{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "softhsm-0.2.6.1-4.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/softhsm-0.2.6.1-4.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-softhsm-2.6.1",
      "name": "softhsm",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fe3770d162d64a2faf9c2a60dd8df8981016d8c220477f6b2c1f452e5bb40d31"
        }
      ],
      "description": "OpenDNSSEC is providing a software implementation of a generic\ncryptographic device with a PKCS#11 interface, the SoftHSM. SoftHSM is\ndesigned to meet the requirements of OpenDNSSEC, but can also work together\nwith other cryptographic products because of the PKCS#11 interface.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/softhsm@2.6.1-4.oe2403sp4?arch=x86_64&epoch=0&upstream=softhsm-2.6.1-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.opendnssec.org/",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Software version of a PKCS#11 Hardware Security Module",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.6.1-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bash-5.2.15",
      "name": "bash",
      "licenseConcluded": "GPLv3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a980f85dfb01951730f94f5537d836d925d5e23cafc786f2e63f0087f69e1d93"
        }
      ],
      "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/bash",
      "licenseDeclared": "GPLv3",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "It is the Bourne Again Shell",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.15-19.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "433e473f0f3e48029a50a63e45680e5ae03a29789cc26d8952d691ea388b3b62"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-22.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b136cc1d6c94e7df3b522b541c89c22084f0ce440f1b9714ed930f664b10ea04"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "092db224576930eedd234726562459f564bb59dda6c5eca2b004d8abdecc8a2c"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libstdc---12.3.1",
      "name": "libstdc++",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "082bf133e19c4d9e84db23bfc3eee5375a3069ac3ff0a2053138c91066ddab5b"
        }
      ],
      "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libstdc++@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GNU Standard C++ Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-nss-util-3.94.0",
      "name": "nss-util",
      "licenseConcluded": "MPLv2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "67b0a0e2ba5ca356e2231dc2b92a18dafe7f2ff1bf6fe7ff12e192f2f2483630"
        }
      ],
      "description": "Utilities for Network Security Services and the Softoken module\nmanipulate the NSS certificate and key database.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/nss-util@3.94.0-9.oe2403sp4?arch=x86_64&epoch=0&upstream=nss-3.94.0-9.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.mozilla.org/projects/security/pki/nss/",
      "licenseDeclared": "MPLv2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Network Security Services Utilities Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.94.0-9.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.5.6",
      "name": "openssl-libs",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c8c19a74b9e9791bab592e1e581bbcdf43a5e8d05a705ecd6acd3cc2c130ce17"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=x86_64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.5.6-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-p11-kit-0.25.0",
      "name": "p11-kit",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "65ca7c1cb69a9cc84414fcab476b35451c3d7d5712176885f2bf461dce385f79"
        }
      ],
      "description": "Provides a way to load and enumerate PKCS#11 modules.\nProvides a standard configuration setup for installing\nPKCS#11 modules in such a way that they're discoverable.\nAlso solves problems with coordinating the use of PKCS#11\nby different components or libraries living in the same process.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/p11-kit@0.25.0-2.oe2403sp4?arch=x86_64&epoch=0&upstream=p11-kit-0.25.0-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://p11-glue.freedesktop.org/p11-kit.html",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Provides a way to load and enumerate PKCS#11 modules.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.25.0-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-shadow-4.14.3",
      "name": "shadow",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "49ea9d38ddfc89bf9cf410144bc9d0acd7a6656b851e7cdcbc763c7fde81669f"
        }
      ],
      "description": "This package includes the necessary programs for converting plain\npassword files to the shadow password format and to manage user and\ngroup accounts.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/shadow@4.14.3-8.oe2403sp4?arch=x86_64&epoch=2&upstream=shadow-4.14.3-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://pkg-shadow.alioth.debian.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Tools for managing accounts and shadow password files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:4.14.3-8.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-sqlite-3.42.0",
      "name": "sqlite",
      "licenseConcluded": "Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b74f9c04e802f1d9b8f29a4f7d4df65e05aeeeb3f0c41daea644b8196bf15d6d"
        }
      ],
      "description": "SQLite is a C-language library that implements a small, fast, self-contained,\nhigh-reliability, full-featured, SQL database engine. SQLite is the most used\ndatabase engine in the world. SQLite is built into all mobile phones and most\ncomputers and comes bundled inside countless other applications that people\nuse every day.It also include lemon and sqlite3_analyzer and tcl tools.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sqlite@3.42.0-6.oe2403sp4?arch=x86_64&epoch=0&upstream=sqlite-3.42.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.sqlite.org/",
      "licenseDeclared": "Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Embeded SQL database",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.42.0-6.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-softhsm-2.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15"
    },
    {
      "spdxElementId": "SPDXRef-rpm-softhsm-2.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-softhsm-2.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-softhsm-2.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-softhsm-2.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-softhsm-2.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-nss-util-3.94.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-softhsm-2.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.5.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-softhsm-2.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-p11-kit-0.25.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-softhsm-2.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-shadow-4.14.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-softhsm-2.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-sqlite-3.42.0"
    }
  ]
}