingerprint (SHA-256): 3F:63:BB:28:14:BE:17:4E:C8:B6:43:9C:F0:8D:6D:56:F0:B7:C4:05:88:3A:56:48:A3:34:42:4D:6B:3E:C5:58 +# Fingerprint (SHA1): F6:B1:1C:1A:83:38:E9:7B:DB:B3:A8:C8:33:24:E0:2D:9C:7F:26:66 +CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "TWCA CYBER Root CA" +CKA_CERT_SHA1_HASH MULTILINE_OCTAL +\366\261\034\032\203\070\351\173\333\263\250\310\063\044\340\055 +\234\177\046\146 +END +CKA_CERT_MD5_HASH MULTILINE_OCTAL +\013\063\240\227\122\225\324\251\375\273\333\156\243\125\133\121 +END +CKA_ISSUER MULTILINE_OCTAL +\060\120\061\013\060\011\006\003\125\004\006\023\002\124\127\061 +\022\060\020\006\003\125\004\012\023\011\124\101\111\127\101\116 +\055\103\101\061\020\060\016\006\003\125\004\013\023\007\122\157 +\157\164\040\103\101\061\033\060\031\006\003\125\004\003\023\022 +\124\127\103\101\040\103\131\102\105\122\040\122\157\157\164\040 +\103\101 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\020\100\001\064\214\302\000\000\000\000\000\000\000\001\074 +\362\306 +END +CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + +# +# Certificate "TWCA Global Root CA G2" +# +# Issuer: CN=TWCA Global Root CA G2,OU=Root CA,O=TAIWAN-CA,C=TW +# Serial Number:40:01:34:8c:c2:00:00:00:00:00:00:00:01:97:58:f4 +# Subject: CN=TWCA Global Root CA G2,OU=Root CA,O=TAIWAN-CA,C=TW +# Not Valid Before: Tue Nov 22 06:42:21 2022 +# Not Valid After : Fri Nov 22 15:59:59 2047 +# Fingerprint (SHA-256): 3A:00:72:D4:9F:FC:04:E9:96:C5:9A:EB:75:99:1D:3C:34:0F:36:15:D6:FD:4D:CE:90:AC:0B:3D:88:EA:D4:F4 +# Fingerprint (SHA1): 73:FE:92:2F:83:63:91:FF:C8:C6:C4:DA:D6:20:2F:6B:07:2E:7F:1B +CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "TWCA Global Root CA G2" +CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +CKA_SUBJECT MULTILINE_OCTAL +\060\124\061\013\060\011\006\003\125\004\006\023\002\124\127\061 +\022\060\020\006\003\125\004\012\023\011\124\101\111\127\101\116 +\055\103\101\061\020\060\016\006\003\125\004\013\023\007\122\157 +\157\164\040\103\101\061\037\060\035\006\003\125\004\003\023\026 +\124\127\103\101\040\107\154\157\142\141\154\040\122\157\157\164 +\040\103\101\040\107\062 +END +CKA_ID UTF8 "0" +CKA_ISSUER MULTILINE_OCTAL +\060\124\061\013\060\011\006\003\125\004\006\023\002\124\127\061 +\022\060\020\006\003\125\004\012\023\011\124\101\111\127\101\116 +\055\103\101\061\020\060\016\006\003\125\004\013\023\007\122\157 +\157\164\040\103\101\061\037\060\035\006\003\125\004\003\023\026 +\124\127\103\101\040\107\154\157\142\141\154\040\122\157\157\164 +\040\103\101\040\107\062 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\020\100\001\064\214\302\000\000\000\000\000\000\000\001\227 +\130\364 +END +CKA_VALUE MULTILINE_OCTAL +\060\202\005\225\060\202\003\175\240\003\002\001\002\002\020\100 +\001\064\214\302\000\000\000\000\000\000\000\001\227\130\364\060 +\015\006\011\052\206\110\206\367\015\001\001\014\005\000\060\124 +\061\013\060\011\006\003\125\004\006\023\002\124\127\061\022\060 +\020\006\003\125\004\012\023\011\124\101\111\127\101\116\055\103 +\101\061\020\060\016\006\003\125\004\013\023\007\122\157\157\164 +\040\103\101\061\037\060\035\006\003\125\004\003\023\026\124\127 +\103\101\040\107\154\157\142\141\154\040\122\157\157\164\040\103 +\101\040\107\062\060\036\027\015\062\062\061\061\062\062\060\066 +\064\062\062\061\132\027\015\064\067\061\061\062\062\061\065\065 +\071\065\071\132\060\124\061\013\060\011\006\003\125\004\006\023 +\002\124\127\061\022\060\020\006\003\125\004\012\023\011\124\101 +\111\127\101\116\055\103\101\061\020\060\016\006\003\125\004\013 +\023\007\122\157\157\164\040\103\101\061\037\060\035\006\003\125 +\004\003\023\026\124\127\103\101\040\107\154\157\142\141\154\040 +\122\157\157\164\040\103\101\040\107\062\060\202\002\042\060\015 +\006\011\052\206\110\206\367\015\001\001\001\005\000\003\202\002 +\017\000\060\202\002\012\002\202\002\001\000\252\016\325\040\222 +\001\255\202\371\014\010\221\064\153\212\026\320\106\026\377\003 +\270\330\215\352\223\064\373\377\053\275\375\156\252\334\233\362 +\206\201\125\365\211\034\304\215\165\152\130\170\221\023\036\002 +\023\160\075\357\276\012\347\000\217\270\061\345\164\305\060\276 +\377\175\326\231\345\302\102\243\317\041\326\263\010\177\221\325 +\141\346\242\225\020\015\357\136\227\013\111\070\325\042\260\327 +\213\131\157\237\065\233\177\322\221\314\172\177\273\240\237\336 +\125\063\366\113\215\012\352\175\011\300\171\334\275\104\342\376 +\034\347\144\041\050\317\004\112\342\264\277\206\171\052\273\016 +\223\311\217\136\254\060\071\122\220\007\271\352\234\046\102\024 +\304\147\106\376\321\032\150\241\076\120\031\243\046\012\047\051 +\220\302\366\264\353\163\232\170\036\341\230\364\145\014\065\041 +\006\370\013\336\142\345\115\301\263\135\331\271\372\141\227\052 +\343\352\307\104\125\044\222\376\022\247\077\304\167\340\055\002 +\201\007\325\373\175\346\020\236\072\264\250\357\354\373\120\352 +\065\317\314\176\273\102\271\104\154\122\351\277\052\162\037\077 +\336\233\160\351\334\132\305\073\273\277\360\131\205\257\057\301 +\260\024\171\005\254\165\237\045\365\021\047\006\140\041\307\155 +\145\276\250\211\234\345\254\106\337\370\135\104\003\215\140\275 +\367\261\015\314\057\357\101\124\057\356\153\225\271\116\174\064 +\337\073\371\167\235\175\315\007\075\034\006\063\022\200\354\162 +\234\362\055\202\332\325\073\304\307\371\004\303\144\002\174\365 +\065\140\247\264\106\051\056\033\357\245\130\200\056\172\211\121 +\070\066\074\375\241\167\270\200\060\320\212\336\215\247\064\046 +\354\043\273\030\125\030\066\105\356\355\001\006\252\115\277\144 +\014\312\230\227\032\061\002\146\370\170\150\133\210\337\011\250 +\347\233\372\064\155\160\034\041\255\010\213\362\241\266\254\166 +\152\277\361\200\045\000\276\074\036\115\256\271\074\266\225\143 +\275\153\176\107\022\220\125\105\021\215\354\027\037\301\276\047 +\201\223\127\143\151\000\046\167\213\303\131\345\173\321\015\104 +\362\250\360\367\205\232\005\367\302\056\160\232\223\205\330\225 +\220\061\220\124\246\354\013\237\067\105\017\002\003\001\000\001 +\243\143\060\141\060\016\006\003\125\035\017\001\001\377\004\004 +\003\002\001\006\060\017\006\003\125\035\023\001\001\377\004\005 +\060\003\001\001\377\060\037\006\003\125\035\043\004\030\060\026 +\200\024\222\214\324\066\321\133\107\123\304\161\015\204\335\144 +\052\365\066\144\100\347\060\035\006\003\125\035\016\004\026\004 +\024\222\214\324\066\321\133\107\123\304\161\015\204\335\144\052 +\365\066\144\100\347\060\015\006\011\052\206\110\206\367\015\001 +\001\014\005\000\003\202\002\001\000\045\374\113\332\220\264\332 +\165\347\101\072\201\321\246\376\240\152\363\030\161\142\152\044 +\010\213\251\172\115\311\125\316\317\020\050\056\004\031\226\005 +\317\135\002\040\052\073\263\125\077\001\315\102\315\262\167\355 +\377\165\363\174\167\333\226\245\317\214\147\006\364\244\233\162 +\366\041\111\011\230\243\062\136\167\132\143\011\357\142\103\227 +\002\070\265\352\074\030\120\150\374\131\133\331\171\324\361\344 +\126\110\023\126\330\323\161\013\136\170\224\070\021\105\372\005 +\027\365\016\165\036\142\122\141\106\272\056\031\255\206\264\210 +\017\261\120\346\100\000\064\032\225\235\223\340\121\371\324\125 +\106\351\225\074\045\206\056\227\327\001\061\030\104\354\034\140 +\351\175\151\257\062\370\227\100\045\044\266\215\032\125\074\305 +\267\367\274\006\122\073\161\060\160\076\161\027\176\361\146\004 +\136\135\274\212\061\103\246\222\035\173\124\322\245\066\213\157 +\215\326\136\332\324\303\056\035\337\071\125\140\202\060\236\047 +\377\216\200\335\143\114\246\125\065\330\320\063\251\200\155\076 +\136\235\314\250\147\200\146\372\231\127\014\122\312\031\165\260 +\070\065\125\052\201\305\214\036\126\327\137\220\362\040\330\332 +\340\146\161\351\262\170\253\147\271\044\156\153\066\162\374\157 +\215\375\177\162\071\050\147\122\221\005\037\127\145\322\243\247 +\015\141\372\241\347\325\065\106\225\311\006\207\366\060\354\062 +\121\251\254\126\300\041\116\243\024\164\005\072\274\343\277\155 +\075\116\077\136\245\244\155\051\277\204\121\165\123\216\206\032 +\365\121\160\052\015\034\116\100\341\375\243\343\245\053\147\220 +\222\307\154\256\205\277\072\233\027\025\312\234\052\223\324\115 +\071\015\274\040\010\243\215\210\154\011\015\214\256\104\041\115 +\311\161\354\330\046\327\027\236\055\021\030\074\243\042\175\270 +\047\124\277\150\310\073\102\314\217\136\116\347\334\302\305\372 +\152\104\017\215\126\210\172\337\211\204\154\240\263\076\075\361 +\145\000\011\210\352\052\353\100\316\263\135\254\062\027\256\301 +\233\351\320\301\365\111\224\335\247\316\174\132\007\353\256\040 +\234\027\060\222\151\223\162\363\232\133\161\233\376\152\337\172 +\060\151\216\263\056\333\017\054\335 +END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE + +# Trust for "TWCA Global Root CA G2" +# Issuer: CN=TWCA Global Root CA G2,OU=Root CA,O=TAIWAN-CA,C=TW +# Serial Number:40:01:34:8c:c2:00:00:00:00:00:00:00:01:97:58:f4 +# Subject: CN=TWCA Global Root CA G2,OU=Root CA,O=TAIWAN-CA,C=TW +# Not Valid Before: Tue Nov 22 06:42:21 2022 +# Not Valid After : Fri Nov 22 15:59:59 2047 +# Fingerprint (SHA-256): 3A:00:72:D4:9F:FC:04:E9:96:C5:9A:EB:75:99:1D:3C:34:0F:36:15:D6:FD:4D:CE:90:AC:0B:3D:88:EA:D4:F4 +# Fingerprint (SHA1): 73:FE:92:2F:83:63:91:FF:C8:C6:C4:DA:D6:20:2F:6B:07:2E:7F:1B +CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "TWCA Global Root CA G2" +CKA_CERT_SHA1_HASH MULTILINE_OCTAL +\163\376\222\057\203\143\221\377\310\306\304\332\326\040\057\153 +\007\056\177\033 +END +CKA_CERT_MD5_HASH MULTILINE_OCTAL +\023\215\135\372\031\265\346\253\144\173\020\164\160\032\043\056 +END +CKA_ISSUER MULTILINE_OCTAL +\060\124\061\013\060\011\006\003\125\004\006\023\002\124\127\061 +\022\060\020\006\003\125\004\012\023\011\124\101\111\127\101\116 +\055\103\101\061\020\060\016\006\003\125\004\013\023\007\122\157 +\157\164\040\103\101\061\037\060\035\006\003\125\004\003\023\026 +\124\127\103\101\040\107\154\157\142\141\154\040\122\157\157\164 +\040\103\101\040\107\062 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\020\100\001\064\214\302\000\000\000\000\000\000\000\001\227 +\130\364 +END +CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + +# +# Certificate "SecureSign Root CA12" +# +# Issuer: CN=SecureSign Root CA12,O="Cybertrust Japan Co., Ltd.",C=JP +# Serial Number:66:f9:c7:c1:af:ec:c2:51:b4:ed:53:97:e6:e6:82:c3:2b:1c:90:16 +# Subject: CN=SecureSign Root CA12,O="Cybertrust Japan Co., Ltd.",C=JP +# Not Valid Before: Wed Apr 08 05:36:46 2020 +# Not Valid After : Sun Apr 08 05:36:46 2040 +# Fingerprint (SHA-256): 3F:03:4B:B5:70:4D:44:B2:D0:85:45:A0:20:57:DE:93:EB:F3:90:5F:CE:72:1A:CB:C7:30:C0:6D:DA:EE:90:4E +# Fingerprint (SHA1): 7A:22:1E:3D:DE:1B:06:AC:9E:C8:47:70:16:8E:3C:E5:F7:6B:06:F4 +CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "SecureSign Root CA12" +CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +CKA_SUBJECT MULTILINE_OCTAL +\060\121\061\013\060\011\006\003\125\004\006\023\002\112\120\061 +\043\060\041\006\003\125\004\012\023\032\103\171\142\145\162\164 +\162\165\163\164\040\112\141\160\141\156\040\103\157\056\054\040 +\114\164\144\056\061\035\060\033\006\003\125\004\003\023\024\123 +\145\143\165\162\145\123\151\147\156\040\122\157\157\164\040\103 +\101\061\062 +END +CKA_ID UTF8 "0" +CKA_ISSUER MULTILINE_OCTAL +\060\121\061\013\060\011\006\003\125\004\006\023\002\112\120\061 +\043\060\041\006\003\125\004\012\023\032\103\171\142\145\162\164 +\162\165\163\164\040\112\141\160\141\156\040\103\157\056\054\040 +\114\164\144\056\061\035\060\033\006\003\125\004\003\023\024\123 +\145\143\165\162\145\123\151\147\156\040\122\157\157\164\040\103 +\101\061\062 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\024\146\371\307\301\257\354\302\121\264\355\123\227\346\346 +\202\303\053\034\220\026 +END +CKA_VALUE MULTILINE_OCTAL +\060\202\003\162\060\202\002\132\240\003\002\001\002\002\024\146 +\371\307\301\257\354\302\121\264\355\123\227\346\346\202\303\053 +\034\220\026\060\015\006\011\052\206\110\206\367\015\001\001\013 +\005\000\060\121\061\013\060\011\006\003\125\004\006\023\002\112 +\120\061\043\060\041\006\003\125\004\012\023\032\103\171\142\145 +\162\164\162\165\163\164\040\112\141\160\141\156\040\103\157\056 +\054\040\114\164\144\056\061\035\060\033\006\003\125\004\003\023 +\024\123\145\143\165\162\145\123\151\147\156\040\122\157\157\164 +\040\103\101\061\062\060\036\027\015\062\060\060\064\060\070\060 +\065\063\066\064\066\132\027\015\064\060\060\064\060\070\060\065 +\063\066\064\066\132\060\121\061\013\060\011\006\003\125\004\006 +\023\002\112\120\061\043\060\041\006\003\125\004\012\023\032\103 +\171\142\145\162\164\162\165\163\164\040\112\141\160\141\156\040 +\103\157\056\054\040\114\164\144\056\061\035\060\033\006\003\125 +\004\003\023\024\123\145\143\165\162\145\123\151\147\156\040\122 +\157\157\164\040\103\101\061\062\060\202\001\042\060\015\006\011 +\052\206\110\206\367\015\001\001\001\005\000\003\202\001\017\000 +\060\202\001\012\002\202\001\001\000\272\071\301\067\172\150\105 +\053\024\264\353\344\023\353\127\165\043\115\217\044\055\026\350 +\256\216\311\175\244\127\073\052\166\045\063\203\154\352\062\212 +\224\233\116\074\226\344\375\121\277\231\311\223\176\277\371\255 +\247\262\110\053\007\034\047\365\114\274\160\022\167\244\205\124 +\265\375\220\172\344\243\344\121\130\003\315\020\171\171\356\153 +\223\037\144\216\153\144\253\243\023\343\161\376\175\253\234\335 +\047\123\067\263\252\030\302\131\046\354\133\037\322\346\145\174 +\357\223\275\330\130\134\013\300\343\145\157\074\307\312\131\343 +\376\156\137\254\203\276\375\135\045\116\052\051\073\326\013\253 +\027\062\170\244\341\076\224\106\276\142\156\233\336\106\250\261 +\026\347\205\156\364\010\100\105\021\240\236\124\104\204\367\330 +\066\316\365\120\107\334\054\060\233\356\300\365\226\322\376\011 +\206\307\006\131\256\117\256\216\021\230\173\363\013\122\252\142 +\046\252\041\337\216\045\063\171\227\026\111\215\365\076\325\107 +\237\067\061\111\063\162\005\115\014\266\125\214\361\127\217\212 +\207\321\255\305\021\022\071\240\255\002\003\001\000\001\243\102 +\060\100\060\017\006\003\125\035\023\001\001\377\004\005\060\003 +\001\001\377\060\016\006\003\125\035\017\001\001\377\004\004\003 +\002\001\006\060\035\006\003\125\035\016\004\026\004\024\127\064 +\363\164\317\004\113\325\045\346\361\100\266\054\114\331\055\351 +\240\255\060\015\006\011\052\206\110\206\367\015\001\001\013\005 +\000\003\202\001\001\000\076\273\333\027\026\322\362\024\001\040 +\054\070\203\113\255\276\312\205\172\232\266\233\153\246\341\374 +\245\072\254\255\264\050\072\257\327\001\203\111\053\143\242\335 +\232\144\016\230\134\157\335\216\273\212\124\042\055\112\023\363 +\256\100\103\333\117\221\267\206\032\354\000\264\101\201\244\117 +\372\152\213\210\263\166\010\162\052\111\100\303\323\303\205\211 +\230\020\245\235\157\031\267\273\317\172\145\125\333\067\353\074 +\212\162\062\227\036\232\051\076\255\215\346\243\033\155\365\165 +\032\346\260\150\271\133\242\356\151\107\047\065\241\206\231\200 +\363\063\113\341\153\244\046\303\357\164\131\154\172\242\144\266 +\036\104\303\120\340\017\071\075\251\063\361\245\363\322\275\142 +\204\254\216\034\251\315\132\275\067\073\156\012\042\264\364\025 +\347\221\130\305\072\104\323\225\050\331\300\145\351\162\312\320 +\017\275\037\263\025\331\251\343\244\107\011\236\340\313\067\373 +\375\275\227\325\276\030\032\151\242\071\201\331\032\365\253\177 +\310\343\342\147\013\235\364\014\352\124\337\322\262\257\261\042 +\361\040\337\274\104\034 +END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE + +# Trust for "SecureSign Root CA12" +# Issuer: CN=SecureSign Root CA12,O="Cybertrust Japan Co., Ltd.",C=JP +# Serial Number:66:f9:c7:c1:af:ec:c2:51:b4:ed:53:97:e6:e6:82:c3:2b:1c:90:16 +# Subject: CN=SecureSign Root CA12,O="Cybertrust Japan Co., Ltd.",C=JP +# Not Valid Before: Wed Apr 08 05:36:46 2020 +# Not Valid After : Sun Apr 08 05:36:46 2040 +# Fingerprint (SHA-256): 3F:03:4B:B5:70:4D:44:B2:D0:85:45:A0:20:57:DE:93:EB:F3:90:5F:CE:72:1A:CB:C7:30:C0:6D:DA:EE:90:4E +# Fingerprint (SHA1): 7A:22:1E:3D:DE:1B:06:AC:9E:C8:47:70:16:8E:3C:E5:F7:6B:06:F4 +CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "SecureSign Root CA12" +CKA_CERT_SHA1_HASH MULTILINE_OCTAL +\172\042\036\075\336\033\006\254\236\310\107\160\026\216\074\345 +\367\153\006\364 +END +CKA_CERT_MD5_HASH MULTILINE_OCTAL +\306\211\312\144\102\233\142\010\111\013\036\177\351\007\075\350 +END +CKA_ISSUER MULTILINE_OCTAL +\060\121\061\013\060\011\006\003\125\004\006\023\002\112\120\061 +\043\060\041\006\003\125\004\012\023\032\103\171\142\145\162\164 +\162\165\163\164\040\112\141\160\141\156\040\103\157\056\054\040 +\114\164\144\056\061\035\060\033\006\003\125\004\003\023\024\123 +\145\143\165\162\145\123\151\147\156\040\122\157\157\164\040\103 +\101\061\062 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\024\146\371\307\301\257\354\302\121\264\355\123\227\346\346 +\202\303\053\034\220\026 +END +CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + +# +# Certificate "SecureSign Root CA14" +# +# Issuer: CN=SecureSign Root CA14,O="Cybertrust Japan Co., Ltd.",C=JP +# Serial Number:64:db:5a:0c:20:4e:e8:d7:29:77:c8:50:27:a2:5a:27:dd:2d:f2:cb +# Subject: CN=SecureSign Root CA14,O="Cybertrust Japan Co., Ltd.",C=JP +# Not Valid Before: Wed Apr 08 07:06:19 2020 +# Not Valid After : Sat Apr 08 07:06:19 2045 +# Fingerprint (SHA-256): 4B:00:9C:10:34:49:4F:9A:B5:6B:BA:3B:A1:D6:27:31:FC:4D:20:D8:95:5A:DC:EC:10:A9:25:60:72:61:E3:38 +# Fingerprint (SHA1): DD:50:C0:F7:79:B3:64:2E:74:A2:B8:9D:9F:D3:40:DD:BB:F0:F2:4F +CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "SecureSign Root CA14" +CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +CKA_SUBJECT MULTILINE_OCTAL +\060\121\061\013\060\011\006\003\125\004\006\023\002\112\120\061 +\043\060\041\006\003\125\004\012\023\032\103\171\142\145\162\164 +\162\165\163\164\040\112\141\160\141\156\040\103\157\056\054\040 +\114\164\144\056\061\035\060\033\006\003\125\004\003\023\024\123 +\145\143\165\162\145\123\151\147\156\040\122\157\157\164\040\103 +\101\061\064 +END +CKA_ID UTF8 "0" +CKA_ISSUER MULTILINE_OCTAL +\060\121\061\013\060\011\006\003\125\004\006\023\002\112\120\061 +\043\060\041\006\003\125\004\012\023\032\103\171\142\145\162\164 +\162\165\163\164\040\112\141\160\141\156\040\103\157\056\054\040 +\114\164\144\056\061\035\060\033\006\003\125\004\003\023\024\123 +\145\143\165\162\145\123\151\147\156\040\122\157\157\164\040\103 +\101\061\064 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\024\144\333\132\014\040\116\350\327\051\167\310\120\047\242 +\132\047\335\055\362\313 +END +CKA_VALUE MULTILINE_OCTAL +\060\202\005\162\060\202\003\132\240\003\002\001\002\002\024\144 +\333\132\014\040\116\350\327\051\167\310\120\047\242\132\047\335 +\055\362\313\060\015\006\011\052\206\110\206\367\015\001\001\014 +\005\000\060\121\061\013\060\011\006\003\125\004\006\023\002\112 +\120\061\043\060\041\006\003\125\004\012\023\032\103\171\142\145 +\162\164\162\165\163\164\040\112\141\160\141\156\040\103\157\056 +\054\040\114\164\144\056\061\035\060\033\006\003\125\004\003\023 +\024\123\145\143\165\162\145\123\151\147\156\040\122\157\157\164 +\040\103\101\061\064\060\036\027\015\062\060\060\064\060\070\060 +\067\060\066\061\071\132\027\015\064\065\060\064\060\070\060\067 +\060\066\061\071\132\060\121\061\013\060\011\006\003\125\004\006 +\023\002\112\120\061\043\060\041\006\003\125\004\012\023\032\103 +\171\142\145\162\164\162\165\163\164\040\112\141\160\141\156\040 +\103\157\056\054\040\114\164\144\056\061\035\060\033\006\003\125 +\004\003\023\024\123\145\143\165\162\145\123\151\147\156\040\122 +\157\157\164\040\103\101\061\064\060\202\002\042\060\015\006\011 +\052\206\110\206\367\015\001\001\001\005\000\003\202\002\017\000 +\060\202\002\012\002\202\002\001\000\305\322\172\241\326\212\277 +\026\061\320\230\321\072\224\374\132\270\156\042\301\142\367\247 +\012\047\357\120\366\056\261\236\150\022\360\154\044\143\071\361 +\360\337\020\306\336\267\122\040\325\122\133\102\231\236\363\240 +\276\122\037\137\314\147\155\247\056\120\242\301\227\215\266\370 +\225\365\260\272\334\235\340\276\313\337\367\070\362\107\365\246 +\232\222\225\052\142\131\120\013\242\261\065\347\145\262\141\262 +\352\222\161\151\344\051\360\117\201\201\004\074\262\245\133\324 +\305\250\131\147\173\125\034\111\253\172\235\302\347\163\115\357 +\315\011\302\304\127\022\333\001\016\043\171\011\007\073\242\350 +\374\212\317\217\300\106\044\234\070\047\340\203\235\033\240\277 +\170\025\020\353\206\116\012\132\375\337\332\054\202\176\356\312 +\366\051\341\372\161\241\367\210\150\234\234\360\215\276\017\111 +\221\330\352\072\371\375\320\150\161\333\351\265\053\116\202\222 +\157\146\037\340\360\334\114\354\312\321\352\272\164\006\371\263 +\204\220\224\321\137\216\163\031\020\135\002\345\160\245\300\020 +\320\020\174\157\305\130\111\264\260\156\232\332\175\225\365\314 +\332\002\257\270\054\175\171\217\276\103\361\371\050\050\215\011 +\103\370\010\335\153\310\213\054\044\261\215\122\007\275\170\233 +\313\312\150\262\244\335\014\114\171\140\306\231\321\223\361\060 +\032\007\323\256\042\302\352\316\361\204\011\314\340\024\156\177 +\077\176\322\202\205\254\334\251\026\116\205\240\140\313\366\234 +\327\310\263\216\355\306\233\230\165\015\125\350\137\345\225\213 +\002\244\256\103\051\050\021\244\346\022\060\001\113\165\153\036 +\146\235\171\057\245\166\057\035\100\264\155\311\175\171\010\354 +\321\152\266\135\052\262\245\146\275\153\205\364\164\126\303\365 +\347\165\122\050\054\245\377\146\107\245\324\376\376\236\124\277 +\145\176\001\326\060\217\245\066\234\242\120\034\356\070\200\001 +\110\306\307\164\364\306\254\303\100\111\026\141\164\054\257\214 +\157\065\355\173\030\000\133\066\074\234\120\015\312\222\063\020 +\361\046\111\155\337\165\044\067\202\042\327\350\226\375\025\113 +\002\226\076\007\162\225\176\253\075\114\056\327\312\360\337\340 +\130\077\055\057\004\232\070\243\001\002\003\001\000\001\243\102 +\060\100\060\017\006\003\125\035\023\001\001\377\004\005\060\003 +\001\001\377\060\016\006\003\125\035\017\001\001\377\004\004\003 +\002\001\006\060\035\006\003\125\035\016\004\026\004\024\006\223 +\243\012\136\050\151\067\252\141\035\353\353\374\055\157\043\344 +\363\240\060\015\006\011\052\206\110\206\367\015\001\001\014\005 +\000\003\202\002\001\000\226\200\162\011\006\176\234\314\223\004 +\026\273\240\072\215\222\116\267\021\032\012\161\161\020\315\004 +\255\177\245\105\120\020\146\116\112\101\242\003\331\021\117\172 +\067\271\113\342\306\217\062\146\165\045\373\353\316\077\003\051 +\046\215\270\026\035\366\037\063\156\110\346\350\370\127\262\033 +\171\337\073\207\012\342\144\272\000\312\154\357\176\320\043\353 +\170\217\377\144\233\064\067\237\065\145\242\244\000\075\022\043 +\226\130\135\312\143\207\306\243\007\210\115\347\151\166\212\123 +\315\361\117\354\102\362\223\343\231\244\067\074\207\270\142\333 +\360\354\037\067\077\067\137\103\314\121\235\265\360\227\302\267 +\205\152\150\013\104\036\345\121\356\223\316\113\156\206\301\322 +\014\044\131\066\032\237\054\221\217\343\030\333\224\225\012\355 +\221\252\016\231\334\226\123\343\141\203\306\026\272\043\272\334 +\335\176\032\306\173\102\266\331\132\005\334\232\137\325\337\270 +\332\107\175\332\070\333\254\071\325\036\153\154\052\027\214\141 +\315\261\155\162\001\303\303\040\000\142\150\026\061\325\166\252 +\206\273\016\252\236\306\371\360\331\370\015\041\002\344\305\050 +\026\131\021\271\331\151\163\052\222\170\270\222\127\233\010\362 +\072\345\057\225\260\130\267\153\040\024\155\024\357\012\274\176 +\330\125\330\210\332\057\372\031\245\373\213\340\177\071\365\162 +\053\205\304\054\254\357\031\105\222\114\263\141\007\334\115\037 +\156\322\201\023\134\232\363\022\147\203\317\233\077\213\237\235 +\244\271\250\226\003\172\305\356\040\336\063\332\057\236\032\172 +\164\036\341\356\314\132\072\004\335\263\032\004\250\024\143\254 +\267\107\022\203\232\154\365\346\351\025\025\221\032\204\031\016 +\224\104\347\022\216\045\133\200\147\031\334\143\223\020\013\145 +\056\212\372\011\232\116\332\206\050\175\252\141\065\330\016\247 +\050\032\273\122\340\170\370\154\272\154\260\156\271\207\136\351 +\231\065\067\361\075\144\053\251\240\064\223\317\143\057\325\201 +\337\256\143\047\245\036\116\215\334\051\170\131\370\371\241\040 +\214\247\046\100\156\202\162\315\170\262\310\217\074\036\163\347 +\301\037\277\317\316\245\052\233\333\104\144\062\240\273\177\134 +\045\023\110\265\177\222 +END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE + +# Trust for "SecureSign Root CA14" +# Issuer: CN=SecureSign Root CA14,O="Cybertrust Japan Co., Ltd.",C=JP +# Serial Number:64:db:5a:0c:20:4e:e8:d7:29:77:c8:50:27:a2:5a:27:dd:2d:f2:cb +# Subject: CN=SecureSign Root CA14,O="Cybertrust Japan Co., Ltd.",C=JP +# Not Valid Before: Wed Apr 08 07:06:19 2020 +# Not Valid After : Sat Apr 08 07:06:19 2045 +# Fingerprint (SHA-256): 4B:00:9C:10:34:49:4F:9A:B5:6B:BA:3B:A1:D6:27:31:FC:4D:20:D8:95:5A:DC:EC:10:A9:25:60:72:61:E3:38 +# Fingerprint (SHA1): DD:50:C0:F7:79:B3:64:2E:74:A2:B8:9D:9F:D3:40:DD:BB:F0:F2:4F +CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "SecureSign Root CA14" +CKA_CERT_SHA1_HASH MULTILINE_OCTAL +\335\120\300\367\171\263\144\056\164\242\270\235\237\323\100\335 +\273\360\362\117 +END +CKA_CERT_MD5_HASH MULTILINE_OCTAL +\161\015\162\372\222\031\145\136\211\004\254\026\063\360\274\325 +END +CKA_ISSUER MULTILINE_OCTAL +\060\121\061\013\060\011\006\003\125\004\006\023\002\112\120\061 +\043\060\041\006\003\125\004\012\023\032\103\171\142\145\162\164 +\162\165\163\164\040\112\141\160\141\156\040\103\157\056\054\040 +\114\164\144\056\061\035\060\033\006\003\125\004\003\023\024\123 +\145\143\165\162\145\123\151\147\156\040\122\157\157\164\040\103 +\101\061\064 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\024\144\333\132\014\040\116\350\327\051\167\310\120\047\242 +\132\047\335\055\362\313 +END +CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + +# +# Certificate "SecureSign Root CA15" +# +# Issuer: CN=SecureSign Root CA15,O="Cybertrust Japan Co., Ltd.",C=JP +# Serial Number:16:15:c7:c3:d8:49:a7:be:69:0c:8a:88:ed:f0:70:f9:dd:b7:3e:87 +# Subject: CN=SecureSign Root CA15,O="Cybertrust Japan Co., Ltd.",C=JP +# Not Valid Before: Wed Apr 08 08:32:56 2020 +# Not Valid After : Sat Apr 08 08:32:56 2045 +# Fingerprint (SHA-256): E7:78:F0:F0:95:FE:84:37:29:CD:1A:00:82:17:9E:53:14:A9:C2:91:44:28:05:E1:FB:1D:8F:B6:B8:88:6C:3A +# Fingerprint (SHA1): CB:BA:83:C8:C1:5A:5D:F1:F9:73:6F:CA:D7:EF:28:13:06:4A:07:7D +CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "SecureSign Root CA15" +CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +CKA_SUBJECT MULTILINE_OCTAL +\060\121\061\013\060\011\006\003\125\004\006\023\002\112\120\061 +\043\060\041\006\003\125\004\012\023\032\103\171\142\145\162\164 +\162\165\163\164\040\112\141\160\141\156\040\103\157\056\054\040 +\114\164\144\056\061\035\060\033\006\003\125\004\003\023\024\123 +\145\143\165\162\145\123\151\147\156\040\122\157\157\164\040\103 +\101\061\065 +END +CKA_ID UTF8 "0" +CKA_ISSUER MULTILINE_OCTAL +\060\121\061\013\060\011\006\003\125\004\006\023\002\112\120\061 +\043\060\041\006\003\125\004\012\023\032\103\171\142\145\162\164 +\162\165\163\164\040\112\141\160\141\156\040\103\157\056\054\040 +\114\164\144\056\061\035\060\033\006\003\125\004\003\023\024\123 +\145\143\165\162\145\123\151\147\156\040\122\157\157\164\040\103 +\101\061\065 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\024\026\025\307\303\330\111\247\276\151\014\212\210\355\360 +\160\371\335\267\076\207 +END +CKA_VALUE MULTILINE_OCTAL +\060\202\002\043\060\202\001\251\240\003\002\001\002\002\024\026 +\025\307\303\330\111\247\276\151\014\212\210\355\360\160\371\335 +\267\076\207\060\012\006\010\052\206\110\316\075\004\003\003\060 +\121\061\013\060\011\006\003\125\004\006\023\002\112\120\061\043 +\060\041\006\003\125\004\012\023\032\103\171\142\145\162\164\162 +\165\163\164\040\112\141\160\141\156\040\103\157\056\054\040\114 +\164\144\056\061\035\060\033\006\003\125\004\003\023\024\123\145 +\143\165\162\145\123\151\147\156\040\122\157\157\164\040\103\101 +\061\065\060\036\027\015\062\060\060\064\060\070\060\070\063\062 +\065\066\132\027\015\064\065\060\064\060\070\060\070\063\062\065 +\066\132\060\121\061\013\060\011\006\003\125\004\006\023\002\112 +\120\061\043\060\041\006\003\125\004\012\023\032\103\171\142\145 +\162\164\162\165\163\164\040\112\141\160\141\156\040\103\157\056 +\054\040\114\164\144\056\061\035\060\033\006\003\125\004\003\023 +\024\123\145\143\165\162\145\123\151\147\156\040\122\157\157\164 +\040\103\101\061\065\060\166\060\020\006\007\052\206\110\316\075 +\002\001\006\005\053\201\004\000\042\003\142\000\004\013\120\164 +\215\144\062\231\231\263\322\140\010\270\042\216\106\164\054\170 +\300\053\104\055\155\137\035\311\256\113\122\040\203\075\270\024 +\155\123\207\140\236\137\154\205\333\006\024\225\340\307\050\377 +\235\137\344\252\361\263\213\155\355\117\057\113\311\112\224\221 +\144\165\376\001\354\301\330\353\172\224\170\126\030\103\137\153 +\201\313\366\274\332\264\014\266\051\223\010\151\217\243\102\060 +\100\060\017\006\003\125\035\023\001\001\377\004\005\060\003\001 +\001\377\060\016\006\003\125\035\017\001\001\377\004\004\003\002 +\001\006\060\035\006\003\125\035\016\004\026\004\024\353\101\310 +\256\374\325\236\121\110\365\275\213\364\207\040\223\101\053\323 +\364\060\012\006\010\052\206\110\316\075\004\003\003\003\150\000 +\060\145\002\061\000\331\056\211\176\136\116\244\021\007\275\131 +\302\007\336\253\062\070\123\052\106\104\006\027\172\316\121\351 +\340\377\146\055\011\116\340\117\364\005\321\205\366\065\140\334 +\365\162\263\106\175\002\060\104\230\106\032\202\205\036\141\151 +\211\113\007\113\146\265\236\252\272\240\036\101\331\001\164\072 +\156\105\072\211\200\031\173\062\230\125\143\253\353\143\156\223 +\155\253\033\011\140\061\116 +END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE + +# Trust for "SecureSign Root CA15" +# Issuer: CN=SecureSign Root CA15,O="Cybertrust Japan Co., Ltd.",C=JP +# Serial Number:16:15:c7:c3:d8:49:a7:be:69:0c:8a:88:ed:f0:70:f9:dd:b7:3e:87 +# Subject: CN=SecureSign Root CA15,O="Cybertrust Japan Co., Ltd.",C=JP +# Not Valid Before: Wed Apr 08 08:32:56 2020 +# Not Valid After : Sat Apr 08 08:32:56 2045 +# Fingerprint (SHA-256): E7:78:F0:F0:95:FE:84:37:29:CD:1A:00:82:17:9E:53:14:A9:C2:91:44:28:05:E1:FB:1D:8F:B6:B8:88:6C:3A +# Fingerprint (SHA1): CB:BA:83:C8:C1:5A:5D:F1:F9:73:6F:CA:D7:EF:28:13:06:4A:07:7D +CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "SecureSign Root CA15" +CKA_CERT_SHA1_HASH MULTILINE_OCTAL +\313\272\203\310\301\132\135\361\371\163\157\312\327\357\050\023 +\006\112\007\175 +END +CKA_CERT_MD5_HASH MULTILINE_OCTAL +\023\060\374\304\142\246\251\336\265\301\150\257\265\322\061\107 +END +CKA_ISSUER MULTILINE_OCTAL +\060\121\061\013\060\011\006\003\125\004\006\023\002\112\120\061 +\043\060\041\006\003\125\004\012\023\032\103\171\142\145\162\164 +\162\165\163\164\040\112\141\160\141\156\040\103\157\056\054\040 +\114\164\144\056\061\035\060\033\006\003\125\004\003\023\024\123 +\145\143\165\162\145\123\151\147\156\040\122\157\157\164\040\103 +\101\061\065 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\024\026\025\307\303\330\111\247\276\151\014\212\210\355\360 +\160\371\335\267\076\207 +END +CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE diff --git a/lfs/ca-certificates b/lfs/ca-certificates index 6c603340a..dde31abb0 100644 --- a/lfs/ca-certificates +++ b/lfs/ca-certificates @@ -24,7 +24,7 @@ include Config -VER = 20240610 +VER = 20240920 # From https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/b… -- 2.39.5

1 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development September 2024