james/yubikey.rs
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

add f9 slot for attestation

Browse Source
This commit is contained in:
Klas Lindfors
2015-11-18 13:20:41 +01:00
parent e07ddaf08b
commit 0dc8d13922
3 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/ykpiv.h
+2
View File
@@ -139,6 +139,8 @@ extern "C"
#define YKPIV_OBJ_RETIRED19 0x5fc11f #define YKPIV_OBJ_RETIRED19 0x5fc11f
#define YKPIV_OBJ_RETIRED20 0x5fc120 #define YKPIV_OBJ_RETIRED20 0x5fc120
#define YKPIV_OBJ_ATTESTATION 0x5fff01
#define YKPIV_INS_VERIFY 0x20 #define YKPIV_INS_VERIFY 0x20
#define YKPIV_INS_CHANGE_REFERENCE 0x24 #define YKPIV_INS_CHANGE_REFERENCE 0x24
#define YKPIV_INS_RESET_RETRY 0x2c #define YKPIV_INS_RESET_RETRY 0x2c
tool/cmdline.ggo
+1 -1
View File
@@ -36,7 +36,7 @@ option "action" a "Action to take" values="version","generate","set-mgm-key",
text " text "
Multiple actions may be given at once and will be executed in order Multiple actions may be given at once and will be executed in order
for example --action=verify-pin --action=request-certificate\n" for example --action=verify-pin --action=request-certificate\n"
option "slot" s "What key slot to operate on" values="9a","9c","9d","9e","82","83","84","85","86","87","88","89","8a","8b","8c","8d","8e","8f","90","91","92","93","94","95" enum optional option "slot" s "What key slot to operate on" values="9a","9c","9d","9e","82","83","84","85","86","87","88","89","8a","8b","8c","8d","8e","8f","90","91","92","93","94","95","f9" enum optional
text " text "
9a is for PIV Authentication 9a is for PIV Authentication
9c is for Digital Signature (PIN always checked) 9c is for Digital Signature (PIN always checked)
tool/util.c
+3
View File
@@ -262,6 +262,9 @@ int get_object_id(enum enum_slot slot) {
case slot_arg_95: case slot_arg_95:
object = YKPIV_OBJ_RETIRED20; object = YKPIV_OBJ_RETIRED20;
break; break;
case slot_arg_f9:
object = YKPIV_OBJ_ATTESTATION;
break;
case slot__NULL: case slot__NULL:
default: default:
object = 0; object = 0;