File yubikey-manager.changes of Package yubikey-manager

Overview Repositories Revisions Requests Users Attributes Meta

File yubikey-manager.changes of Package yubikey-manager (Revision 272097aa681626520a9a27a419182ed7)

Currently displaying revision 272097aa681626520a9a27a419182ed7 , Show latest

-------------------------------------------------------------------
Sun Mar 17 11:54:54 UTC 2024 - Dirk Müller <dmueller@suse.com>

- update to 5.3.0:
  * FIDO: Add new CLI commands for PIN management and
    authenticator config
    (force-change, set-min-length, toggle-always-uv, enable-
    ep-attestation).
  * PIV: Support new key types on supported devices (RSA
    3072/4096, Curve25519).
  * PIV: Support for moving and deleting keys on supported
    devices.
  * PIV: Improve handling of legacy "PUK blocked" flag.
  * PIV: Improve handling of malformed certificates.
  * PIV: Display key information in "piv info" output on
    supported devices.
  * OTP: Fix some commands incorrectly showing errors when
    used over NFC/CCID.
  * Add tab-completion YubiKey serial numbers and NRC
    readers.

-------------------------------------------------------------------
Fri Dec  1 09:48:48 UTC 2023 - Dirk Müller <dmueller@suse.com>

- update to 5.2.1:
  * Add support for Python 3.12.
  * OATH: detect and remove corrupted credentials.
  * Bugfix: HSMAUTH: Fix order of CLI arguments.
  * PIV: Support for compressed certificates.
  * OpenPGP: Use InvalidPinError for wrong PIN.
  * Add YubiHSM Auth application support.
  * Improved API documentation.
  * Scripting: Add name attribute to device.
  * Bugfix: PIV: don't throw InvalidPasswordError on
    malformed PEM private key.
  * Bugfix: PIV: string representation of SLOT caused
    infinite loop on Python <3.11.
  * Bugfix: Fix errors in 'ykman config nfc' on YubiKeys
    without NFC capability.
  * Bugfix: Fix error message shown when invalid modhex input
    length given for YubiOTP.
  * Add OpenPGP functionality to supported API.
  * Add PIV key info command to CLI.
  * PIV: Support signing prehashed data via API.
  * Bugfix: Fix signing PIV certificates/CSRs with key that
    always requires PIN.
  * Bugfix: Fix incorrect display name detection for certain
    keys over NFC.
  * Bugfix: Fix the interactive confirmation prompt for some
    CLI commands.
  * Bugfix: OpenPGP Signature PIN policy values were swapped.
  * Bugfix: FIDO: Handle discoverable credentials that are
    missing name or displayName.
  * Add support for Python 3.11.
  * Remove extra whitespace characters from CLI into command
    output.
  * Various cleanups and improvements to the API.
  * Improvements to the handling of YubiKeys and connections.
  * Command aliases for ykman 3.x (introduced in ykman 4.0)
    have now been dropped.
  * Installers for ykman are now provided for Windows (amd64)
    and MacOS (universal2).
  * Logging has been improved, and a new TRAFFIC level has
    been introduced.
  * The codebase has been improved for scripting usage,
    either directly as a Python module, or via the new
    "ykman script" command.
  * PIV: Add support for dotted-string OIDs when parsing
    RFC4514 strings.
  * PIV: Drop support for signing certificates and CSRs with
    SHA-1.
  * FIDO: Credential management commands have been improved
    to deal with ambiguity in certain cases.
  * OATH: Access Keys ("remembered" passwords) are now stored
    in the system keyring.
  * OpenPGP: Commands have been added to manage PINs.
- add keyring for offline validation

-------------------------------------------------------------------
Mon Dec 19 18:58:06 UTC 2022 - Torsten Gruner <simmphonie@opensuse.org>

- Keep this version until version 5.0.0 or
  yubikey-manager-qt v1.2.4 and yubioath-desktop v5.1.0 was fixed
- Some small .spec file fixes

-------------------------------------------------------------------
Wed Oct  5 20:03:36 UTC 2022 - Torsten Gruner <simmphonie@opensuse.org>

- Update to version 4.0.9 (released 2022-06-17)
  * Dependency: Add support for python-fido2 1.x
  * Fix: Drop stated support for Click 6 as features from 7 are being used.

-------------------------------------------------------------------
Mon Mar 28 18:28:45 UTC 2022 - Torsten Gruner <simmphonie@opensuse.org>

- Update to version 4.0.8 (released 2022-01-31)
  * Bugfix: Fix error message for invalid modhex when programing a YubiOTP credential.
  * Bugfix: Fix issue with displaying a Steam credential when it is the only account.
  * Bugfix: Prevent installation of files in site-packages root.
  * Bugfix: Fix cleanup logic in PIV for protected management key.
  * Add support for token identifier when programming slot-based HOTP.
  * Add support for programming NDEF in text mode.
  * Dependency: Add support for Cryptography ⇐ 38.

-------------------------------------------------------------------
Thu Oct 14 07:03:48 UTC 2021 - pgajdos@suse.com

- version update to 4.0.7
  * Version 4.0.7 (released 2021-09-08)
   ** Bugfix release: Fix broken naming for "YubiKey 4", and a small OATH issue with
      touch Steam credentials.
  * Version 4.0.6 (released 2021-09-08)
   ** Improve handling of YubiKey device reboots.
   ** More consistently mask PIN/password input in prompts.
   ** Support switching mode over CCID for YubiKey Edge.
   ** Run pkill from PATH instead of fixed location.
  * Version 4.0.5 (released 2021-07-16)
   ** Bugfix: Fix PIV feature detection for some YubiKey NEO versions.
   ** Bugfix: Fix argument short form for --period when adding TOTP credentials.
   ** Bugfix: More strict validation for some arguments, resulting in better error messages.
   ** Bugfix: Correctly handle TOTP credentials using period != 30 AND touch_required.
   ** Bugfix: Fix prompting for access code in the otp settings command (now uses "-A -").

-------------------------------------------------------------------
Tue May 18 18:39:36 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>

- Update to version 4.0.3
  * Add support for fido reset over NFC.
  * Bugfix: The --touch argument to piv change-management-key was
    ignored.
  * Bugfix: Don’t prompt for password when importing PIV key/cert
    if file is invalid.
  * Bugfix: Fix setting touch-eject/auto-eject for YubiKey 4 and NEO.
  * Bugfix: Detect PKCS#12 format when outer sequence uses
    indefinite length.
  * Dependency: Add support for Click 8.

-------------------------------------------------------------------
Thu May  6 14:10:34 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>

- Update to version 4.0.2
  * Update device names
  * Add read_info output to the --diagnose command, and show
    exception types.
  * Bugfix: Fix read_info for YubiKey Plus.
  * Add support for YK5-based FIPS YubiKeys.
  * Bugfix: Fix OTP device enumeration on Win32.
  * Drop reliance on libusb and libykpersonalize.
  * Support the "fido" and "otp" subcommands over NFC
  * New "ykman --diagnose" command to aid in troubleshooting.
  * New "ykman apdu" command for sending raw APDUs over the smart
    card interface.
  * New "yubikit" package added for custom development and advanced
    scripting.
  * OpenPGP: Add support for KDF enabled YubiKeys.
  * Static password: Add support for FR, IT, UK and BEPO keyboard
    layouts.
- Drop now unneeded python3-six, python3-usb and
  libykpers-1-1 dependencies
- python3-pyOpenSSL is optional, so move from Requires to Recommends

-------------------------------------------------------------------
Tue Feb  4 09:58:35 UTC 2020 - Paolo Stivanin <info@paolostivanin.com>

- Update to 3.1.1
  * Add support for YubiKey 5C NFC
  * OpenPGP: set-touch now performs compatibility checks before prompting for PIN
  * OpenPGP: Improve error messages and documentation for set-touch
  * PIV: read-object command no longer adds a trailing newline
  * CLI: Hint at missing permissions when opening a device fails
  * Linux: Improve error handling when pcscd is not running
  * Windows: Improve how .DLL files are loaded, thanks to Marius Gabriel Mihai for reporting this!
  * Bugfix: set-touch now accepts the cached-fixed option
  * Bugfix: Fix crash in OtpController.prepare_upload_key() error parsing
  * Bugfix: Fix crash in piv info command when a certificate slot contains an invalid certificate
  * Library: PivController.read_certificate(slot) now wraps certificate parsing exceptions in new exception type InvalidCertificate
  * Library: PivController.list_certificates() now returns None for slots containing invalid certificate, instead of raising an exception

-------------------------------------------------------------------
Tue Dec 17 13:58:40 UTC 2019 - Martin Pluskal <mpluskal@suse.com>

- Use modern python macros for building
- Run tests

-------------------------------------------------------------------
Wed Aug 21 20:28:54 UTC 2019 - simmphonie@opensuse.org

- Version 3.1.0 (released 2019-08-20)
  * Add support for YubiKey 5Ci
  * OpenPGP: the info command now prints OpenPGP specification version as well
  * OpenPGP: Update support for attestation to match OpenPGP v3.4
  * PIV: Use UTC time for self-signed certificates
  * OTP: Static password now supports the Norman keyboard layout

-------------------------------------------------------------------
Sat Jun 29 20:32:49 UTC 2019 - Karol Babioch <kbabioch@suse.com>

- Version 3.0.0 (released 2019-06-24)
  * Add support for new YubiKey Preview and lightning form factor
  * FIDO: Support for credential management
  * OpenPGP: Support for OpenPGP attestation, cardholder certificates and
    cached touch policies
  * OTP: Add flag for using numeric keypad when sending digits

-------------------------------------------------------------------
Wed May 29 08:52:25 UTC 2019 - Karol Babioch <kbabioch@suse.de>

- Version 2.1.1 (released 2019-05-28)
  * OTP: Add initial support for uploading Yubico OTP credentials to YubiCloud
  * Don’t automatically select the U2F applet on YubiKey NEO, it might be
    blocked by the OS
  * ChalResp: Always pad challenge correctly
  * Bugfix: Don’t crash with older versions of cryptography
  * Bugfix: Password was always prompted in OATH command, even if sent as
    argument

-------------------------------------------------------------------
Mon Mar 11 15:10:02 UTC 2019 - Karol Babioch <kbabioch@suse.de>

- Version 2.1.0 (released 2019-03-11)
  * Add --reader flag to ykman list, to list available smart card readers
  * FIPS: Checking if a YubiKey FIPS is in FIPS mode is now opt-in, with the --check-fips flag
  * PIV: Add commands for writing and reading arbitrary PIV objects
  * PIV: Verify that the PIN must be between 6 - 8 characters long
  * PIV: In import-certificate, make the verification that the certificate and private key matches opt-in, with the --verify flag
  * PIV: The piv info command now shows the serial number of the certificates
  * PIV: The piv info command now shows the full Distinguished Name (DN) of the certificate subject and issuer, if possible
  * PIV: Malformed certificates are now handled better
  * OpenPGP: The openpgp touch command now shows current touch policies
  * The ykman usb/nfc config command now accepts openpgp as well as opgp as an argument
  * Bugfix: Fix support for german (DE) keyboard layout for static passwords
- Packaged man page

-------------------------------------------------------------------
Wed Jan  9 09:18:34 UTC 2019 - Karol Babioch <kbabioch@suse.de>

- Version 2.0.0 (released 2019-01-09)
  * Add support for Security Key NFC
  * Add experimental support for external smart card reader. See --reader flag
  * Add a minimal manpage
  * Add examples in help texts
  * PIV: update CHUID when importing a certificate
  * PIV: Optionally validate that private key and certificate match when importing a certificate (on by default in CLI)
  * PIV: Improve support for importing certificate chains and .PEM files with comments
  * Breaking API changes:
    * Merge CCID status word constants into a single SW enum in ykman.driver_ccid
    * Throw custom exception types instead of raw APDUErrors from many methods of PivController
    * Write CLI prompts to standard error instead of standard output
    * Replace function `ykman.util.parse_certificate` with `parse_certificates` which returns a list

-------------------------------------------------------------------
Mon Nov 12 09:15:25 UTC 2018 - Karol Babioch <kbabioch@suse.com>

- Added libykpers-1-1 as dependency (bsc#1115370)

-------------------------------------------------------------------
Wed Oct 10 08:38:58 UTC 2018 - Karol Babioch <kbabioch@suse.com>

- Version 1.0.1 (released 2018-10-10)
  * Support for YubiKey 5A
  * OATH: Ignore extra parameters in URI parsing
  * Bugfix: Never say that NFC is supported for YubiKeys without NFC

-------------------------------------------------------------------
Fri Sep 28 09:09:20 UTC 2018 - Karol Babioch <kbabioch@suse.com>

- Version 1.0.0 (released 2018-09-24)
  * Add support for YubiKey 5 Series
  * Config: Add flag to generate a random configuration lock
  * OATH: Give a proper error message when a touch credential times out
  * NDEF: Allow setting the NDEF prefix from the CLI
  * FIDO: Block reset when multiple YubiKeys are connected
- Applied spec-cleaner
- Removed explicit version dependencies

-------------------------------------------------------------------
Wed Jul 11 09:24:55 UTC 2018 - kbabioch@suse.com

- Version 0.7.1 (released 2018-07-09)
  * Support for YubiKey FIPS.
  * OTP: Allow setting and removing access codes on the slots.
  * Interfaces: set-lock-code now only accepts hexadecimal inputs.
  * Bugfix: Don't fail to open the YubiKey when the serial is not visible.
- Version 0.7.0 (released 2018-05-07)
  * Support for YubiKey Preview.
  * Add command to configure enabled applications over USB and NFC. See ykman config -h.
  * Add command for selecting which slot to use for NDEF. See ykman otp ndef -h.
- Applied spec-cleaner

-------------------------------------------------------------------
Tue Apr 17 07:18:29 UTC 2018 - kbabioch@suse.com

- Version 0.6.1
  * Support for YubiKeys with FIDO2. See ykman fido -h
  * Report the form factor for YubiKeys that support it.
  * OTP: slot command is now called otp. See ykman otp -h for all changes.
  * Static password: Add support for different keyboard layouts. See ykman otp static -h
  * PIV: Signatures for CSRs are now correct.
  * PIV: Commands on slots with PIN policy ALWAYS no longer fail if the YubiKey has a management key protected by PIN.
  * Mode: The U2F mode is now called FIDO.
  * Dependencies: libu2f-host is no longer used for FIDO communication over USB, instead the python library fido2 is used.
- Cleaned up spec file (spec-cleaner)

-------------------------------------------------------------------
Wed Feb 21 21:09:42 UTC 2018 - t.gruner@katodev.de

- Version 0.6.0 (released 2018-02-09)
  -  OpenPGP: Expose remaining PIN retries in info command and API.
  -  CCID: Only try YubiKey smart card readers by default.
  -  Handle NEO issues with challenge-response credentials better.
  -  Improve logging.
  -  Improve error handling when opening device over OTP.
  -  Bugfix: Fix adding OTP data through the interactive prompt.

-------------------------------------------------------------------
Wed Jan  3 19:16:35 UTC 2018 - t.gruner@katodev.de

- Version 0.5.0 (released 2017-12-15)
  -  API breaking changes:
     -  OATH: New API more similar to yubioath-android
  -  CLI breaking changes:
     -  OATH: Touch prompt now written to stderr instead of stdout
     -  OATH: -a|--algorithm option to list command removed
     -  OATH: Columns in code command are now dymanically spaced depending on contents
     -  OATH: delete command now requires confirmation or -f|--force argument
     -  OATH: IDs printed by list command now include TOTP period if not 30
     -  Changed outputs:
         -  INFO: "Device name" output changed to "Device type"
         -  PIV: "Management key is stored on device" output changed to "Management key is stored on the YubiKey"
         -  PIV: "All PIV data have been cleared from the device" output changed to "All PIV data have been cleared from your YubiKey"
         -  PIV: "The current management key is stored on the device" prompt changed to "The current management key is stored on the YubiKey"
         -  SLOT: "blank to use device serial" prompt changed to "blank to use YubiKey serial number"
         -  SLOT: "Using device serial" output changed to "Using YubiKey device serial"
         -  Lots of failure case outputs changed
  -  New features:
     -  Support for multiple devices via new top-level option -d|--device
     -  New top-level option -l|--log-level to enable logging
     -  OATH: Support for remembering passwords locally.
     -  OATH: New option -s|--single for code command
     -  PIV: set-pin-retries command now warns that PIN and PUK will be reset to factory defaults, and prints those defaults after resetting
  -  API bug fixes:
     -  OATH: valid_from and valid_to for Code are now absolute instead of relative to the credential period
     -  OATH: period for non-TOTP Code is now None

-------------------------------------------------------------------
Sat Dec 30 09:04:16 UTC 2017 - jengelh@inai.de

- Fix RPM groups.

-------------------------------------------------------------------
Wed Nov 15 19:29:13 UTC 2017 - t.gruner@katodev.de

- Version 0.4.6 (released 2017-10-17)
  - Will now attempt to open device 3 times before failing
  - OpenPGP: Don’t say data is removed when not
  - OpenPGP: Don’t swallow APDU errors
  - PIV: Block on-chip RSA key generation for firmware versions 4.2.0 to 4.3.4 (inclusive) since these chips are vulnerable to CVE-2017-15631.

- Version 0.4.5 (released 2017-09-14)
  - OATH: Don’t print issuer if there is no issuer.

- Version 0.4.4 (released 2017-09-06)
  - OATH: Fix yet another issue with backwards compability, for adding new credentials.

- Version 0.4.3 (released 2017-09-06)
  - OATH: Fix issue with backwards compability, when used as a library.

- Version 0.4.2 (released 2017-09-05)
  - OATH: Support 7 digit credentials.
  - OATH: Support credentials with a period other than 30 seconds.
  - OATH: The remove command is now called delete.

- Version 0.4.1 (released 2017-08-10)
  - PIV: Dropped support for deriving a management key from PIN.
  - PIV: Addded support for generating a random management key and storing it on the device protected by the PIN.
  - OpenPGP: The reset command now handles a device in terminated state.
  - OATH: Credential filtering is now working properly on Python 2.

- Version 0.4.0 (released 2017-06-19)
  - Added PIV support. The tool and library now supports most of the PIV functionality found on the YubiKey 4 and NEO. To list the available commands, run ykman piv -h.
  - Mode command now supports adding and removing modes incrementally.

-------------------------------------------------------------------
Mon May 15 13:07:17 UTC 2017 - t.gruner@katodev.de

- Initial Release 0.3.3

Places

File yubikey-manager.changes of Package yubikey-manager (Revision 272097aa681626520a9a27a419182ed7)

Places