GNOME Keyring Changelog

What's new in GNOME Keyring 3.35.1

Jan 13, 2020
  • dbus: Implement secret portal backend [!18]
  • Updated translations

New in GNOME Keyring 3.34.0 (Sep 30, 2019)

  • dbus-environment: Race fix in Setenv request to gnome-session [!19]
  • egg: Request that secure memory not be dumped to disk [!15]
  • Build and test fixes [!16, !20, !24, ...]
  • Updated translations

New in GNOME Keyring 3.32.0 Beta (Feb 13, 2019)

  • pam: lookup XDG_RUNTIME_DIR using get_any_env [!5]
  • Reinstate pkcs11 module for specific programs [!7, !8]
  • Build fixes [!4, !9, !10]
  • Updated translations

New in GNOME Keyring 3.28.2 (May 10, 2018)

  • Fix glitches in ssh-agent [#795699]

New in GNOME Keyring 3.28.0.2 (Mar 26, 2018)

  • Fix glitches in ssh-agent [#794361, #794368, #794369, #794500, #794631]

New in GNOME Keyring 3.28.0.1 (Mar 14, 2018)

  • Fix linking with "-z defs" [#794274]

New in GNOME Keyring 3.28.0 (Mar 14, 2018)

  • Fix TAP test driver.

New in GNOME Keyring 3.28.0 RC (Mar 7, 2018)

  • Wrap stock ssh-agent from OpenSSH [#775981]
  • Stop installing p11-kit configuration file for the PKCS#11 module [#791401]
  • Updated translations

New in GNOME Keyring 3.27.4 (Jan 21, 2018)

  • Add support for SHA2 extension for RSA signatures in ssh-agent [#790910]
  • Build fixes [#792278, #787387]
  • Updated translations

New in GNOME Keyring 3.27.2 (Nov 28, 2017)

  • Add support for ECDSA in ssh-agent [#641082]
  • Wipe passwords stored by the PAM module [#781486]
  • Fix shared key derivation between libsecret and gnome-keyring [#778357]
  • Fix erroneous handling of partial writes in write_sync_close [#778269]
  • Set CKF_LOGIN_REQUIRED flag in ssh-module
  • Build and testing fixes [#774312, #781785]

New in GNOME Keyring 3.20.1 (Jul 7, 2017)

  • Fix boolean logic error in ssh-agent
  • Pass the correct argc to gkr_pam_client_run_operation [#766222]
  • Look for both dlopen and dlsym when configuring [#766221]
  • Fix .so link in gnome-keyring-3 man page [#767095]
  • Die if the XDG session we were started under goes away [#768943]
  • Shorten unlock keyring dialog title [#770170]
  • Updated translations

New in GNOME Keyring 3.18 Beta 2 (Sep 10, 2015)

  • More fixes for GDBus migration [#622905]
  • Fix a memory leak [#752919]

New in GNOME Keyring 3.18 Beta 1 (Sep 10, 2015)

  • More fixes for GDBus migration [#622905]
  • Fix a memory leak [#752919]

New in GNOME Keyring 3.17.4 (Aug 4, 2015)

  • Remove temporary files on failure [#746334]
  • Migrate DBus code to GVariant and GDBus [#622905]
  • Remove the GnuPG agent [#750514]
  • Updated translations

New in GNOME Keyring 3.16.0 RC (Mar 20, 2015)

  • pam: Make sure to never block SIGCHLD [#745673]
  • Revert "ssh-agent: Fix leak in seach_keys_like_attributes()"
  • Updated translations

New in GNOME Keyring 3.14.0 (Sep 23, 2014)

  • Remove residual GTK+ usage
  • Updated translations
  • Build fixes

New in GNOME Keyring 3.14 Beta 2 (Sep 10, 2014)

  • Initialize correctly with empty passwords during login [#736085]
  • Don't use geteuid() to get UID for user in PAM module [#733418]
  • Fix for libgcrypt 1.6+
  • Build fixes

New in GNOME Keyring 3.12.2 (May 14, 2014)

  • Build fixes

New in GNOME Keyring 3.12.0 (Mar 24, 2014)

  • Fix regression sorting recent files
  • New and updated translations

New in GNOME Keyring 3.10.1 (Oct 17, 2013)

  • Build fix on OpenBSD [#706405]
  • Add manual page
  • Minor error message fixes
  • Updated translations

New in GNOME Keyring 3.10.0 (Sep 24, 2013)

  • Minor logic fix [#708483]

New in GNOME Keyring 3.10 Beta 1 (Aug 27, 2013)

  • Fix running gnome-keyring-daemon under test harness
  • Test fixes [#702367]

New in GNOME Keyring 3.8.2 (May 6, 2013)

  • Build certificate chains when intermediates are wrong order [#699026]
  • Don't try to import certificates to gnome-keyring xdg module
  • Add appropriate icon for p11-kit trust module
  • Make gcr build on both pre GTK+ 3.8 and later versions
  • Update for recent changes in libtasn1
  • Handle cases where no certificate data is available
  • Fix for GTK+ 3.8 deprecations
  • Build fixes

New in GNOME Keyring 3.9.1 (May 1, 2013)

  • Fix implementation of LockService dbus method [#690466]
  • Updated translations [nl]
  • Build fixes

New in GNOME Keyring 3.8.1 (Apr 19, 2013)

  • Updated translations

New in GNOME Keyring 3.8.0 (Mar 25, 2013)

  • Updated translations.

New in GNOME Keyring 3.7.92 (Mar 18, 2013)

  • Update introspection data of Collection.SearchItems() [#695115]
  • Update the Item.Created and Item.Modified properties correctly [#695052]
  • Updated translations
  • Build fixes

New in GNOME Keyring 3.7.91 (Mar 5, 2013)

  • Remove the roots-store module replaced by p11-kit 0.16+ trust module
  • Only return one object path list from Collection.SearchItems() [#695115]
  • Fix order of items returned from SearchItems() [#693884]
  • Build fixes

New in GNOME Keyring 3.6.3 (Mar 1, 2013)

  • Don't reverse the order of items returned from SearchItems()
  • Updated translations

New in GNOME Keyring 3.6.2 (Feb 4, 2013)

  • Accept XDG_DATA_HOME environment variable during initialization
  • Handle empty secrets correctly

New in GNOME Keyring 3.7.5 (Feb 4, 2013)

  • Set correct type for Collection's "Locked" property
  • Don't warn if the GNOME session manager is not available
  • Updated Translations
  • Fix crasher in armor code
  • Build fixes

New in GNOME Keyring 3.6.1 (Oct 16, 2012)

  • Fix regressions with keyring master password changing
  • Load schema for secret items correctly, prevents storing multiple times for items stored via libsecret
  • Setup translations properly when daemon starts
  • Fix memory leak in PKCS#11 module
  • Updated translations

New in GNOME Keyring 3.3.2 (Nov 28, 2011)

  • Do not make label selectionnable in prompt dialog
  • Fix deadlock in the 'unsafe storage' prompt
  • Better locking for the old gnome2-store
  • Updated translations
  • Build fixes

New in GNOME Keyring 3.2.1 (Oct 18, 2011)

  • Fix debugging output, and erroneous warnings
  • Updated translations

New in GNOME Keyring 3.2.0 (Sep 28, 2011)

  • Don't install setuid when filesystem capabilities not available
  • Updated translations

New in GNOME Keyring 3.1.92 (Sep 20, 2011)

  • Add back the file format "documentation"
  • Make .desktop file match prompt process so icon and title are shown
  • Fix packaging issues installing the pkcs11 module
  • return correct error code in gpg-agent for unimplemented stuff
  • Fixes for parsing/viewing various (sometimes slightly invalid) PKCS#12 files
  • Allow daemon to access secrets of internal PKCS#11 modules, so that we can do things like hash NTLM and Kerberos secrets in the future.
  • Build and documentation fixes
  • Updated translations

New in GNOME Keyring 3.1.91 (Sep 15, 2011)

  • gcr-viewer will now display errors when failing to load a file.
  • gcr-viewer can now prompt for passwords to unlock files
  • Add support for getting the current data block being parsed in GcrParser.
  • Add debug output to various points in the GCR and GCK libraries.
  • When replacing another gnome-keyring-daemon, wait a moment before initializing.
  • Fix GCR library initialization bugs loading PKCS#11 modules.
  • Fine tuning of GcrParser when parsing PKCS#12 files.
  • Build and packaging fixes
  • Updated translations

New in GNOME Keyring 3.1.4 (Aug 2, 2011)

  • New GcrListSelector class for selecting multiple keys.
  • Add icons for key and key pair.
  • Gcr now has support for loading of GnuPG keys from gpg, including photos.
  • New gcr dependency on p11-kit for loading PKCS#11 modules.
  • Remove support for GTK+ 2.x
  • Implement calculation of fingerprints in gcr for keys.
  • Fix problems in daemon if IPC lock or FS capabilities are not available.
  • Bug fixes and build fixes.
  • Code cleanup and refactoring.

New in GNOME Keyring 3.0.3 (Jun 14, 2011)

  • Build fixes on OpenBSD.
  • Don't prompt multiple times for simultaneous unlocking of keyrings.

New in GNOME Keyring 3.0.2 (May 26, 2011)

  • Add documentation images for gcr widgets.
  • Translation fixes.
  • Build fixes.

New in GNOME Keyring 3.1.1 (May 10, 2011)

  • Add 'Export Certificate' option to right click of certificate widget.
  • Use file system linux capabilities for memory locking.
  • Set correct daemon SELinux context when started from PAM module.
  • Fix assertions in parser.
  • Add GcrCollection interface to represent collections of objects.
  • Add GcrGnupgCollection to libgcr.
  • Implement functionality in renderers to populate GtkTreeModel
  • Add a GcrSelector widget.
  • Cleanup unregistering from session.
  • Translations and translation fixes.
  • Build fixes.

New in GNOME Keyring 3.0.1 (Apr 29, 2011)

  • Fix clicking buttons in 'unsafe storage' dialog on GTK+3
  • Build with GTK+3 by default
  • More tests and test fine tuning: --enable-tests=yes/no/full
  • Expand path in gnome-keyring-prompt.desktop properly
  • Implement debug tracing in parts of gcr library.
  • Complete documentation in gcr and gck libraries.
  • Fix assertions in gcr library during parsing of a stream.
  • Build fixes

New in GNOME Keyring 3.0.0 (Apr 6, 2011)

  • Translations

New in GNOME Keyring 2.91.91 (Mar 7, 2011)

  • Fix the certificate details expander when used with GTK+3
  • Calculate the minimum/natural size of the certificate widget better.
  • Fix gnome-keyring-prompt for GTK+3 release.
  • Fix problems with the URIs used for trust lookup and storage.
  • Pass around a content-type for secrets in the DBus Secret Service API.
  • If DBus couldn't be initialized when starting up the daemon, try again at a later point.
  • Build and testing fixes.
  • Remove support for the pkcs11-options file, and wait for a properconfiguration file setup being worked on in p11-kit.
  • * Add support for --version argument to gnome-keyring-daemon and
  • gnome-keyring
  • * Create necessary directory when storing trust assertion objects.

New in GNOME Keyring 2.91.4 (Dec 23, 2010)

  • gck library loads PKCS#11 modules from /usr/lib/pkcs11
  • PKCS#11 config file in /etc/xdg/pkcs11.conf[.defaults]
  • Many ASN.1 encoding fixes.
  • Refactor how tests work.
  • Install standalone PKCS#11 modules to a consistent location.
  • Memory leaks and other bug fixes.
  • Allow enumeration of objects in specific PKCS#11 slots as well as modules.
  • Add GcrCertificateChain for building certificate chains.
  • Implementation of the initial PKCS#11 Trust Assertions spec.
  • Add GcrPkcs11Certificate for looking up certificates in PKCS#11 modules by issuer.
  • Expose gcr functionality for setting which PKCS#11 modules to use.
  • Find the root certificates by default.
  • Move to a single header model for libgcr.
  • Don't load *.la files when looking for PKCS#11 modules.
  • Fixes for GTK+3.0
  • New xdg-store PKCS#11 module with support for storing trust assertions.
  • Rename old user-store to gnome2-store since it stores its data in old formats in the old .gnome2 location.

New in GNOME Keyring 2.91.3 (Nov 30, 2010)

  • Shutdown module timer when holding proper mutex.
  • Linux capabilities to overcome limits on locked memory.
  • Update HACKING with coding style
  • Build fixes.

New in GNOME Keyring 2.91.2 (Nov 9, 2010)

  • Add timeout if PAM startup doesn't complete shortly.
  • Fix login keyring password when it doesn't match unix login.
  • Replace gp11-0 with gck in pkgconfig file
  • Fix broken dispose of GcrCertificateWidget
  • Remove gp11 library.

New in GNOME Keyring 2.32.1 (Oct 26, 2010)

  • Don't offer to save password for symmetric encryption in gpg-agent.
  • Don't try to cache password when symmetric encryption in gpg-agent.
  • Check that daemon is initialized before changing password from pam.
  • Fix login keyring password doesn't match login.
  • Link correctly to gio.
  • Add extra debug guard around printing of prompt io.
  • Fix invalid memory access in rpc-layer.

New in GNOME Keyring 2.91.1 (Oct 8, 2010)

  • Fix build problem in gpg-agent.
  • Properly distribute pkgconfig file for gck library.
  • Better certificate widget in gcr library.
  • Add extra debug guard around printing of prompt io.
  • Rework how the gcr parser and importer work together.
  • More GTK+ 3.0 fixes.

New in GNOME Keyring 2.31.91 (Aug 31, 2010)

  • Fix problem with keyring names that contain foreign charaters.
  • Build fixes and warning fixes.
  • Better GPG Agent prompt strings.
  • More internal documentation.
  • Remove gconf as part of migration to gsettings.
  • Add --replace option to daemon.
  • Fix race condition in tests.
  • Use new DER decoding and encoding routines.
  • Only try to authenticate once if PKCS#11 slot has protected auth path.
  • Better handling of when PKCS#11 token is write protected.

New in GNOME Keyring 2.30.2 (Jun 21, 2010)

  • Fix possible race condition in gp11 library.
  • Use proper locking for secure memory in daemon.
  • Fix broken startup when used with gdm and password-less login.
  • Fix checking of uninitialized value in prompting code.
  • Make sure the service files are created correctly
  • Add dbus activation service file for org.freedesktop.secrets
  • Build fixes of *.desktop and *.service files

New in GNOME Keyring 2.29.92 (Mar 10, 2010)

  • Fix various problems with not storing secret value properly.
  • Return no results when a search includes a bad collection identifier.
  • Don't raise error if ssh client disconnects early.
  • Allow running in a test environment.
  • Fix error when setting default keyring to NULL.
  • Autostart gnome-keyring-daemon in LXDE as well.
  • Rework the startup again, to use a singleton crontrolled via dbus, to help when no process was started by pam.
  • Display password and confirm prompts when creating keyring.
  • Allow specifying CKA_ID when creating collection.
  • Give translatable label to created login keyring.
  • When no default keyring set, use login keyring.
  • Fix problem initializing socket path in rpc module.
  • Fix endless loop in reading data.
  • Potential fix or sporadic crash.
  • Solaris build fixes.
  • Updated translations.