File yubikey-manager.changes of Package yubikey-manager

Overview Repositories Revisions Requests Users Attributes Meta

File yubikey-manager.changes of Package yubikey-manager (Revision 35c4f245784d635596d97309ca696b30)

Currently displaying revision 35c4f245784d635596d97309ca696b30 , Show latest

-------------------------------------------------------------------
Wed Aug 21 20:28:54 UTC 2019 - simmphonie@opensuse.org

- Version 3.1.0 (released 2019-08-20)
  * Add support for YubiKey 5Ci
  * OpenPGP: the info command now prints OpenPGP specification version as well
  * OpenPGP: Update support for attestation to match OpenPGP v3.4
  * PIV: Use UTC time for self-signed certificates
  * OTP: Static password now supports the Norman keyboard layout

-------------------------------------------------------------------
Sat Jun 29 20:32:49 UTC 2019 - Karol Babioch <kbabioch@suse.com>

- Version 3.0.0 (released 2019-06-24)
  * Add support for new YubiKey Preview and lightning form factor
  * FIDO: Support for credential management
  * OpenPGP: Support for OpenPGP attestation, cardholder certificates and
    cached touch policies
  * OTP: Add flag for using numeric keypad when sending digits

-------------------------------------------------------------------
Wed May 29 08:52:25 UTC 2019 - Karol Babioch <kbabioch@suse.de>

- Version 2.1.1 (released 2019-05-28)
  * OTP: Add initial support for uploading Yubico OTP credentials to YubiCloud
  * Don’t automatically select the U2F applet on YubiKey NEO, it might be
    blocked by the OS
  * ChalResp: Always pad challenge correctly
  * Bugfix: Don’t crash with older versions of cryptography
  * Bugfix: Password was always prompted in OATH command, even if sent as
    argument

-------------------------------------------------------------------
Mon Mar 11 15:10:02 UTC 2019 - Karol Babioch <kbabioch@suse.de>

- Version 2.1.0 (released 2019-03-11)
  * Add --reader flag to ykman list, to list available smart card readers
  * FIPS: Checking if a YubiKey FIPS is in FIPS mode is now opt-in, with the --check-fips flag
  * PIV: Add commands for writing and reading arbitrary PIV objects
  * PIV: Verify that the PIN must be between 6 - 8 characters long
  * PIV: In import-certificate, make the verification that the certificate and private key matches opt-in, with the --verify flag
  * PIV: The piv info command now shows the serial number of the certificates
  * PIV: The piv info command now shows the full Distinguished Name (DN) of the certificate subject and issuer, if possible
  * PIV: Malformed certificates are now handled better
  * OpenPGP: The openpgp touch command now shows current touch policies
  * The ykman usb/nfc config command now accepts openpgp as well as opgp as an argument
  * Bugfix: Fix support for german (DE) keyboard layout for static passwords
- Packaged man page

-------------------------------------------------------------------
Wed Jan  9 09:18:34 UTC 2019 - Karol Babioch <kbabioch@suse.de>

- Version 2.0.0 (released 2019-01-09)
  * Add support for Security Key NFC
  * Add experimental support for external smart card reader. See --reader flag
  * Add a minimal manpage
  * Add examples in help texts
  * PIV: update CHUID when importing a certificate
  * PIV: Optionally validate that private key and certificate match when importing a certificate (on by default in CLI)
  * PIV: Improve support for importing certificate chains and .PEM files with comments
  * Breaking API changes:
    * Merge CCID status word constants into a single SW enum in ykman.driver_ccid
    * Throw custom exception types instead of raw APDUErrors from many methods of PivController
    * Write CLI prompts to standard error instead of standard output
    * Replace function `ykman.util.parse_certificate` with `parse_certificates` which returns a list

-------------------------------------------------------------------
Mon Nov 12 09:15:25 UTC 2018 - Karol Babioch <kbabioch@suse.com>

- Added libykpers-1-1 as dependency (bsc#1115370)

-------------------------------------------------------------------
Wed Oct 10 08:38:58 UTC 2018 - Karol Babioch <kbabioch@suse.com>

- Version 1.0.1 (released 2018-10-10) 
  * Support for YubiKey 5A
  * OATH: Ignore extra parameters in URI parsing
  * Bugfix: Never say that NFC is supported for YubiKeys without NFC

-------------------------------------------------------------------
Fri Sep 28 09:09:20 UTC 2018 - Karol Babioch <kbabioch@suse.com>

- Version 1.0.0 (released 2018-09-24)
  * Add support for YubiKey 5 Series
  * Config: Add flag to generate a random configuration lock
  * OATH: Give a proper error message when a touch credential times out
  * NDEF: Allow setting the NDEF prefix from the CLI
  * FIDO: Block reset when multiple YubiKeys are connected
- Applied spec-cleaner
- Removed explicit version dependencies

-------------------------------------------------------------------
Wed Jul 11 09:24:55 UTC 2018 - kbabioch@suse.com

- Version 0.7.1 (released 2018-07-09)
  * Support for YubiKey FIPS.
  * OTP: Allow setting and removing access codes on the slots.
  * Interfaces: set-lock-code now only accepts hexadecimal inputs.
  * Bugfix: Don't fail to open the YubiKey when the serial is not visible.
- Version 0.7.0 (released 2018-05-07)
  * Support for YubiKey Preview.
  * Add command to configure enabled applications over USB and NFC. See ykman config -h.
  * Add command for selecting which slot to use for NDEF. See ykman otp ndef -h. 
- Applied spec-cleaner

-------------------------------------------------------------------
Tue Apr 17 07:18:29 UTC 2018 - kbabioch@suse.com

- Version 0.6.1
  * Support for YubiKeys with FIDO2. See ykman fido -h
  * Report the form factor for YubiKeys that support it.
  * OTP: slot command is now called otp. See ykman otp -h for all changes.
  * Static password: Add support for different keyboard layouts. See ykman otp static -h
  * PIV: Signatures for CSRs are now correct.
  * PIV: Commands on slots with PIN policy ALWAYS no longer fail if the YubiKey has a management key protected by PIN.
  * Mode: The U2F mode is now called FIDO.
  * Dependencies: libu2f-host is no longer used for FIDO communication over USB, instead the python library fido2 is used. 
- Cleaned up spec file (spec-cleaner)

-------------------------------------------------------------------
Wed Feb 21 21:09:42 UTC 2018 - t.gruner@katodev.de

- Version 0.6.0 (released 2018-02-09)
  -  OpenPGP: Expose remaining PIN retries in info command and API.
  -  CCID: Only try YubiKey smart card readers by default.
  -  Handle NEO issues with challenge-response credentials better.
  -  Improve logging.
  -  Improve error handling when opening device over OTP.
  -  Bugfix: Fix adding OTP data through the interactive prompt.

-------------------------------------------------------------------
Wed Jan  3 19:16:35 UTC 2018 - t.gruner@katodev.de

- Version 0.5.0 (released 2017-12-15)
  -  API breaking changes:
     -  OATH: New API more similar to yubioath-android
  -  CLI breaking changes:
     -  OATH: Touch prompt now written to stderr instead of stdout
     -  OATH: -a|--algorithm option to list command removed
     -  OATH: Columns in code command are now dymanically spaced depending on contents
     -  OATH: delete command now requires confirmation or -f|--force argument
     -  OATH: IDs printed by list command now include TOTP period if not 30
     -  Changed outputs:
         -  INFO: "Device name" output changed to "Device type"
         -  PIV: "Management key is stored on device" output changed to "Management key is stored on the YubiKey"
         -  PIV: "All PIV data have been cleared from the device" output changed to "All PIV data have been cleared from your YubiKey"
         -  PIV: "The current management key is stored on the device" prompt changed to "The current management key is stored on the YubiKey"
         -  SLOT: "blank to use device serial" prompt changed to "blank to use YubiKey serial number"
         -  SLOT: "Using device serial" output changed to "Using YubiKey device serial"
         -  Lots of failure case outputs changed
  -  New features:
     -  Support for multiple devices via new top-level option -d|--device
     -  New top-level option -l|--log-level to enable logging
     -  OATH: Support for remembering passwords locally.
     -  OATH: New option -s|--single for code command
     -  PIV: set-pin-retries command now warns that PIN and PUK will be reset to factory defaults, and prints those defaults after resetting
  -  API bug fixes:
     -  OATH: valid_from and valid_to for Code are now absolute instead of relative to the credential period
     -  OATH: period for non-TOTP Code is now None

-------------------------------------------------------------------
Sat Dec 30 09:04:16 UTC 2017 - jengelh@inai.de

- Fix RPM groups.

-------------------------------------------------------------------
Wed Nov 15 19:29:13 UTC 2017 - t.gruner@katodev.de

- Version 0.4.6 (released 2017-10-17)
  - Will now attempt to open device 3 times before failing
  - OpenPGP: Don’t say data is removed when not
  - OpenPGP: Don’t swallow APDU errors
  - PIV: Block on-chip RSA key generation for firmware versions 4.2.0 to 4.3.4 (inclusive) since these chips are vulnerable to CVE-2017-15631.

- Version 0.4.5 (released 2017-09-14)
  - OATH: Don’t print issuer if there is no issuer.

- Version 0.4.4 (released 2017-09-06)
  - OATH: Fix yet another issue with backwards compability, for adding new credentials.

- Version 0.4.3 (released 2017-09-06)
  - OATH: Fix issue with backwards compability, when used as a library.

- Version 0.4.2 (released 2017-09-05)
  - OATH: Support 7 digit credentials.
  - OATH: Support credentials with a period other than 30 seconds.
  - OATH: The remove command is now called delete.

- Version 0.4.1 (released 2017-08-10)
  - PIV: Dropped support for deriving a management key from PIN.
  - PIV: Addded support for generating a random management key and storing it on the device protected by the PIN.
  - OpenPGP: The reset command now handles a device in terminated state.
  - OATH: Credential filtering is now working properly on Python 2.

- Version 0.4.0 (released 2017-06-19)
  - Added PIV support. The tool and library now supports most of the PIV functionality found on the YubiKey 4 and NEO. To list the available commands, run ykman piv -h.
  - Mode command now supports adding and removing modes incrementally.

-------------------------------------------------------------------
Mon May 15 13:07:17 UTC 2017 - t.gruner@katodev.de

- Initial Release 0.3.3

Places

File yubikey-manager.changes of Package yubikey-manager (Revision 35c4f245784d635596d97309ca696b30)

Places