diff --git a/yubico-piv-tool-1.7.0.tar.gz b/yubico-piv-tool-1.7.0.tar.gz deleted file mode 100644 index 9535879..0000000 --- a/yubico-piv-tool-1.7.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:b428527e4031453a637128077983e782e9fea25df98e95e0fc27819b2e82fd7f -size 588206 diff --git a/yubico-piv-tool-1.7.0.tar.gz.sig b/yubico-piv-tool-1.7.0.tar.gz.sig deleted file mode 100644 index dba80a9..0000000 Binary files a/yubico-piv-tool-1.7.0.tar.gz.sig and /dev/null differ diff --git a/yubico-piv-tool-2.0.0.tar.gz b/yubico-piv-tool-2.0.0.tar.gz new file mode 100644 index 0000000..2878288 --- /dev/null +++ b/yubico-piv-tool-2.0.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:dae510ea88922720019029c7f0296ddc74bb30573e40d9bc18fc155023859488 +size 1701905 diff --git a/yubico-piv-tool-2.0.0.tar.gz.sig b/yubico-piv-tool-2.0.0.tar.gz.sig new file mode 100644 index 0000000..f752459 Binary files /dev/null and b/yubico-piv-tool-2.0.0.tar.gz.sig differ diff --git a/yubico-piv-tool.changes b/yubico-piv-tool.changes index df243db..e7e07e0 100644 --- a/yubico-piv-tool.changes +++ b/yubico-piv-tool.changes @@ -1,3 +1,49 @@ +------------------------------------------------------------------- +Sun Mar 1 00:11:08 UTC 2020 - Marcus Rueckert + +- Version 2.0.0 + - ykpiv: Added ykpiv_get_metadata and ykpiv_util_parse_metadata + to read and parse private key metadata (supported from YK 5.3). + - ykpiv: Fixed PCSC transaction handling when re-selecting PIV + due to external card reset events. + - ykpiv: Improved error reporting. + - ykpiv: Correctly report YK5 devices, and NEO and YK5 over NFC. + - ykpiv: MGM KEY (SO PIN) is cached (in addition to PIN). + - ykpiv: Fixed resetting of cached serial / version when an + application re-uses ykpiv_state. + - ykpiv: ykpiv_get_pin_retries selects a different applet before + re-selecting PIV since just re-selecting PIV is a no-op on YK5. + - ykcs11: Shared library exports all PKCS11 functions per the + spec (For applications that don’t use C_GetFunctionList). + - ykcs11: Support for up to 16 simultaneous sessions, with + support for multi-threaded access (if requested when calling + C_Initialize). + - ykcs11: Support for resetting the PIV application via + C_initToken. Requires knowledge of the MGMT KEY (SO PIN) per + the PKCS11 spec. + - ykcs11: Support for public-key operations not supported by PIV + (C_Verify, C_Encrypt), implemented using OpenSSL. + - ykcs11: Support for attestations, exposed as session objects of + certificate class. Generated when opening the first session to + a slot. + - ykcs11: Support for forked processes on Linux and MacOS. + - ykcs11: Support for RSA signatures using PKCS or PSS padding + with optional digesting by the library. Raw signatures are also + supported. + - ykcs11: Support for ECDSA signatures with optional digesting by + the library. Raw signatures are also supported. + - ykcs11: Support for RSA encryption / decryption with PKCS or + OAEP padding. + - ykcs11: Makes use of key metadata when available (YK 5.3 and + above), providing access to keys even if certificates are not + present. + - ykcs11: Supports SHA1, SHA256, SHA384 and SHA512 digesting, + plus SHA224 digesting for ECDSA signatures and for the MGF1 + digest in PSS / OAEP, implemented using OpenSSL. + - ykcs11: Supports C_Login with context-specific user type. This + allows use cases that require both SO PIN and normal PIN in the + same session. + ------------------------------------------------------------------- Mon Jun 3 08:22:20 UTC 2019 - Karol Babioch diff --git a/yubico-piv-tool.spec b/yubico-piv-tool.spec index d274101..6ebea07 100644 --- a/yubico-piv-tool.spec +++ b/yubico-piv-tool.spec @@ -1,7 +1,7 @@ # # spec file for package yubico-piv-tool # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %define sover 1 Name: yubico-piv-tool -Version: 1.7.0 +Version: 2.0.0 Release: 0 Summary: Yubico YubiKey NEO CCID Manager License: BSD-2-Clause @@ -79,7 +79,7 @@ Yubikey NEO PKCS#11 applet library. %build %configure --disable-static --with-backend=pcsc -make %{?_smp_mflags} +make %{?_smp_mflags} V=1 %install %make_install INSTALL="install -p" @@ -97,12 +97,10 @@ find %{buildroot} -type f -name "*.la" -delete -print %{_mandir}/man1/* %files -n libykpiv%{sover} -%{_libdir}/libykpiv.so.%{sover} -%{_libdir}/libykpiv.so.%{sover}.5.0 +%{_libdir}/libykpiv.so.%{sover}* %files -n libykcs11-%{sover} -%{_libdir}/libykcs11.so.%{sover} -%{_libdir}/libykcs11.so.%{sover}.5.0 +%{_libdir}/libykcs11.so.%{sover}* %files -n libykpiv-devel %dir %{_includedir}/ykpiv/