4bbd888f97
let ykpiv_connect() call ykpiv_list_readers()
2015-09-08 12:29:07 +02:00
8eb7595d42
add list-readers action to tool
...
also refactor ykpiv_list_readers() a bit
2015-09-08 12:26:42 +02:00
1a9e62cec8
drop ykpiv_connect2() and add ykpiv_list_readers()
2015-09-07 15:54:57 +02:00
984a124508
Merge branch 'master' into ykcs11
...
Conflicts:
NEWS
configure.ac
2015-09-07 14:34:34 +02:00
8c411f4473
ignore
2015-09-07 14:33:26 +02:00
b770155cbb
Merge branch 'devel/p384' into ykcs11
...
Conflicts:
NEWS
configure.ac
lib/ykpiv.c
lib/ykpiv.h
tool/util.c
tool/util.h
2015-09-07 14:32:37 +02:00
1b8d819cc2
bump versions
2015-09-04 09:22:32 +02:00
f511a3730d
NEWS for 1.0.2
2015-09-04 09:13:34 +02:00
ee2a364c15
More cleanup.
2015-09-02 16:06:50 +02:00
c13426a2e8
Fixed typo.
2015-09-02 11:49:17 +02:00
f646ec9dde
Added key import.
2015-09-01 16:16:47 +02:00
d2cefc66b7
Initial stab at private key import.
2015-08-28 17:15:11 +02:00
5ca058bdfa
Added certificate import
2015-08-28 13:47:57 +02:00
d7f5dd35f4
Squalch more warnings.
2015-08-26 16:59:03 +02:00
25110ec122
Remove some warnings.
2015-08-26 16:58:45 +02:00
5a2c00deb7
Add of DigestInit.
2015-08-26 16:58:45 +02:00
5f306a8d1c
Fixed x509 certificate created during generation to comply with OpenSSL
...
1.0.1i more strict rules.
2015-08-26 10:55:29 -04:00
f776ac58a3
Strip DER encoding from EC signatures.
2015-08-24 17:39:00 +02:00
e2c4e9fc2e
Use longer buffer to store the signature.
2015-08-24 14:20:01 +02:00
4fec806335
Add support for ECDSA_SHA256.
2015-08-24 13:05:27 +02:00
da29e6947c
authentication failed is supposed to be 0x63cX not 0x630X
...
so mask everything but the low 4 bits for remaining tries
2015-08-24 08:28:49 +02:00
3150a36988
More debug messages.
2015-08-21 15:57:28 +02:00
5a069f1077
Temporary fix for multiple logins.
2015-08-21 15:41:32 +02:00
0184424f3f
Add debug messages for failed login.
2015-08-21 14:10:38 +02:00
5d7f0b3d93
Removed nspr stuff.
2015-08-21 13:20:31 +02:00
0c3c9c5a00
Close the operation after sign is done.
2015-08-21 10:42:43 +02:00
2420874125
More debug messages and precondition checks.
2015-08-21 10:42:43 +02:00
8fa6ff8edb
Use buffer length while storing cert.
2015-08-21 10:42:43 +02:00
6cbdbc3c14
More debug messages and precondition checks.
2015-08-21 10:42:43 +02:00
255815d78f
Skip PIN initialization.
2015-08-21 10:42:43 +02:00
4542a4506b
Skip token initialization.
2015-08-21 10:42:43 +02:00
f27ca3837c
Add more precondition checks and debug messages.
2015-08-21 10:42:43 +02:00
8618469619
Fixed PSS (still untested).
2015-08-21 10:42:43 +02:00
2764846bb6
add mac install_name_tool fixes for ykcs11 build
2015-08-21 10:32:40 +02:00
7573c05c82
fixup filenames and add missing headers
2015-08-21 10:15:44 +02:00
cef514eb28
drop generated files
2015-08-21 10:05:14 +02:00
aabe4fb20e
Merge branch 'master' into ykcs11
...
Conflicts:
lib/ykpiv.c
lib/ykpiv.h
2015-08-20 09:30:49 +02:00
81f3b608fd
continue looping over the readers if one fails during setup
...
also continues if a reader fails when selecting (no applet)
2015-08-20 09:25:18 +02:00
cd1e67021d
Removed unnecessary line.
2015-08-19 16:21:40 +02:00
bb4ed22315
Fixed RSA_X_509 padding.
2015-08-19 15:41:41 +02:00
a792e16333
Fixed unhashed sign mechanisms.
2015-08-19 15:20:27 +02:00
6a60c779da
More free.
2015-08-19 13:23:01 +02:00
89a212c831
Merge pull request #26 from syzzer/query-for-pin
...
Query for PIN/PUK/mgmt-key if not supplied on command line
2015-08-13 14:35:08 +02:00
723fe2f405
Query for PIN/PUK/mgmt-key if not supplied on command line
...
Do not force a user to specify the PIN/PUK/mgmt-key on the command line.
Instead, query the user to supply them through stdin when required for
the requested operation. This is both more user friendly and more
secure, since the secrets do not end up in the shell history and/or
visible to shoulder-surfers on the terminal.
Signed-off-by: Steffan Karger <steffan@karger.me >
2015-08-12 23:05:44 +02:00
de083bb27a
Fixed wrong free.
2015-08-12 17:05:47 +02:00
9c082be082
Added simple logout function.
2015-08-12 16:05:03 +02:00
df2ff3cd51
Fixed pkcs1.5 padding
2015-08-12 15:41:58 +02:00
4010ebbb91
Update object in the session (when the object wasn't there to begin with).
2015-08-11 16:54:25 +02:00
2a6acc5259
Update object in the session after key creation (if object already exists).
2015-08-11 16:28:59 +02:00
bf56cd8f30
Added certificate import on key generation.
2015-08-11 14:12:34 +02:00
Klas Lindfors