c0f3a2f841
add length check to get_version ( #545 )
2023-12-20 07:42:27 -07:00
45915e5e5a
Make RsaKeyData::new fallible ( #517 )
...
Replaces unwraps with `Error::AlgorithmError`
2023-08-15 18:33:30 -06:00
78313360a1
Add clippy::unwrap_used lint ( #515 )
...
Lints for usages of `unwrap()` in the `yubikey` crate (not CLI yet).
Replaces them with `?` or `expect()` as the situation warrants.
2023-08-15 18:02:25 -06:00
d226209ea4
Use doc_auto_cfg ( #514 )
...
Removes manual feature annotations for docs.rs
2023-08-15 16:39:29 -06:00
de142256d0
Bump clippy to use Rust 1.71 ( #513 )
2023-08-15 16:31:13 -06:00
485d49a6c8
Make YubiKey::open() more robust ( #504 )
...
On systems with a physical card-reader, the previous implementation falsely
reports "multiple YubiKeys detected!", even if only one YubiKey is connected.
This change attempts to actually open each reader as a YubiKey, and only
reports "multiple YubiKeys" if it can actually open more than one.
Additionally, this change avoids resetting the YubiKeys in case we find more
than one.
2023-08-15 16:20:04 -06:00
6a1e1603ef
Use x509-cert certificate builder ( #495 )
...
Co-authored-by: Carl Wallace <carl@redhoundsoftware.com >
2023-08-14 18:31:39 -06:00
8cf18d2986
Bump rsa to 0.9.0 ( #502 )
2023-05-03 06:22:45 -06:00
0c7441a81e
Bump asymmetric crypto dependencies; MSRV 1.65 ( #490 )
...
Bumps the following dependencies to the latest versions:
- `elliptic-curve` v0.13
- `k256` v0.13
- `p256` v0.13
- `p384` v0.13
- `pbkdf2` v0.12
- `rsa` v0.9.0-pre.0
- `signature` v2
2023-03-14 11:53:00 -06:00
a50addc15b
Fix StatusWords::code output for StatusWords::VerifyFailError ( #479 )
...
* Fix `StatusWords::code` output for `StatusWords::VerifyFailError`
Closes iqlusioninc/yubikey.rs#473 .
* Refactor `Transaction::transfer_data` to match on `StatusWords`
This makes the code more reliable, such that it would have avoided
the bug in iqlusioninc/yubikey.rs#473 .
2023-02-12 12:02:22 -07:00
0809f300b7
Return errors from YubiKey::open_by_serial that indicate a key may exist ( #477 )
...
* Return errors from `YubiKey::open_by_serial` that indicate a key may exist
The only such error at the moment is `pcsc::Error::SharingViolation`, which
indicates a transient failure to access a specific reader that could have
been the one we needed (and so a future retry might succeed).
Closes iqlusioninc/yubikey.rs#458 .
* Avoid resetting unused devices in YubiKey::open_by_serial
We only connect to readers so that we can determine their serial. We
now try to ensure that the order in which we connect to them doesn't
have an effect on their state after we are done.
2023-02-12 10:22:05 -07:00
d55079f9a6
Enable library users to detect if a smart card doesn't support PIV ( #476 )
...
* Enable library users to detect if a smart card doesn't support PIV
Closes iqlusioninc/yubikey.rs#456 .
* Avoid resetting the card if we fail to select PIV or fetch version/serial
2023-02-12 10:20:34 -07:00
10241230b3
Raise minimum pcsc version to remove workaround ( #478 )
...
In iqlusioninc/yubikey.rs#88 we added a workaround for what turned out
to be a bug in `pcsc`, where an error was returned if no readers were
available, instead of returning an empty iterator. `pcsc 2.3.1` was
published in 2019, so we can safely rely on it.
2023-02-12 10:18:55 -07:00
0c2633ab31
transaction: comment cleanup in get_serial ( #467 )
...
Moves comments about each YubiKey version number above the arms of the
`match` expression
2023-01-07 13:35:52 -08:00
f49c617a9d
Improve parsing of serial numbers ( #466 )
...
Checks the length of the data returned when querying the serial number,
returning an error if it's longer than 4 bytes, and left-padding with
zeroes if it's too short.
This fixes some potential panics due to incorrect slice lengths as were
experienced in #465
2023-01-07 08:35:37 -08:00
18eb4bf4f4
Add YubiKey::disconnect ( #462 )
...
This exposes `pcsc::Card::disconnect` to allow alternate disposition
methods.
2023-01-02 10:15:31 -08:00
10941bfb5b
Add partial Debug impls for Context and YubiKey ( #457 )
...
This enables `yubikey::Result<T>` to be debug-formatted, for example
when wrapping the output of an API method in `dbg!()`.
2023-01-01 11:16:10 -07:00
d880faaefa
yubikey v0.7.0 ( #444 )
2022-11-14 15:53:00 -08:00
cc00a10c2f
img: add logo-sq.png ( #445 )
...
Square logo for use with rustdoc
2022-11-14 15:15:19 -08:00
0a2e798894
Switch from subtle-encoding to base16ct ( #443 )
2022-11-14 14:26:07 -08:00
0071566097
feat: fixed incorrect issuer for certificates & added x509 prints ( #437 )
2022-11-14 10:42:07 -08:00
603b102932
Followups from #371 ( #435 )
...
Implements the changes I suggested in that PR, which are related to
naming conventions and documentation.
2022-11-12 15:41:58 -08:00
4310cc0f9a
Fix build and clippy warnings ( #433 )
2022-11-12 13:15:42 -08:00
87ed7b2338
Adds support for metadata command ( #371 )
...
On firmware 5.4.3, yubikey introduced a metadata command. This returns
the policy attached to as slot as well as the public key of the pair in
the slot.
https://docs.yubico.com/yesdk/users-manual/application-piv/apdu/metadata.html
2022-11-12 11:12:10 -08:00
bbb186f95e
Display inner PC/SC errors ( #420 )
2022-10-31 15:00:21 -07:00
3463d109b2
Bump der-parser to v8; x509-parser to v0.14 ( #402 )
2022-08-10 15:19:21 -07:00
498de4c10d
Adding some common traits for certain enum types to support maps. ( #372 )
2022-08-10 14:34:58 -07:00
9e20ecfe55
RustCrypto crate upgrades; MSRV 1.57 ( #378 )
...
Updates all of the RustCrypto dependencies to the latest versions:
- `des` v0.8
- `elliptic-curve` v0.12
- `hmac` v0.12
- `num-bigint-dig` v0.8
- `pbkdf2` v0.11
- `p256` v0.11
- `p384` v0.10
- `rsa` v0.6
- `sha1` v0.10 (replacing `sha-1`)
- `sha2` v0.10
2022-05-23 20:04:12 -07:00
83de59983f
Add Display formatter to SlotId ( #353 )
2022-02-11 13:10:53 -08:00
935fea0868
Bump p256 => v0.10; p384 => v0.9 ( #344 )
2022-01-17 15:08:48 -08:00
dd4b1c60a4
2021 edition upgrade; MSRV 1.56 ( #343 )
...
Changes the `edition` to 2021 in both the `yubikey` and `yubikey-cli`
crates.
Removes `TryFrom`/`TryInto` imports, now that they're in the prelude.
2022-01-17 14:54:01 -08:00
74a50f0f0c
Bump dependencies & fix security audit ( #340 )
...
* Bump dependencies & fix security audit
* allow dead code for issuer field #[allow(dead_code)] in Certificates struct
2022-01-10 08:40:58 -07:00
edf74871ba
yubikey v0.5.0 ( #327 )
2021-11-21 07:42:39 -08:00
52107281df
nom 7 ( #322 )
2021-10-19 06:38:38 -07:00
54ce90d51d
Update dependencies ( #315 )
...
* Update rsa dependency to 0.5
* Update pbkdf dependency to 0.9
* Update x509-parser dependency to 0.11
* Update crypto-bigint subdepdendency to 0.2.6
2021-09-10 10:44:59 -07:00
ac72797d1f
yubikey v0.4.2 ( #291 )
2021-07-13 06:35:53 -07:00
fdd3b8730a
Make yubikey::Buffer a pub type ( #290 )
2021-07-13 06:05:24 -07:00
d51ec0a225
Have YubiKey::block_puk take &mut self as argument ( #289 )
...
This is effectively the same signature; it just uses `self` instead of a
named argument.
2021-07-13 05:55:24 -07:00
d601c33ba3
yubikey v0.4.1 ( #288 )
2021-07-12 19:37:12 -07:00
8e52d75992
Rename Ccc to CccId ( #287 )
2021-07-12 19:28:46 -07:00
42ae5fb974
Rename SettingValue to Setting. ( #286 )
...
Breaking change, but the crate is fresh and there's time to yank and
republish.
2021-07-12 17:36:42 -07:00
92f770805f
yubikey v0.4.0 ( #283 )
2021-07-12 14:02:59 -07:00
563f6f9ccc
Extract consts module ( #282 )
...
Extracts miscellaneous constants that were floating around in the
toplevel into their own module.
2021-07-12 12:54:54 -07:00
5f418bbd1d
Doc improvements and minor cleanups ( #281 )
2021-07-12 11:57:42 -07:00
47776ebf0b
Fix parsing local DoS ( #279 )
...
Closes #152
Adds additional checks when parsing TLV records to ensure panic-free
operation.
2021-07-12 11:19:26 -07:00
227518dd1b
Rename readers module to reader; Readers => Context ( #278 )
...
Renames the `readers` module to be singular: `reader`.
Renames the former `readers::Readers` struct to `reader::Context`.
2021-07-12 11:01:12 -07:00
e6cea2eca6
Rename key module to piv ( #277 )
...
Now that the crate is named `yubikey` rather than `yubikey-piv`, it
makes more sense to call this module out as PIV-related functionality.
2021-07-12 10:42:55 -07:00
e249e91297
Replace getrandom with rand_core ( #276 )
...
`rand_core::OsRng` provides a facade over `getrandom` which simplifies
error handling.
2021-07-12 09:58:58 -07:00
1765e11bc0
Flatten API ( #274 )
...
Re-exports types from the toplevel instead of placing them in individual
modules (often which only contain one type).
This makes the API easier for users to navigate, while still retaining
the same module structure internally.
Additionally, this commit uses the `uuid` crate for modeling UUIDs.
2021-07-12 08:40:31 -07:00
1228d16439
Rename settings::BoolValue => ConfigValue; refactor/cleanup ( #272 )
...
Renames the type used for storing a configuration setting.
Also changes the internal functions to use `Option<ConfigValue>` as the
return value, rather than comparing to a default value, which makes them
slightly more idiomatic.
2021-07-11 14:53:54 -07:00
Carl Wallace