- The AppVeyor configuration of VS2014/VS2015 does not currently work
with this script
- We are using the pre-built zlib binaries. As consequence, we can build
the 32 bit installer only. Also, we can't use static linking anymore
- The current pre-built binaries of OpenSSL from
https://slproweb.com/products/Win32OpenSSL.html include security
measures (https://blogs.microsoft.com/cybertrust/2012/01/26/enhancements-to-gs-in-visual-studio-11/)
that are not compatible with our version of VS `(error LNK2001:
unresolved external symbol ___report_rangecheckfailure)`. That's why
we can't use static linking anymore
works with
- OpenSSL 1.0.2
- zlib 2.1.8
- WiX 3.10
in cases where you use pam_pkcs11, HOME might not be set
so paths based on $HOME are not usable, so that the combination
of home and caching does not work. Having the paths configurable
(together with a good setting of access rights)
resolves that problem.
The special value still needs to be handled for commands that are issued
during card initialization. This especially concerns T=0 cards that need
to use iso_get_response.
fixes#533
regression of 85b79a3332
This adds support for the Yubikey NEO. I'm not sure whether it breaks
the specification, or follows some other version of the spec, but in my
testing it returns SW1=0x63, SW2=0x0N for N PIN tries remaining.
Ignoring the top nibble seems a harmless change to the behaviour to
support this device.
This is already supported for a couple of the card drivers, but
since it's a general feature of ISO7816 it should go in iso7816.c,
rather than the current situation where identical code for this is
copy and pasted in each driver.
However, some cards apparently don't support this feature and count
it as a failed PIN attempt, so I've added a flag for now to indicate
whether the card supports this feature. It future, it could be moved
to blacklist cards rather than whitelist them, subject to more testing.
There's a copy-and-paste bug in there, where the CKA_PRIVATE attribute
is being set on the wrong variables! As well as fixing that, we should
explicitly set CKA_PRIVATE to "false" for certificates and public keys,
since the PKCS#11 spec doesn't specify a default and some drivers use
"private" as the default, making it impossible to add a public key/cert
using pkcs11-tool.
Frank Morgner
Nguyễn Hồng Quân
Nicolas Schneider
Ludovic Rousseau
Andreas Schwier
Andreas Kemnade
Martin Paljak
Nicholas Wilson
Nicholas Wilson
adminmt
Viktor Tarasov
Martin Paljak