openCryptoki enhancement and bug fix update

Enhanced openCryptoki packages that add CCA STDLL and TPM support for IBM
System z and fix several bugs are now available.

The openCryptoki package contains the PKCS#11 Version 2.11 API implemented
for the IBM Crypto cards. This package includes support for the IBM 4758
Cryptographic CoProcessor (with the PKCS#11 firmware loaded) and the IBM
eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p).

These updated openCryptoki packages add the following enhancements:

* IBM System z PKCS#11 support for the secure key functionality of the
xCrypto card through the CCA interface.

* support for the hardware Trusted Platform Module (TPM) has also been added.

In addition, these updated openCryptoki packages provides fixes for the
following bugs:

* openCryptoki would fail to properly close file descriptors which would
lead to open file handle exhaustion in certain situations. These file
handles are now properly closed.

* openCryptoki used the /usr/sbin/pkcs11_startup script to probe for
hardware in the /proc file system and add support for it when it was
available. Because software fallback support is integrated into the libica
package on System z, there was no longer a need for openCryptoki to use
this script to probe for hardware. This obsolete check has thus been removed.

Users of openCryptoki are advised to upgrade to these updated packages,
which add these enhancements and resolve these issues.

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

CCA, fd, leak, lock, spin, STDLL