be8f37924d
pin policy code for generate and import-key
2015-06-24 15:25:59 +02:00
bc27d98bf7
better errors for generate on non-supported algorithm or slot
2015-06-24 13:22:02 +02:00
a73d708c25
add support for retired key objects
...
slots 82-95
2015-06-24 13:06:01 +02:00
c2621960a9
use IS_RSAKEY and IS_ECKEY macros, fix minor stuff for ECCP384
2015-06-24 13:06:00 +02:00
1541362866
add macros for IS_ECKEY and IS_RSAKEY, also fix tag on ECCP384
2015-06-24 13:06:00 +02:00
d06852959c
add sha384 hash and refactor some common patterns
2015-06-24 13:06:00 +02:00
f17d09f19c
start adding secp384r1
2015-06-24 13:06:00 +02:00
67543021cb
bump openssl version for windows build
2015-06-23 14:40:46 +02:00
3b434817c6
bump versions
2015-06-23 14:39:58 +02:00
3669e62bfb
NEWS for 1.0.0
2015-06-23 14:38:09 +02:00
7146451463
mark upcoming version as 1.0.0
...
fixes #22
2015-06-23 14:36:11 +02:00
6b4b3001c4
verify that e is 0x10001 on import
...
fixes #13
2015-06-23 14:28:44 +02:00
9bd32ff72c
drop --repo-token for coveralls
2015-05-25 20:23:33 +02:00
7f0d778e0c
Added yubikey-piv-manager to software list
2015-05-25 09:49:38 +02:00
18e057e58c
let RSA_public_encrypt() do the PKCS1 padding
...
noteworthy is that it will do pkcs1 type 2 padding
2015-05-19 15:11:30 +02:00
3d0ff7b969
add a test-decipher command
...
test-decipher will for rsa do public encrypt on a random string and let
the key decrypt
for ec it will generate a new ec key and do ecdh and confirm it gets the
same answer back
2015-05-19 14:22:26 +02:00
63345d1b3e
drop verbose prints from library
...
for ykpiv_verify() they're in tool as well.
2015-05-18 13:36:14 +02:00
8ce4ab4997
add newline at end of output
2015-05-08 13:49:32 +02:00
bf3fcc77fe
use a transation while sending and receiving data
2015-05-08 09:57:51 +02:00
df018b24b4
add more extensions for certificates in doc
2015-04-09 10:13:30 +02:00
4bd13b7254
mgm-key not needed for change-pin and change-puk
2015-04-07 07:58:17 +02:00
c6e0f71133
bump version
2015-03-23 10:28:21 +01:00
f44a155714
release 0.1.6
2015-03-23 10:20:11 +01:00
a9c8cb9fd3
drop openssl/err.h again
2015-03-20 14:17:51 +01:00
9db6d3d45a
replace EVP_MD_CTX_verify() stuff with RSA_verify()/ECDSA_verify()
...
since the EVP_MD_CTX stuff doesn't seem to exist on osx at all.
2015-03-20 14:04:26 +01:00
8ada864df9
NEWS for 0.1.6
2015-03-20 10:51:40 +01:00
f204987941
add a test-signature action
...
that takes a certificate in and does a signature with the given slot,
then verifying that signature with the given certificate.
2015-03-20 10:04:58 +01:00
ef1ee5a6f6
bump openssl version
2015-03-20 09:56:13 +01:00
b1cda2ffce
add missing }
...
that's why you should always build before push..
2015-03-19 15:52:20 +01:00
da1f61f23a
move up validation of pin-retries parameters
2015-03-19 14:54:23 +01:00
c85fd4eaa8
move more validation of parameters together
2015-03-19 14:52:38 +01:00
9124e82ea6
write version to output file
2015-03-19 14:43:13 +01:00
635729f339
call get_algorithm() to get the algorithm
...
as it was already implemented..
2015-03-19 14:37:59 +01:00
91ddd394e4
give a better link for PIV standards
2015-03-19 09:14:39 +01:00
24130c7154
mention version of gengetopt required
2015-03-19 09:00:55 +01:00
0f26a7c1e3
refactor dump_hex to drop some redundant code
2015-03-18 15:09:32 +01:00
cd1410a950
make parts of argument validation cleaner
2015-03-18 15:09:32 +01:00
9b6bf1b737
write action name instead of number
2015-03-18 15:09:32 +01:00
9d35d16e24
space to fix formatting
2015-03-18 09:27:30 +01:00
808670371f
add status to README
...
relates #17
2015-03-18 08:38:59 +01:00
ad3c92f7d2
break out after error
2015-03-17 15:00:54 +01:00
340c898dcb
print out slot/cert algorithm in status
...
relates #17
2015-03-17 14:20:13 +01:00
26d5c23090
write CHUID in status
...
relates #17
2015-03-17 13:59:29 +01:00
4552e8700c
write out number of pin tries left
...
references #17
2015-03-17 13:54:50 +01:00
16bc868d90
verify with NULL pin now reports tries without decrementing
2015-03-17 13:49:58 +01:00
572b3b1739
add status action and print certificate information
...
relates #17
2015-03-17 12:42:05 +01:00
35d75051b0
don't try to parse returned data if it was an error
2015-03-17 12:41:42 +01:00
e64952476d
add a read-certificate action
2015-03-17 10:40:37 +01:00
3f576f610f
Slight word tweak.
2015-03-05 12:44:38 +01:00
3f0e1b7869
add fasc.pl to the distribution
2015-02-20 22:45:57 +01:00
Klas Lindfors