Related: #1984993, add missing p11sak_defined_attrs.conf

Resolves: #1984993, rebase to 3.17.0
Resolves: #1984870, openCryptoki key management tool

Fix: Could not open /run/lock/opencryptoki/LCK..APIlock

Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes

Resolves: #1964304, Fix detection if pkcsslotd is still running

Related: #1919223, add conditional requirement

Related: #1919223, add requirement on selinux-policy >= 3.14.3-70 for using ipsec

Resolves: #1919223, rebase to 3.16.0
Resolves: #1922195, Event Notification Support
Resolves: #1959936, Soft token does not check if an EC key is valid
Resolves: #1851104, import and export of secure key objects
Resolves: #1851106, openCryptoki ep11 token: protected key support
Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys

Resolves: #1928120, Fix problem with C_Get/SetOperationState and digest contexts

Resolves: #1927745, pkcscca migration fails with usr/sb2 is not a valid slot ID

Resolves: #1902022
key command

Related: #1847433, Added error message handling for p11sak remove-key command

Related: #1847433
Free generated key in all error cases
CCA: Zeroize key buffer to avoid CCA 8/32 error
Do not delete the map-btree entry if destroying an object is not allowed
Remove now unused header timeb.h
TESTCASES: Use FIPS conforming keys for 3DES CBC-MAC test vectors
Fix buffer overrun in C_CopyObject
TPM: Fix double free in openssl_gen_key

Resolves: #1847433, rebase to 3.15.0
Resolves: #1851105, PKCS #11 3.0 - baseline provider support
Resolves: #1851108, openCryptoki ep11 token: enhanced functionality
Resolves: #1851109, openCryptoki key management tool: key deletion function

Related: #1853420, more fixes

Resolves: #1853420, endian issue