james/age-plugin-yubikey
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
230 Commits 1 Branch 11 Tags
v0.4.1
Commit Graph

17 Commits

Author SHA1 Message Date
Jack Grigg 62f237f859 Provide a better error message when management key authentication fails 
We now indicate to the user that AES management key algorithms are not
yet supported, and tell them how to change their management key to use
TDES.

Closes str4d/age-plugin-yubikey#135.
 2023-04-09 06:53:25 +00:00
Jack Grigg ac04615219 Ignore smart cards that don't have a PIV applet 
Closes str4d/age-plugin-yubikey#78.
 2023-03-23 14:33:13 +09:00
str4d d9c5abaa15 Merge pull request #128 from str4d/115-yubikey-4-no-pin-cache 
Document and warn that PIN policy "Once" doesn't work for YubiKey 4
 2023-02-16 18:34:11 +00:00
Jack Grigg e86cd8113c Intercept PIN errors and replace with PUK errors as necessary 
Once iqlusioninc/yubikey.rs#479 is part of a `yubikey` release we
can migrate to, this will mean that users get correctly notified
of incorrect PUK entry, instead of being told it is an incorrect
PIN issue.
 2023-02-12 20:47:58 +00:00
Jack Grigg 4e053b5efc TUI: Warn YubiKey 4 users of issue with PIN policy "Once" 2023-02-11 22:04:14 +00:00
Jack Grigg 665aedbbba Merge branch 'version-0.3.3' back into main 2023-02-11 04:51:58 +00:00
Jack Grigg d2132b4ac2 Prevent changing the default PIN to itself 
Closes str4d/age-plugin-yubikey#120.
 2023-02-11 02:47:55 +00:00
Jack Grigg b1710e8d69 Enforce correct PIN lengths during YubiKey setup 
The behaviour of `age-plugin-yubikey` during setup now matches its
behaviour during plugin usage.
 2023-01-29 23:00:46 +00:00
Jack Grigg 45f6580be4 Request PIN before certificate generation if PIN policy is "always" 
We also correctly ask for a PIN touch after the key is generated (which
does not need it) but before certificate generation (which does if the
touch policy is not "none").

Closes str4d/age-plugin-yubikey#101.
 2023-01-03 02:20:51 +00:00
vlkrs 9ac72cd66f Add recommendations for {Open,Free}BSD when pcscd isn't running. 2023-01-01 15:30:40 +01:00
Jack Grigg 647a620a9c Clarify that non-TDES management keys are unsupported 
Supporting them is blocked on iqlusioninc/yubikey.rs#330.
 2022-12-30 10:39:34 +00:00
Jack Grigg e4ef700263 Give guidance on reconfiguring YubiKeys with unprotected management keys 
Closes str4d/age-plugin-yubikey#21.
 2022-12-30 10:18:17 +00:00
Jack Grigg d38743a2fc Inform users when pcscd is required 
Closes str4d/age-plugin-yubikey#83.
 2022-12-29 05:09:47 +00:00
Jack Grigg f8314c5d6d Enable users to skip YubiKeys at plugging-in time 
This requires the `confirm` plugin command to be supported by the age
client; otherwise we fall back to the previous message-plus-timer
method.
 2022-05-01 15:14:36 +00:00
Jack Grigg 345c155bb4 Don't print message if YubiKey is waiting for touch 
The user call-to-action will instead be implemented on the client side,
where it can be done in a more forgiving way (allowing the user some
time to react before prompting them that it is waiting on the plugin).
 2022-05-01 14:47:55 +00:00
Jack Grigg a92a843e14 Tag all strings for translation 2022-05-01 14:40:05 +00:00
Jack Grigg c4fe3f6b1a Add support for translations 2022-05-01 11:49:06 +00:00