e6a7517050
add a new hidden flag --stdin-input for straight stdin input
2017-04-18 13:05:27 +02:00
89bec1260a
Improve license headers.
2016-08-12 15:30:06 +02:00
b052250a1b
make certificate serial number random by default
2016-08-10 10:12:32 +02:00
3f4cb12702
Add SSH export for RSA public key
2016-07-12 13:54:22 +02:00
ebf31d73f8
Merge branch 'attestation2'
2016-05-03 09:24:14 +02:00
abbd695ee1
change wording in help text
...
authentication key -> management key
2016-03-31 10:36:48 +02:00
9fcf2196b2
clarify --new-key
2016-03-18 08:35:48 +01:00
7aa6ac93e6
add touch-policy cached
2016-03-17 10:52:03 +01:00
bfc3185e9b
Merge branch 'master' into attestation2
2016-03-10 15:34:25 +01:00
f91cf3379a
Add a --serial parameter to yubico-piv-tool.
...
Allows the serial number of self signed certificates to be configured.
2016-02-10 17:40:12 -06:00
98f843e7e7
Add a --valid-days parameter to yubico-piv-tool.
...
Allows the expiration date (notAfter) value of self signed certificates to be configured.
2016-02-10 17:35:21 -06:00
30cc13aaff
add format for read/write object as hex/base64/binary
...
relates #31
2015-12-15 10:22:11 +01:00
a4ee5725b8
add generic write and read object actions for the tool
...
this take in/out hex dump of the data
2015-12-14 10:55:32 +01:00
70e181a860
add a new action set-ccc
...
change aroudn so set_chuid() becomes set_dataobject() and a bit more
generic
fixes #33
2015-12-03 08:18:27 +01:00
32e66f4fc6
add attest action
2015-11-18 13:42:11 +01:00
0dc8d13922
add f9 slot for attestation
2015-11-18 13:20:41 +01:00
e4059a5995
Merge branch 'master' into development
...
Conflicts:
NEWS
configure.ac
2015-10-20 20:48:57 +02:00
777b40b3c2
read key from stdin if no key is given as argument
2015-10-09 11:14:58 +02:00
8eb7595d42
add list-readers action to tool
...
also refactor ykpiv_list_readers() a bit
2015-09-08 12:26:42 +02:00
2e91cd0f5b
Merge branch 'master' into devel/p384
2015-07-08 15:09:11 +02:00
3b080dca45
relicense to 2-clause BSD license
2015-07-01 16:34:20 +02:00
a775ac6e69
move around texts for help
2015-06-30 07:46:21 +02:00
600b302c1d
add touch for set-mgm-key
2015-06-25 12:32:01 +02:00
ca6a355b5d
add touch tlv for generate and import-key
2015-06-25 12:04:05 +02:00
be8f37924d
pin policy code for generate and import-key
2015-06-24 15:25:59 +02:00
a73d708c25
add support for retired key objects
...
slots 82-95
2015-06-24 13:06:01 +02:00
d06852959c
add sha384 hash and refactor some common patterns
2015-06-24 13:06:00 +02:00
f17d09f19c
start adding secp384r1
2015-06-24 13:06:00 +02:00
3d0ff7b969
add a test-decipher command
...
test-decipher will for rsa do public encrypt on a random string and let
the key decrypt
for ec it will generate a new ec key and do ecdh and confirm it gets the
same answer back
2015-05-19 14:22:26 +02:00
f204987941
add a test-signature action
...
that takes a certificate in and does a signature with the given slot,
then verifying that signature with the given certificate.
2015-03-20 10:04:58 +01:00
572b3b1739
add status action and print certificate information
...
relates #17
2015-03-17 12:42:05 +01:00
e64952476d
add a read-certificate action
2015-03-17 10:40:37 +01:00
368b527fa1
add DER format for certificate import
2014-12-05 11:10:33 +01:00
3dce5b06e0
Add support for compressed certificates
...
This could be more sophisticated — it could automatically compress
certificates if they are too large, instead of expecting the user to do
so manually. But this is a good start.
2014-11-07 19:55:08 +00:00
7d28857388
move the signer into the standard tool
...
as a hidden option to discourage use
2014-10-02 13:15:39 +02:00
f19405fdb1
move the cli stuff to subdir tool
2014-06-16 09:40:22 +02:00
Klas Lindfors