Commit Graph

1480 Commits

Author SHA1 Message Date
Alessio Di Mauro 2e6702c5bb Merge pull request #90 from acdha/patch-1
Improve SSH with PIV and PKCS11 instructions
2016-10-03 15:18:04 +02:00
Chris Adams 002c291c31 Improve SSH with PIV and PKCS11 instructions for newbies
I kept some notes for things which I ran into while getting my system configured and working on private documentation:

* Explain how to use a non-default management key
* Explain why `-A RSA4096` isn't an option
* Remove `-P 123456` from the self-sign step to avoid encouraging people to leak their PIN into shell history files; `yubico-piv-tool` will securely prompt for the PIN by default
* Avoid forcing line-wrapping in shell examples, which complicated shell editing
* Show Mac Homebrew users how to reliably determine the opensc lib path
2016-09-30 16:38:03 -04:00
Klas Lindfors 0cf321d0fd Merge pull request #87 from fredemmott/patch-1
Update documentation on ssh-agent on macos
2016-09-23 13:00:07 +02:00
Klas Lindfors e2b07664aa apprently the travis libtool can get broken and need re-install 2016-09-23 12:51:18 +02:00
Klas Lindfors 1bc8a3fb14 add libtool for osx build 2016-09-23 11:22:25 +02:00
Klas Lindfors 9714414635 do autoreconf after adding packages and set -e for travis 2016-09-23 10:29:50 +02:00
Fred Emmott dce091aba7 Update documentation on ssh-agent on macos
Works fine on clean installs of sierra - just needs opensc from homebrew
2016-09-22 23:23:25 -07:00
Klas Lindfors 8bdf7378d6 fixup dependencies for yubico-piv-tool.1
should now support parallel builds
2016-09-12 09:54:04 +02:00
Klas Lindfors 621bad8acd make sure to return RSA keys with ASN1_NULL as parameter 2016-08-17 10:32:04 +02:00
Klas Lindfors f2069418d2 bump versions 2016-08-12 16:04:22 +02:00
Klas Lindfors d504180230 release 1.4.2 2016-08-12 15:48:26 +02:00
Simon Josefsson 4e5ba7c0c3 Markup fixes. 2016-08-12 15:47:11 +02:00
Simon Josefsson d2527a1245 Whitespace fix. 2016-08-12 15:46:32 +02:00
Simon Josefsson 61c71d16a3 Doc fixes. 2016-08-12 15:45:40 +02:00
Simon Josefsson e54176d530 Drop cflags since this "library" doesn't have any public header files. 2016-08-12 15:39:25 +02:00
Simon Josefsson 1b453e0f38 We modified it => add license header. 2016-08-12 15:38:31 +02:00
Simon Josefsson 4937270a13 Don't install ykcs11-version.h. 2016-08-12 15:37:33 +02:00
Simon Josefsson 89bec1260a Improve license headers. 2016-08-12 15:30:06 +02:00
Simon Josefsson b41e73b8c6 Improve doc. 2016-08-12 15:18:28 +02:00
Klas Lindfors 8e7a2796b9 if CRYPTOKI_EXPORTS is not defined don't add __declspec
this messes up the windows build since we're already using libtool for
the exports.
2016-08-12 15:09:49 +02:00
Klas Lindfors 56cb376b3c drop ykcs11_check_version() that was never used or exported 2016-08-12 14:46:13 +02:00
Klas Lindfors c5f60bac4f fixup license header of Makefile.am 2016-08-12 14:03:42 +02:00
Klas Lindfors e7b4fc6ccf switch out the pkcs11 headers for the SCUTE pkcs11 header from opensc
create pkcs11y.h for our additional things
2016-08-12 14:00:15 +02:00
Klas Lindfors fead011e71 add copyright and license header 2016-08-12 13:37:56 +02:00
Klas Lindfors 151fe5b617 enable asm for windows openssl builds
also choose the correct target for 32bits
2016-08-12 09:49:25 +02:00
Klas Lindfors 0d7854540e correct license on ykcs11 files 2016-08-11 15:46:47 +02:00
Alessio Di Mauro 89d8a60876 Return CKR_FUNCTION_FAILED for unimplemented func
Closes #84
2016-08-11 14:41:12 +02:00
Klas Lindfors 09f42ead70 bump versions 2016-08-11 14:38:15 +02:00
Klas Lindfors 9d8525d4bf NEWS for 1.4.1 2016-08-11 14:28:26 +02:00
Alessio Di Mauro 9313cde7eb Fix a few typos in the documentation 2016-08-11 09:33:59 +02:00
Klas Lindfors 572b04a77c bump windows and mac builds to 1.0.2h 2016-08-10 11:11:29 +02:00
Klas Lindfors b052250a1b make certificate serial number random by default 2016-08-10 10:12:32 +02:00
Alessio Di Mauro a3c9f6965a Add link to ssh-keygen manpage for User SSH certs 2016-08-01 09:29:56 +02:00
Alessio Di Mauro fac5739fed Fix typo 2016-07-29 10:46:36 +02:00
Alessio Di Mauro 4e5cd956c9 Fix a few typos
Obligatory after-push typo.
2016-07-29 10:42:18 +02:00
Alessio Di Mauro b596a806a3 Add doc on SSH User certificates 2016-07-29 10:20:45 +02:00
Alessio Di Mauro 3f4cb12702 Add SSH export for RSA public key 2016-07-12 13:54:22 +02:00
Oscar e8720c5023 Merge pull request #78 from Yubico/oscarso-patch-1
Supplying --key when management key value is longer the default value
2016-06-28 17:42:10 -07:00
Oscar 45ca5e3ecb Update Windows_certificate.adoc 2016-06-28 17:39:11 -07:00
Oscar 2325734150 Update Windows_certificate.adoc 2016-06-28 17:30:56 -07:00
Oscar 1f5fa49ba3 Supplying --key at the generate command
Supply the management key value during generate key if it has ever been modified
2016-06-28 17:07:10 -07:00
Klas Lindfors 4720090533 fix wording 2016-06-29 01:12:22 +02:00
Klas Lindfors 6f7deaa882 use >> when adding to a file 2016-05-31 10:19:31 +02:00
Klas Lindfors 30b6b1c8a5 add text about verifying an attestation 2016-05-31 09:35:08 +02:00
Klas Lindfors 31370f88b1 link and headings 2016-05-24 15:41:07 +02:00
Klas Lindfors 0f1fe34c28 move extensions used to other attestation doc 2016-05-24 15:28:08 +02:00
Klas Lindfors 563e2efe9f make NEWS for 1.4.0 clearer 2016-05-16 09:29:36 +02:00
Klas Lindfors 08b1ed3f2b Merge pull request #75 from mscherer/add_sw_const
Replace magic number for status word by constants
2016-05-09 09:46:29 +02:00
Michael Scherer 24534bcfcf Replace magic number for status word by constants
Most come from NIST special publication 800-73-4, section 5.6,
except one which I assume to be a custom one for yubikey.
2016-05-09 09:38:37 +02:00
Klas Lindfors bbde9f91f9 Merge branch 'fix_typo' of ssh://github.com/mscherer/yubico-piv-tool into mscherer-fix_typo 2016-05-09 09:01:28 +02:00