2020-01-29  Aveen Ismail <aveen.ismail@yubico.com>

	* Makefile.am: Added openssl engine doc to make file

2020-01-29  Aveen Ismail <aveen.ismail@yubico.com>

	* NEWS: Updated NEWS for 2.0.0 release

2020-01-29  Aveen Ismail <aveen.ismail@yubico.com>

	* NEWS: Fixed spellings in NEWS

2020-01-29  Per Nilsson <per.nilsson@yubico.com>

	* NEWS: ykcs11: Updated NEWS

2020-01-29  Aveen Ismail <aveen.ismail@yubico.com>

	* doc/YKCS11/Supported_applications/index.adoc: ykcs11: doc: Fixed
	link to Java keytool

2020-01-29  Per Nilsson <per.nilsson@yubico.com>

	* configure.ac, lib/ykpiv.map: ykcs11: Call this version 2.0.0

2020-01-29  Klas Lindfors <klas@yubico.com>

	* : commit e8ff8f6c3810dde99a02b1db536bd35698a47ee0 Author: Aveen
	Ismail <aveen.ismail@yubico.com> Date:   Tue Jan 28 20:53:48 2020
	+0100

2020-01-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c: PIV-68: Fix memory leak and
	debug output

2020-01-28  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c,
	ykcs11/ykcs11.c: ykcs11: Fixed calculating expected data length.
	Added tests for returning data length

2020-01-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Fixed review comments

2020-01-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h: PIV-68: Fixed review comment

2020-01-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/token.c, ykcs11/ykcs11.c: PIV-68: Fix
	review comments & return CKR_DEVICE_ERROR on piv library errors

2020-01-28  Per Nilsson <per.nilsson@yubico.com>

	* lib/util.c: PIV-68: Fixed warnings

2020-01-27  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Fixed return value handling

2020-01-27  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Removed extranous unlock of global_mutex

2020-01-27  Aveen Ismail <aveen.ismail@yubico.com>

	* : commit a7b6a60a3eff179df40d72814298511ebfe6e1c7 Author: Aveen
	Ismail <aveen.ismail@yubico.com> Date:   Mon Jan 27 17:47:29 2020
	+0100

2020-01-27  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Debug output error if get_metadata fails

2020-01-27  Joakim Trong <joakim.troeng@yubico.com>

	* : Merge pull request #219 from
	Yubico/doc/posix-build-documentation Doc/posix build documentation

2020-01-27  Per Nilsson <per.nilsson@yubico.com>

	* : Merge remote-tracking branch 'origin/private/chuid-parse' into
	ykcs11_improvements

2020-01-26  Aveen Ismail <aveen.ismail@yubico.com>

	* doc/Actions/read_certificate.adoc,
	doc/YKCS11/Supported_applications/openssl_engine.adoc,
	ykcs11/ykcs11.c: ykcs11: fixed return states

2020-01-24  Per Nilsson <per.nilsson@yubico.com>

	* lib/tests/api.c, lib/ykpiv.c: PIV-68: Don't select mgmt applet on
	NEO, we can't select piv again if we do

2020-01-24  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Fixed one case of not unlocking on error

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Use correct type of length

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: PIV-67: ykpiv_get _metadat uses size_t
	like ykpiv_attest

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Fixed incorrect type

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Lock slot when accessing login_state

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Clarified debug output

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* lib/tests/api.c, lib/ykpiv.c, lib/ykpiv.h: PIV-67: Fixed tests,
	amended status codes

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/token.c, ykcs11/ykcs11.c: PIV-68: Commented out PIV objects
	that require authentication

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Debug log errors from ykpiv_fetch_object

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h: PIV-67: ykpiv_fetch_object
	returns more detailed error code

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: PIV-67: Fix review comment regarding memcpy with NULL
	ptr and zero length

2020-01-23  Aveen Ismail <aveen.ismail@yubico.com>

	* doc/YKCS11/Supported_applications/Java_keytool.adoc,
	doc/YKCS11/Supported_applications/index.adoc,
	doc/YKCS11/Supported_applications/openssl_engine.adoc: YKCS11: doc:
	Added a guide for opessl pkcs11 engine

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Always create a new attestation (if
	appropriate) even if we already had one

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Furter improved locking. Piv error
	converted to string. Removed data dumping.

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: PIV-67: Support NFC ATRs for NEO and YK5
	devices

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/openssl_utils.h, ykcs11/token.c,
	ykcs11/token.h, ykcs11/ykcs11.c: PIV-67: More bounds checking

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* tool/yubico-piv-tool.c: PIV-67: Fixed memory leak

2020-01-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Locking adjusted. Create attestation in
	C_GenerateKeyPair

2020-01-22  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-68:
	Generate attestations at object read time, and do away with delayed
	attestation logic

2020-01-22  Per Nilsson <per.nilsson@yubico.com>

	* lib/tests/api.c, lib/util.c, lib/ykpiv.c, ykcs11/token.c: PIV-67:
	Fix devtype for NEO

2020-01-22  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Cleanup sessions and slots properly

2020-01-22  Aveen Ismail <aveen.ismail@yubico.com>

	* lib/tests/api.c: ykcs11: fixed reader name test

2020-01-22  Aveen Ismail <aveen.ismail@yubico.com>

	* : commit 15ff65ac752b3bf3240e5647806b075b3fcee57a Author: Aveen
	Ismail <aveen.ismail@yubico.com> Date:   Wed Jan 22 07:54:51 2020
	+0100

2020-01-22  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c: 
	ykcs11: Fixed warnings and enabled all tests

2020-01-22  Aveen Ismail <aveen.ismail@yubico.com>

	* doc/YKCS11/Functions_and_values.adoc,
	ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c,
	ykcs11/tests/ykcs11_tests_util.h: ykcs11: fixed and updated
	ykcs11_tests

2020-01-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/token.c: PIV-67: Properly
	report CKM_ECDSA_SHA224

2020-01-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/objects.c,
	ykcs11/objects.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-68: Moved
	objects to slot, and read only once. More locking, but not complete
	yet.

2020-01-21  Per Nilsson <per.nilsson@yubico.com>

	* lib/internal.c: PIV-67: Fixed code review comment

2020-01-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-67:
	Rename oaep params for consistency

2020-01-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_types.h: PIV-67: Removed unused type

2020-01-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Fixed bogus mechanisms

2020-01-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/token.c, ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c: 
	PIV-68: memstrcpy improved

2020-01-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Removed get_session_state

2020-01-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Avoid multiple accesses to login_state
	when it might be changed from another thread

2020-01-21  Joakim Trong <joakim.troeng@yubico.com>

	* README: Removing merged build step (building from git).

2020-01-20  Joakim Trong <joakim.troeng@yubico.com>

	* README: Re-defining build steps for POSIX systems.

2020-01-20  Aveen Ismail <aveen.ismail@yubico.com>

	* Makefile.am: ykcs11: fixed makefile to include ykcs11
	documentations

2020-01-20  Dave Pate <dpate@yubico.com>

	* lib/util.c: lib: limit cardid read size to destination size

2020-01-20  Per Nilsson <per.nilsson@yubico.com>

	* tool/util.c, ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/tests/ykcs11_tests_util.c, ykcs11/ykcs11.c: PIV-67: Fixed
	code review comments

2020-01-17  Dave Pate <dpate@yubico.com>

	* lib/util.c, lib/ykpiv.c, lib/ykpiv.h: lib: add NFC atrs to library
	lib: add NEOr3 NFC atr to feature detection logic lib: implement
	parsing card uuid from chuid

2020-01-17  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-67: Always check library initialization first

2020-01-17  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/token.c: PIV-67: Expose all data objects
	we have a mapping for

2020-01-17  Aveen Ismail <aveen.ismail@yubico.com>

	* doc/YKCS11/Supported_applications/pkcs11tool.adoc: PIV-40: ykcs11:
	doc: Fixed command line example for pkcs11-tool --test-ec

2020-01-17  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/token.c: PIV-67: Reverted
	mistaken enabling of CKM_ECDSA_KEY_PAIR_GEN and added Encrypt/Verify
	where appropriate

2020-01-17  Aveen Ismail <aveen.ismail@yubico.com>

	* doc/YKCS11/Functions_and_values.adoc,
	doc/YKCS11/Supported_applications/Java_keytool.adoc,
	doc/YKCS11/Supported_applications/firefox.adoc,
	doc/YKCS11/Supported_applications/fortify.adoc,
	doc/YKCS11/Supported_applications/index.adoc,
	doc/YKCS11/Supported_applications/openssh.adoc,
	doc/YKCS11/Supported_applications/pkcs11tool.adoc,
	doc/YKCS11/index.adoc, doc/YKCS11_release_notes.adoc: PIV-40:
	ykcs11: doc: Updated YKCS11 related documentation

2020-01-17  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-68: Use pid for library initialization check

2020-01-17  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-67: Propagate errors properly

2020-01-17  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/obj_types.h, ykcs11/token.c, ykcs11/token.h,
	ykcs11/ykcs11.c: PIV-67: Refactored mechanism infos after code
	review

2020-01-16  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.h, ykcs11/token.c: PIV-67: Reverted old device model
	defines for compatibility

2020-01-16  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c: PIV-68: Separate
	fork handling from global mutex to prepare for removing global mutex

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-67: Reject invalid handles values in
	C_DestroyObject. Made buffer large enough to silence bogus gcc
	warning

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/ykcs11.c: PIV-67: Require same
	signature size as we return, and allow context-specific login while
	logged in as SO for app compatibility

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* lib/internal.c: PIV-67: Check return value

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-67: Allow context-specific login in YKCS11_SO
	login state

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* lib/internal.c, lib/tests/api.c, tool/yubico-piv-tool.c,
	ykcs11/openssl_utils.c, ykcs11/tests/ykcs11_tests_util.c: PIV-67:
	Fix return value check on RAND_bytes

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c: PIV-67: Fixed off-by-1 error in guard

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c: PIV-67: Added missing guards

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c: PIV-67: RAND_bytes always return 1 on
	success, not length

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: PIV-67: Fixed test checking max pin
	length

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: PIV-67: Removed re-auth on SW_ERR_SECURITY_STATUS in
	_general_authenticate

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-67: Report MGM_KEY_LENGTH as max pin length

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-67: Dont fail OpenSession completely for
	invalid certs, just skip them

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: PIV-67: Moved version and serial cacheing to inner
	function because sometimes that is called directly

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Return CKR_USER_NOT_LOGGED_IN of sign
	fails because we're not logged in

2020-01-15  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: PIV-67: Call authenticate before verify so it works
	for always-auth keys

2020-01-14  Per Nilsson <per.nilsson@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c,
	ykcs11/openssl_utils.c: PIV-67: Properly check for buffer overread.
	Made helpers more type consistent.

2020-01-14  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Less signed/unsigned conversion

2020-01-14  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/openssl_utils.c, ykcs11/ykcs11.c: 
	PIV-67: Don't use VLAs

2020-01-14  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/ykcs11.c: PIV-67: Check return
	value from RAND_bytes

2020-01-14  Per Nilsson <per.nilsson@yubico.com>

	* lib/tests/api.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	ykcs11/tests/ykcs11_tests_util.c: PIV-67: Removed cache clearing
	methods. Re-authenticate in tests to ensure always-auth keys work.
	Decreased test loops.

2020-01-14  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: PIV-67: De-authenticate always-auth keys by running
	arbitrary command after automatic re-verify

2020-01-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-67: Fixed old-style function declaration

2020-01-13  Per Nilsson <per.nilsson@yubico.com>

	* lib/tests/api.c, ykcs11/tests/ykcs11_tests.c,
	ykcs11/tests/ykcs11_tests_util.c: PIV-67: Fixed OAEP tests. Fixed
	test that expected lowercase reader name for YK4

2020-01-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c: PIV-67: Require PSS params.
	Propagate mechanism errors properly.

2020-01-13  Per Nilsson <per.nilsson@yubico.com>

	* lib/util.c, lib/ykpiv.c: PIV-67: Fixed old buffer overread error

2020-01-13  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: PIV-67: No need to pack the
	_ykpiv_metadata struct. Clarified the comment on why
	_ykpiv_end_transaction doesn't fail when SCardEndTransaction fails

2020-01-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Removed MD5 and RIPEMD160

2020-01-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/ykcs11.c: PIV-67:
	Check PSS params length like we do for OAEP

2020-01-12  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/ykcs11.c: PIV-67: Use
	snprintf to format reader name. Remove unused param

2020-01-12  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/token.c: PIV-67: Check size before
	storing. Remove unused vars. Remove redundant cast

2020-01-12  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/token.c,
	ykcs11/token.h, ykcs11/ykcs11.c: PIV-67: const-correctness, removed
	unused vars, corrected some type

2020-01-12  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-67: Adde argument check for pInfo == NULL

2020-01-12  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/token.c, ykcs11/ykcs11.c: PIV-67: Version mapping fixed.
	Safe default in get_session_state

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Use built-in defaults for OAEP

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c: PIV-67: Clean up logging

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/openssl_utils.c: PIV-67: Remove unused
	macros. Set length 0 on failure

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Properly check padding check errors.
	Set default OAEP hashes to SHA1.

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Log decrypted sizes

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Separate debugging outputs

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Check size of OAEP params

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Alos log OAEP parameter length

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Debug trace OAEP params

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-67: Fixed OAEP with null pSourceData

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* tool/util.c, tool/yubico-piv-tool.c, ykcs11/objects.c,
	ykcs11/token.c, ykcs11/ykcs11.c: PIV-67: Use YKPIV_OBJ_MAX_SIZE
	instead of magic number

2020-01-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/Makefile.am, ykcs11/slot.c, ykcs11/slot.h, ykcs11/token.c,
	ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c: PIV-67: Removed
	slot.c and slot.h. Verify SO_PIN in C_InitToken

2020-01-10  Aveen Ismail <aveen.ismail@yubico.com>

	* lib/tests/api.c: tests: fixed declaration of test_authenticate

2020-01-10  Gabriel Kihlman <g.kihlman@yubico.com>

	* .github/workflows/scan.yml: Pass PVS_IGNORE_WARNINGS to docker run
	and schedule re-scans every week

2020-01-10  Aveen Ismail <aveen.ismail@yubico.com>

	* lib/tests/api.c: tests: fixed declaration of test_authenticate

2020-01-10  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/openssl_utils.c: PIV-65: Fixed more
	static code analysis warnings

2020-01-10  Gabriel Kihlman <g.kihlman@yubico.com>

	* .github/workflows/scan.yml: Fix syntax in yaml file (sorry about
	that)

2020-01-10  Gabriel Kihlman <g.kihlman@yubico.com>

	* .github/workflows/scan.yml: Ignore warning classes V1037 and V1048         "lib/ykpiv.c 779 warn V1048 The 'res' variable was assigned
	        the same value.", "lib/ykpiv.c 889 warn V1048 The 'res'
	        variable was assigned the same value.", "lib/ykpiv.c 1610 warn V1048
	        The 'res' variable was assigned the same value.", "lib/ykpiv.c 1628
	        warn V1048 The 'res' variable was assigned the same value.",
	"lib/ykpiv.c 1641 warn V1048 The 'res' variable was assigned the
	        same value.", "lib/ykpiv.c 1655 warn V1048 The 'res' variable was
	        assigned the same value.", "lib/ykpiv.c 1713 warn V1048 The 'res'
	        variable was assigned the same value.", "lib/ykpiv.c 1892 warn V1048
	        The 'res' variable was assigned the same value.", "lib/ykpiv.c 1924
	        warn V1048 The 'res' variable was assigned the same value.",
	"lib/ykpiv.c 1961 warn V1048 The 'res' variable was assigned the
	same value.",         "ykcs11/objects.c 320 warn V1037 Two or more case-branches
	        perform the same actions. Check lines: 320, 352",
	"ykcs11/objects.c 327 warn V1037 Two or more case-branches perform
	        the same actions. Check lines: 327, 340", "ykcs11/objects.c 411 warn
	        V1037 Two or more case-branches perform the same actions. Check
	        lines: 411, 470, 477", "ykcs11/objects.c 619 warn V1037 Two
	        or more case-branches perform the same actions. Check lines: 619,
	        756", "ykcs11/objects.c 808 warn V1037 Two or more
	        case-branches perform the same actions. Check lines: 808, 837, 960",
	"ykcs11/objects.c 1429 warn V1037 Two or more case-branches perform
	the same actions. Check lines: 1429, 1435" These were all false positives, not very sofisticated analysis by
	PVS Studio..

2020-01-10  Per Nilsson <per.nilsson@yubico.com>

	* .gitignore, mac.mk, windows.mk: PIV-65: Update to OpenSSL 1.0.2u.
	Git Ignore tmp directory

2020-01-10  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-66: Only modify login_state under protection
	of the slot mutex

2020-01-09  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c: 
	PIV-66: ykcs11: Fixed tests after making the session login state
	global

2020-01-09  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/obj_types.h, ykcs11/objects.c,
	ykcs11/ykcs11.c: PIV-65: Defined PIV_INVALID_OBJ to avoid static
	code analysis warnings.

2020-01-09  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: PIV-65: Fix leak on failed realloc (static code
	analysis)

2020-01-09  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-66: More strict handling of login state

2020-01-09  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: PIV-65: Fixed bug that made MGM_KEY caching always
	disabled

2020-01-09  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map: PIV-65: Removed unused
	method, removed code duplication

2020-01-09  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/tests/ykcs11_tests.c,
	ykcs11/tests/ykcs11_tests_util.c, ykcs11/ykcs11.c: PIV-63: ykcs11:
	Fixed decrypting using OAEP padding

2020-01-08  Klas Lindfors <klas@yubico.com>

	* : commit 4e30dfeab590b23dc421945a1f1fda918535b50e Author: Per
	Nilsson <per.nilsson@yubico.com> Date:   Wed Jan 8 00:27:17 2020
	+0100

2020-01-08  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/tests/ykcs11_tests.c, ykcs11/utils.c, ykcs11/ykcs11.c,
	ykcs11/ykcs11.h: PIV-65: Check buffer size in EncryptUpdate and
	DecryptUpdate and other cleanups.

2020-01-07  Laban Skllermark <laban@kryo.se>

	* doc/Attestation.adoc: Remove NEO from attestation cert problem
	info As per Klas Lindfors' review comment, remove YubiKey NEO from the
	note since attestation was apparently never available for that
	device.

2020-01-07  Gabriel Kihlman <g.kihlman@yubico.com>

	* : Merge pull request #217 from Yubico/scan Adding a static code analysis github workflow

2019-12-30  Laban Skllermark <laban@kryo.se>

	* doc/Attestation.adoc: Note about attestation cert problems in
	YubiKey 4.3 Add a note to Using Attestation [1] about the certificate problems
	with YubiKey 4.3 and NEO.  [1] https://developers.yubico.com/yubico-piv-tool/Attestation.html

2019-12-20  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/openssl_utils.h: PIV-63: Fixed
	warnings about const-correctness

2019-12-20  Per Nilsson <per.nilsson@yubico.com>

	* lib/util.c, ykcs11/objects.c, ykcs11/objects.h, ykcs11/ykcs11.c,
	ykcs11/ykcs11.h: PIV-65: Use metadata to determine local key, or
	fall back to attestation

2019-12-20  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/pkcs11y.h, ykcs11/ykcs11.c,
	ykcs11/ykcs11.h: PIV-63: ykcs11: Fixed decryption and encryption
	when using CKM_RSA_PKCS_OAEP

2019-12-20  Aveen Ismail <aveen.ismail@yubico.com>

	* : commit 3f1294bf26ed271373f9005b4d94b94c7ca93fb2 Author: Aveen
	Ismail <aveen.ismail@yubico.com> Date:   Fri Dec 20 11:26:58 2019
	+0100

2019-12-19  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-65: Restored locking around
	sign_mechanism_final that had got lost

2019-12-18  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/objects.c, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h: PIV-65: Code cleanups

2019-12-18  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-65: Code cleanup

2019-12-18  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-65: Code cleanups

2019-12-17  Aveen Ismail <aveen.ismail@yubico.com>

	* : commit b43d65e30397a312fa84ba99e36989f63e1ea771 Author: Aveen
	Ismail <aveen.ismail@yubico.com> Date:   Tue Dec 17 17:53:11 2019
	+0100

2019-12-17  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/pkcs11y.h, ykcs11/slot.c,
	ykcs11/tests/ykcs11_tests_util.c, ykcs11/token.c, ykcs11/token.h,
	ykcs11/ykcs11.h: PIV-65: Moved PKCS11 stuff to pkcs11y.h and cleaned
	up includes

2019-12-17  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h: PIV-64: Small code
	cleanup

2019-12-17  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-64: Verify PSS parameters

2019-12-16  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-64: Removed debug output

2019-12-16  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c,
	ykcs11/tests/ykcs11_tests_util.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: 
	PIV-64: Support PSS parameters

2019-12-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c: 
	PIV-64: Tests also select PSS md by size

2019-12-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-64: Use buffer size to select PSS MD when
	verifying too (not automatic as assumed)

2019-12-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-64: Use buffer size to select PSS MD

2019-12-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: PIV-64: Added PSS tests to
	test_import_2048

2019-12-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/obj_types.h,
	ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c,
	ykcs11/tests/ykcs11_tests_util.h, ykcs11/token.c, ykcs11/token.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-64: Code cleanups and fixed
	brooken test. Added Import RSA2048 test

2019-12-13  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c,
	ykcs11/tests/ykcs11_tests_util.h: PIV-18: ykcs11: Added tests for
	signing with RSA_PSS

2019-12-12  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c: PIV-64: Show CKA_LOCAL based on
	the precense of attestation cert

2019-12-12  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: PIV-64: Ensure we return object attributes
	according to spec

2019-12-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-49: Avoid adding duplicate object ids in
	C_CreateObject and C_GenerateKeyPair

2019-12-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-49: Use metadata origin to decide whether to
	add attestation object

2019-12-11  Per Nilsson <per.nilsson@yubico.com>

	* mac.mk, windows.mk: Use OpenSSL 1.0.2t

2019-12-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c: 
	PIV-49: The correct pubkey is used in bogus attestation certs, and
	CN is more informative. Fixed tests warnings.

2019-12-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c: PIV-49: Attestation
	certificates are exposed as session (not token) objects. Cleanet up
	piv_objects

2019-12-10  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-47: Check result of
	do_apply_DER_encoding_to_ECSIG

2019-12-10  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/tests/ykcs11_tests_util.c: PIV-18: Include openssl-compat.h
	inykcs11_tests_util.c

2019-12-10  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/tests/Makefile.am: PIV-18: Ensure ykcs11_tests_util.h is
	included in dist

2019-12-10  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/openssl_types.h: PIV-47: More error
	checking

2019-12-10  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-47:
	Improved debugging info

2019-12-09  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/openssl_types.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-47: Signing is done without
	METHODs again

2019-12-09  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-47:
	Further unification

2019-12-09  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/token.c,
	ykcs11/utils.c, ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-47: Unify
	digest handling

2019-12-06  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-47: Avoid ptr type warning (on raspbian)

2019-12-06  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h: PIV-47: Fall back to default rsa/ec sign for
	soft keys. Removed unused code.

2019-12-06  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/ykcs11.c: PIV-47:
	Just set default RSA/EC methods once

2019-12-05  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c: PIV-47: Resource cleanup
	fixed in sign

2019-12-05  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c: 
	PIV-18: ykcs11: Fixed signing tests

2019-12-05  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/ykcs11.c,
	ykcs11/ykcs11.h: PIV-47: Better error handling and more cleanups

2019-12-04  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/ykcs11.c: PIV-47:
	Unify mechanism API

2019-12-04  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/ykcs11.c,
	ykcs11/ykcs11.h: PIV-47: Only store mechanism type, and remove
	unused code

2019-12-04  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-47: Verify supports same mechanisms as
	Sign and fix error handling

2019-12-04  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c: PIV-47: Check buffer size,
	Fix SignFinal cleanup, support more mechanisms.

2019-12-04  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c: PIV-47: Restored BN_bn2bin_fixed, it is
	not the same as BN_bn2binpad

2019-12-04  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/openssl_types.h,
	ykcs11/openssl_utils.c, ykcs11/openssl_utils.h, ykcs11/ykcs11.c,
	ykcs11/ykcs11.h: PIV-47: Implemented signing using openssl METHOD

2019-12-04  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c,
	ykcs11/tests/ykcs11_tests_util.h: PIV-18: ykcs11: Added tests for
	key attributes

2019-12-03  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/tests/ykcs11_tests_util.c,
	ykcs11/tests/ykcs11_tests_util.h: PIV-18: ykcs11: Cleaned up
	ykcs11_tests

2019-12-02  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/ykcs11.c: PIV-47:
	Cleaned up C_Digest et al

2019-12-02  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-47: Rename hash to digest

2019-12-02  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-47: Simplify key type checks, and clean
	up verify context properly

2019-12-02  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c: PIV-47: Set op_info.type
	consistently

2019-12-02  Per Nilsson <per.nilsson@yubico.com>

	* .gitignore: Fixed .gitignore

2019-12-02  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/tests/ykcs11_tests_util.c: Fix warnings because of
	CK_CHAR_PTR being unsigned

2019-12-02  Per Nilsson <per.nilsson@yubico.com>

	* lib/tests/api.c: Fix call to another test case, which broke with
	check 0.13

2019-12-02  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/Makefile.am, ykcs11/tests/ykcs11_tests.c,
	ykcs11/tests/ykcs11_tests_util.c, ykcs11/tests/ykcs11_tests_util.h: 
	PIV-18: ykcs11: Cleaned up ykcs11_tests

2019-11-30  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c: PIV-47: Improved error
	handing

2019-11-30  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c: PIV-47: Errro handling streamlined

2019-11-30  Per Nilsson <per.nilsson@yubico.com>

	* tool/openssl-compat.c, tool/openssl-compat.h,
	ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/openssl_types.h,
	ykcs11/openssl_utils.c, ykcs11/openssl_utils.h, ykcs11/utils.c,
	ykcs11/utils.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-47: Simplified
	signature verification using OpenSSL high-level API

2019-11-29  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c: PIV-47: New RSA and EC keys sould be owned
	by the new EVP_PKEY

2019-11-28  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c, ykcs11/ykcs11.c: PIV-47: Fixed and improved debug
	output. Only dump data if very verbose

2019-11-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/utils.c: PIV-47: Remove bogus puts call

2019-11-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/utils.c, ykcs11/utils.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-47: Cleaned up operation infos
	and Encrypt/Decrypt, Sign/Verify

2019-11-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/tests/ykcs11_tests.c,
	ykcs11/ykcs11.c: PIV-47: Use high-level EVP interface for RSA
	encryption. Fixed/added debugging info adn fixed tests.

2019-11-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-47: C_EncryptUpdate must indicate 0 length
	output

2019-11-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-47: Removed unused key_len

2019-11-28  Per Nilsson <per.nilsson@yubico.com>

	* tool/openssl-compat.c, tool/openssl-compat.h,
	ykcs11/openssl_utils.c, ykcs11/openssl_utils.h, ykcs11/ykcs11.c: 
	PIV-47: Cleaned up C_EncryptInit and C_DecryptInit and related

2019-11-27  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Show more debug info in C_FindObjects

2019-11-27  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/obj_types.h, ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.h: 
	PIV-62: Fix session object buffer size, and tests

2019-11-27  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c, ykcs11/ykcs11.h: 
	PIV-46: ykcs11: Added support for encryption functionality

2019-11-27  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c, tool/util.c, ykcs11/token.c: Fixed error handling

2019-11-26  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-46: Fixed typo

2019-11-26  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/ykcs11.c: PIV-62: Fix
	C_DestroyObject, C_GenerateKeyPair and C_CreateObject

2019-11-26  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c: PIV-46: ykcs11:
	Added support and test for C_DecryptUpdate and C_DecryptFinal
	functions

2019-11-26  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c: 
	PIV-46: ykcs11: Added support and test for decrypting using
	CKM_RSA_X_509 mechanism

2019-11-26  Per Nilsson <per.nilsson@yubico.com>

	* tool/util.c, ykcs11/objects.c, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h: PIV-58: Streamline how we get algorithm ans
	size of keys

2019-11-26  Per Nilsson <per.nilsson@yubico.com>

	* : commit a1c6b2ea1b86c2648587b6b219cd004812dedfad Author: Per
	Nilsson <per.nilsson@yubico.com> Date:   Mon Nov 25 23:42:18 2019
	+0100

2019-11-25  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/pkcs11.h, ykcs11/ykcs11.c: Rename locking function to avoid
	collision with Windows unicode function macro

2019-11-25  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_types.h, ykcs11/utils.c,
	ykcs11/ykcs11.h: Alias openssl types for Windows build

2019-11-25  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_types.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h: Alias openssl types for Windows build

2019-11-25  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_types.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/ykcs11.c: Remove remove openssl stuff
	from ykcs11.c

2019-11-25  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/utils.c: PIV-57: ykcs11: Fixed referencing the public key
	when verifying a signature

2019-11-25  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: ykcs11: Fixed decryption test

2019-11-24  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/utils.c: PIV-56: Fixed typo

2019-11-24  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c: PIV-56: Enable
	forked processes to use the library

2019-11-24  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-53: Cleanup all data consistentlly, including
	unclosed sessions

2019-11-22  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c: ykcs11: Removed CKM_RSA_X_509 as a possible
	decryption mechanism

2019-11-21  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c: PIV-55: ykcs11:
	Added support for C_DigestUpdate and C_DigestFinal functions

2019-11-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-49: Added debug output

2019-11-21  Aveen Ismail <aveen.ismail@yubico.com>

	* : commit d8f8ffa3256ad9521df04e409f036ed4ab8013c1 Author: Aveen
	Ismail <aveen.ismail@yubico.com> Date:   Thu Nov 21 16:51:21 2019
	+0100

2019-11-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c: PIV-49: Sign with sha256

2019-11-21  Per Nilsson <per.nilsson@yubico.com>

	* lib/util.c, lib/ykpiv.h, ykcs11/objects.c,
	ykcs11/openssl_utils.c, ykcs11/openssl_utils.h, ykcs11/token.c,
	ykcs11/ykcs11.c: PIV-49: Cleaned up cert/key creation code

2019-11-21  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c: 
	PIV-25: ykcs11: Fixed a bug in C_SignUpdate

2019-11-20  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/openssl_utils.h, ykcs11/token.c: 
	PIV-49: Create better empty cert for onboard-generated keys

2019-11-19  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c: PIV-28: Fix crash on unreadable
	certificate

2019-11-19  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: PIV-28: Implement CKA_MODULUS_BITS for all keys
	using EVP_PKEY_bits (make pkcs11-tool happy)

2019-11-19  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: PIV-49: Create proper self-signed certs

2019-11-19  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, ykcs11/openssl_utils.c, ykcs11/ykcs11.c: 
	PIV-49: Fix warnings

2019-11-18  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-49: Fixed type warning

2019-11-18  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/ykcs11.c: PIV-49: Use
	pubkey from metadata

2019-11-18  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-49: Piggy-back on get_curve_name

2019-11-18  Per Nilsson <per.nilsson@yubico.com>

	* lib/util.c, lib/ykpiv.h, ykcs11/ykcs11.c: PIV-49: Parse metadata
	tp create public keys data

2019-11-18  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-49: Use metadata to add keys, if available

2019-11-18  Per Nilsson <per.nilsson@yubico.com>

	* lib/util.c, lib/ykpiv.h: PIV-49: Implemented metadata parsing

2019-11-18  Per Nilsson <per.nilsson@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, ykcs11/objects.c,
	ykcs11/openssl_utils.c: PIV-49: Support 6a88 error code and small
	fixes

2019-11-18  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: PIV-49: Clean upp attestation certificates

2019-11-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: Fix typo

2019-11-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: Small cleanup

2019-11-15  Per Nilsson <per.nilsson@yubico.com>

	* lib/util.c, lib/ykpiv.h, lib/ykpiv.map, ykcs11/objects.c: PIV-49:
	Piv attestation private key usage fixed

2019-11-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c: PIV-49: Only generate
	attestation if a relevant attribute is required. Protect with slot
	mutex.

2019-11-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-49: Present the attestation as
	an extra certificate object

2019-11-14  Per Nilsson <per.nilsson@yubico.com>

	* lib/tests/api.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	ykcs11/tests/ykcs11_tests.c, ykcs11/token.c, ykcs11/token.h,
	ykcs11/ykcs11.c: PIV-53: Cleanup and fix tests

2019-11-14  Per Nilsson <per.nilsson@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map: PIV-53:
	Support the get-metadata instruction. Fixed error mapping.

2019-11-14  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/ykcs11.c: Free data on CloseSession and CloseAllSessions, and
	implement GetObjectSize

2019-11-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: PIV-47: Simplified attribute_match (no malloc)

2019-11-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c: PIV-47: Simplified
	C_FindObjectsInit

2019-11-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: Use PIV OID for attestation data object

2019-11-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Simplify get_attribute handling

2019-11-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-48: DestroyObject should also check handle

2019-11-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c: PIV-48: Move object handle
	check out of get_attribute

2019-11-13  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Implemented C_SeedRandom for completeness

2019-11-12  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c, ykcs11/ykcs11.c: Endian-correct conversion

2019-11-12  Per Nilsson <per.nilsson@yubico.com>

	* lib/tests/api.c, lib/util.c, lib/ykpiv.c, lib/ykpiv.h: PIV-53:
	Prepare for getting metadata, clean up model handling

2019-11-12  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: PIV-52: Re-verify PIN if _general_authenticate fails

2019-11-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Fixed typos

2019-11-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Better pkcs11 compliance

2019-11-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/ykcs11.c: PIV-48: Use
	bsearch and other small cleanups

2019-11-11  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/objects.c,
	ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c: PIV-25: ykcs11:
	Implemented C_SignUpdate and C_SignFinal and added support for
	CKA_TRUSTED and CKA_EXTRACTABLE attributes for the private key

2019-11-08  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c, ykcs11/ykcs11.c: PIV-19: Re-authenticate before sign,
	use propper low-level methods consistently

2019-11-07  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.h, ykcs11/tests/ykcs11_tests.c, ykcs11/token.c,
	ykcs11/utils.c, ykcs11/utils.h: PIV-50: Report model based on the
	ATR

2019-11-07  Per Nilsson <per.nilsson@yubico.com>

	* lib/internal.h, lib/tests/api.c, lib/util.c, lib/ykpiv.c,
	ykcs11/tests/ykcs11_tests.c, ykcs11/token.c: PIV-50: Report YK5
	properly, including device model

2019-11-07  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: Handle no readers case (doesn't happen on macos)

2019-11-07  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-45: No need to check
	mechanism a second time, and remove unused YKCS11_GEN enum value

2019-11-06  Per Nilsson <per.nilsson@yubico.com>

	* tool/openssl-compat.c, tool/openssl-compat.h, ykcs11/utils.c: 
	PIV-45: Added ECDSA_SIG_set0 to openssl-compat

2019-11-06  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h: PIV-45: ykcs11: Added
	support for C_VerifyInit and C_Verify

2019-11-06  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/tests/ykcs11_tests.c, ykcs11/utils.c, ykcs11/utils.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-45: ykcs11: Added support for
	C_VerifyInit and C_Verify

2019-11-06  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Fixed a couple more typos

2019-11-06  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c, ykcs11/token.c, ykcs11/token.h, ykcs11/ykcs11.c: 
	PIV-26: Meaningful token label since it's used in ssh PIN prompt.
	Cleaned up som debug printouts.

2019-11-05  Per Nilsson <per.nilsson@yubico.com>

	* lib/tests/api.c, ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c: 
	Fixed a couple of typos

2019-11-05  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/token.c: PIV-50: Return the right version info

2019-11-05  Per Nilsson <per.nilsson@yubico.com>

	* configure.ac, lib/ykpiv.map: Updated release and ABI version

2019-11-05  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/token.c,
	ykcs11/token.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-51:
	C_GenerateKeyPair should not re-read a just-stored certificate

2019-11-05  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/token.c,
	ykcs11/ykcs11.h: PIV-49: Support for attestation key (signing
	doesn't work so far)

2019-11-04  Per Nilsson <per.nilsson@yubico.com>

	* lib/internal.h, lib/ykpiv.c: PPIV-34: Cache management key

2019-11-04  Per Nilsson <per.nilsson@yubico.com>

	* lib/util.c, lib/ykpiv.h, ykcs11/openssl_utils.c, ykcs11/token.c: 
	General cleanup

2019-11-04  Per Nilsson <per.nilsson@yubico.com>

	* lib/internal.h, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	ykcs11/token.c, ykcs11/ykcs11.c: PIV-34: Added ykpiv_reset_card and
	call it from ykcs11

2019-11-04  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-36: Added a per-slot mutex
	to protect against multi-threaded sessions

2019-11-01  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-36: Reverted to piv_state
	per slot only

2019-11-01  Per Nilsson <per.nilsson@yubico.com>

	* lib/internal.h, lib/ykpiv.c: PIV-34: _ykpiv_verify is static
	again. Cast LONG to long on print to be platform independent

2019-10-31  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: PIV-34: ykpiv_disconnect doesn't use transaction any
	more - it silently failed on macos

2019-10-30  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: PIV-34: Only disconnect in transaction if needed

2019-10-30  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.map: PIV-41: ykpiv_authenticate
	using implicit default mgm key

2019-10-30  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: PIV-34: ykpiv_disonnnect uses a transaction

2019-10-30  Per Nilsson <per.nilsson@yubico.com>

	* lib/internal.h, lib/ykpiv.c: PIV-34: Use _ykpiv_verify to avoid
	recursion in _ykpiv_begin_transaction

2019-10-29  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c: PIV-34: Fixed reconnect issue where select & verify
	were done outside transaction

2019-10-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-41: C_InitToken checks key length

2019-10-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-41: Implement C_InitToken

2019-10-28  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c: PIV-44: Use consistent buffer
	sizes and other cleanups

2019-10-25  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/token.c, ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c: 
	PIV-42: Fix model and serial number being null-terminated

2019-10-25  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c: PIV-42: Added explicit
	length to data_objects

2019-10-25  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: PIV-42: Fix string-typed attributes null
	termination

2019-10-25  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-36: Keep a piv_state per
	slot to enforce reset

2019-10-24  Per Nilsson <per.nilsson@yubico.com>

	* lib/internal.h, lib/ykpiv.c, ykcs11/ykcs11.c, ykcs11/ykcs11.h: 
	PIV-36: Piv state moved back to sessions

2019-10-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Added missing unlocks

2019-10-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Added locking

2019-10-23  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h: 
	PIV-23: Introduced openssl helpers

2019-10-22  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/ykcs11.c: PIV-23: ykcs11: Added condition for decrypt
	operation for context-specific login

2019-10-22  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: PIV-23: ykcs11: Fixed the login and
	the multiple sessions tests

2019-10-22  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c: PIV-23: ykcs11: Returned
	certificate attributes and set CKA_ALWAYS_AUTHENTICATE to true on
	slot 9c

2019-10-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-30: Fixed debug output

2019-10-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: PIV-32: Removed redundant comment

2019-10-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c: PIV-32: Remove OID
	conversion

2019-10-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-36: Global login state

2019-10-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Properly return slots based on tokenPresent flag

2019-10-21  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Initialize slot flags properly

2019-10-18  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Fixed merge conflict

2019-10-18  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.h: Move piv_state to slot

2019-10-18  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c: 
	PIV-28: ykcs11: Added support for decryption using CKM_RSA_X_509
	mechanism

2019-10-17  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c, ykcs11/ykcs11.h: 
	PIV-28: ykcs11: Added support for decryption with RSA keys
	functionality and added a test for it

2019-10-17  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c: PIV-30: Check for
	invalid slotid in CloseAllSessions

2019-10-16  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-30: Fix CloseAllSessions and leak in
	CloseSession

2019-10-16  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: PIV-30: Move code to more logical position

2019-10-16  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: 
	PIV-30: Session share ykpiv_state by implicit ref counting

2019-10-16  Per Nilsson <per.nilsson@yubico.com>

	* lib/ykpiv.c, ykcs11/ykcs11.c: PIV-37: Exactl reader naming & fixed
	cacheing

2019-10-16  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: PIV-28: ykcs11: Added tests for
	generating ECP384 keys and C_Digest

2019-10-15  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: PIV-28: ykcs11: Added tests for
	generating asymmetric keys and for finding objects

2019-10-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Fixed session handling & reader name trim

2019-10-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Refactored using object handle mapping

2019-10-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.h: Use separate active flag for
	C_FindObjects.

2019-10-15  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: 
	Fixed mapping between CKA_ID and handles

2019-10-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Added get_session_handle to localize conversions

2019-10-11  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/ykcs11.c: PIV-28: ykcs11: Fixed C_FindObjects functions

2019-10-11  Aveen Ismail <aveen.ismail@yubico.com>

	* : commit 974c1a7f8077610f5d6e778d8f07f920988b6299 Author: Aveen
	Ismail <aveen.ismail@yubico.com> Date:   Fri Oct 11 15:43:08 2019
	+0200

2019-10-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Increment find_idx even when we hit max returned
	count

2019-10-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Check library initialization everywhere

2019-10-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Implemented session counts

2019-10-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.h: Reordered for clarity

2019-10-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: Renamed paparm

2019-10-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.h: op_info moved into session.
	Corrected size of data

2019-10-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/token.c, ykcs11/ykcs11.h: Small correction and removed
	unused code

2019-10-11  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.h: Corrections

2019-10-11  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/tests/ykcs11_tests.c,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h: PIV-28: ykcs11: Improvements in
	the C_Sign function

2019-10-09  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/ykcs11.c,
	ykcs11/ykcs11.h: PIV-28: ykcs11: Added implementation of
	C_DigestInit() and C_Digest

2019-10-08  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c, ykcs11/ykcs11.h: 
	ykcs11: Fixed and added more ykcs11 tests

2019-10-07  Per Nilsson <per.nilsson@yubico.com>

	* : Merged

2019-10-07  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/ykcs11.c: PIV-19: ykcs11: Minor code improvement

2019-10-07  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/token.c, ykcs11/token.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: 
	Moved data to session

2019-10-07  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c, ykcs11/ykcs11.h: 
	ykcs11: Implemented support for multiple sessions

2019-10-03  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c, ykcs11/ykcs11.h: find_obj os now inline inside
	session

2019-10-03  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: Guard agains non-cert objects

2019-10-03  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c: Support CKA_VALUE for data objects, plus some
	cleanups

2019-10-03  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c, ykcs11/ykcs11.h: Token objects
	and find state moved to session

2019-10-02  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/objects.c, ykcs11/token.c, ykcs11/token.h, ykcs11/utils.c,
	ykcs11/utils.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: Fixed locking &
	session handling

2019-10-02  Klas Lindfors <klas@yubico.com>

	* : commit cdf1c1a0dbec84ab59e667fbd3e861c9cc6e4ea2 Author: Per
	Nilsson <per.nilsson@yubico.com> Date:   Wed Oct 2 10:27:06 2019
	+0200

2019-10-02  Doan Tran Cong Danh <congdanhqx@gmail.com>

	* tool/yubico-piv-tool.c: yubico-piv-tool: avoid obsolete macro
	M_ASN1_BIT_STRING_set From commit f422a51486, ("Remove old ASN.1 code.", 2015-03-14),
	OpenSSL no longer provides M_ASN1_* macro.  In that change, OpenSSL replaced M_ASN1_BIT_STRING_set with
	ASN1_STRING_set.  Follow OpenSSL steps to support all rolling-release distro.  Signed-off-by: Doan Tran Cong Danh <congdanhqx@gmail.com>

2019-10-02  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Disconnect before clearing state

2019-10-01  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c: Removed bogus
	mutex cleanup and some cleanup

2019-10-01  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c: Removed reduntant
	arg

2019-10-01  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/token.c: Small fix

2019-10-01  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c: Use utility
	memstrcpy to fill in non-null-terminated strings

2019-10-01  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/slot.c, ykcs11/slot.h, ykcs11/utils.c: Removed
	get_slot_flags

2019-10-01  Per Nilsson <per.nilsson@yubico.com>

	* .gitignore, ykcs11/slot.c, ykcs11/slot.h, ykcs11/utils.c,
	ykcs11/utils.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: First stab at piv
	state per slot

2019-10-01  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/ykcs11.c: Localize access to 'readers'

2019-10-01  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c: First stab at
	locking support. Creates a single global mutex for now.

2019-10-01  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h: Added native mutex support (from
	yubihsm)

2019-10-01  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/Makefile.am, ykcs11/mechanisms.c, ykcs11/objects.c,
	ykcs11/objects.h, ykcs11/{yubico_slot.c => slot.c},
	ykcs11/{yubico_slot.h => slot.h}, ykcs11/slot_vendors.c,
	ykcs11/slot_vendors.h, ykcs11/token.c, ykcs11/token.h,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/utils.c,
	ykcs11/utils.h, ykcs11/vendor_ids.h, ykcs11/vendors.c,
	ykcs11/vendors.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h,
	ykcs11/yubico_token.c, ykcs11/yubico_token.h: ykcs11: Removed vendor
	related funtionality

2019-09-30  Per Nilsson <per.nilsson@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/token_vendors.h,
	ykcs11/utils.c, ykcs11/ykcs11.c, ykcs11/yubico_token.c,
	ykcs11/yubico_token.h: Support getting serial number.

2019-09-27  Aveen Ismail <aveen.ismail@yubico.com>

	* : Merge remote-tracking branch 'origin/ykcs11' into
	ykcs11_improvements

2019-09-16  Klas Lindfors <klas@yubico.com>

	* : commit 74a80cb593c42304fafe29613bbd1939f385b072 Author: gcbw
	<16908116+gcbw@users.noreply.github.com> Date:   Wed Sep 4 11:01:14
	2019 -0700

2019-09-02  Klas Lindfors <klas@yubico.com>

	* : commit 6bb1e257451ae7711d4f3685f4eae41737f458ff Author: SecByD
	<dstakenburg@gmail.com> Date:   Thu Aug 29 09:00:14 2019 +0200

2019-08-26  gcbw <16908116+gcbw@users.noreply.github.com>

	* tool/yubico-piv-tool.c: error message when yubikey must be
	reinserted.  instead of repeating almost word-for-word the diagnostic error from
	ykcs11 lib (which is show right above this line btw), show something
	that have *any* meaning to the end user, who likely do not know what
	a "reader" is.  Before: ``` $ yubico-piv-tool --verbose -a status error: no usable
	reader found.  Failed to connect to reader.  ``` after ``` $ yubico-piv-tool --verbose -a status error: no usable
	reader found.  Failed to connect to yubikey.  Have you tried turning
	it off and on again ``` The last line is, obviously, helpful but extraneous, mostly to make
	a point that i am not a contributor here and someone who knows the
	end users better than i do should write the actual new text.

2019-08-19  Klas Lindfors <klas@yubico.com>

	* : Merge pull request #207 from Yubico/docs Added documentation for command line actions

2019-08-16  Aveen Ismail <aveen.ismail@yubico.com>

	* : commit deebc8fea8d4a5802bed860f6ae604d9f8cb0e8e Author: Aveen
	Ismail <aveen.ismail@yubico.com> Date:   Thu Aug 15 15:21:14 2019
	+0200

2019-08-07  Aveen Ismail <aveen.ismail@yubico.com>

	* tool/util.c, ykcs11/mechanisms.c, ykcs11/openssl_utils.c,
	ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c, ykcs11/yubico_token.c: 
	Added support for ECDSA with SHA384

2019-08-07  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/token_vendors.c,
	ykcs11/yubico_token.c: ykcs11: Fixed mechanisms info and removed
	spaces

2019-08-01  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/objects.c, ykcs11/openssl_utils.c,
	ykcs11/token_vendors.c: ykcs11: minor changes

2019-07-31  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: ykcs11: Added test for EP384

2019-07-18  Aveen Ismail <aveen.ismail@yubico.com>

	* tool/util.c, tool/util.h, ykcs11/mechanisms.c,
	ykcs11/mechanisms.h, ykcs11/ykcs11.c: Added support for signing with
	EC keys created using curve P-384

2019-07-17  Aveen Ismail <aveen.ismail@yubico.com>

	* tool/util.c, tool/util.h, ykcs11/mechanisms.c, ykcs11/objects.c,
	ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/token_vendors.c: Added support for creating EC keys with
	curve P-384

2019-08-16  Aveen Ismail <aveen.ismail@yubico.com>

	* doc/Actions/attest.adoc, doc/Actions/delete_certificate.adoc,
	doc/Actions/index.adoc, doc/Actions/key_generation.adoc,
	doc/Actions/key_import.adoc, doc/Actions/read_certificate.adoc,
	doc/Actions/read_write_objects.adoc, doc/Actions/reset.adoc,
	doc/Actions/signing.adoc, doc/Actions/status.adoc,
	doc/Actions/test-decryption.adoc, doc/Actions/test-signature.adoc,
	doc/Actions/version.adoc: Added documentation for command line
	actions

2019-08-15  Aveen Ismail <aveen.ismail@yubico.com>

	* tool/util.c, ykcs11/mechanisms.c, ykcs11/objects.c,
	ykcs11/openssl_utils.c, ykcs11/tests/ykcs11_tests.c,
	ykcs11/token_vendors.c, ykcs11/ykcs11.c: ykcs11: Fixed tabs and
	empty spaces

2019-08-12  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c: ykcs11: Rearranged slot IDs
	to match OpenSC IDs

2019-08-07  Aveen Ismail <aveen.ismail@yubico.com>

	* tool/util.c, ykcs11/mechanisms.c, ykcs11/openssl_utils.c,
	ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c, ykcs11/yubico_token.c: 
	Added support for ECDSA with SHA384

2019-08-07  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/token_vendors.c,
	ykcs11/yubico_token.c: ykcs11: Fixed mechanisms info and removed
	spaces

2019-08-01  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/objects.c, ykcs11/openssl_utils.c,
	ykcs11/token_vendors.c: ykcs11: minor changes

2019-07-31  Aveen Ismail <aveen.ismail@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: ykcs11: Added test for EP384

2019-07-18  Aveen Ismail <aveen.ismail@yubico.com>

	* tool/util.c, tool/util.h, ykcs11/mechanisms.c,
	ykcs11/mechanisms.h, ykcs11/ykcs11.c: Added support for signing with
	EC keys created using curve P-384

2019-07-17  Aveen Ismail <aveen.ismail@yubico.com>

	* tool/util.c, tool/util.h, ykcs11/mechanisms.c, ykcs11/objects.c,
	ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/token_vendors.c: Added support for creating EC keys with
	curve P-384

2019-07-17  Alessio Di Mauro <alessio@yubico.com>

	* : Merge PR #201

2019-07-15  Alessio Di Mauro <alessio@yubico.com>

	* : Merge PR #198

2019-07-03  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: lib: correct parentheses around condition+assignment fixes #197

2019-06-24  Dain Nilsson <dain@yubico.com>

	* doc/YKCS11_release_notes.adoc: Remove note about ifd-yubico.

2019-05-22  Alessio Di Mauro <alessio@alessiodimauro.com>

	* : Merge PR #194

2019-05-20  Alessio Di Mauro <alessio@alessiodimauro.com>

	* : Merge PR #193

2019-05-07  Klas Lindfors <klas@yubico.com>

	* : commit c61d6c6f2303d9bc579fb33c8617628d8ed1244b Author: Dave
	Pate <dpate@yubico.com> Date:   Mon May 6 14:46:46 2019 -0700

2019-04-03  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: bump openssl to 1.0.2r

2019-04-03  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version for 1.7.1

2019-04-03  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: NEWS for 1.7.0

2019-04-03  Klas Lindfors <klas@yubico.com>

	* : commit 7b64528cf7ba87e803a3ed29c8ca877e88796e24 Author: Dave
	Pate <dpate@yubico.com> Date:   Tue Jan 22 13:59:06 2019 -0800

2019-01-22  Dave Pate <dpate@yubico.com>

	* lib/internal.h, lib/ykpiv.c: lib: tlv length buffer checks

2019-01-22  Dave Pate <dpate@yubico.com>

	* lib/util.c: lib: handle realloc failures safely

2019-01-22  Dave Pate <dpate@yubico.com>

	* lib/util.c: lib: clear secrets in set_protected_mgm

2019-01-22  Dave Pate <dpate@yubico.com>

	* lib/ykpiv.c: lib: clear secrets in ykpiv_import_private_key

2019-01-21  Dave Pate <dpate@yubico.com>

	* lib/internal.h, lib/util.c: lib: correct zero memory defines,
	correct overflow checks in _write_certificate

2019-01-17  Dave Pate <dpate@yubico.com>

	* lib/ykpiv.c: lib: clear secrets in auth api

2019-01-17  Dave Pate <dpate@yubico.com>

	* lib/ykpiv.c: lib: check that serial/version checks occur during
	select

2019-01-07  Dave Pate <dpate@yubico.com>

	* lib/internal.c, lib/internal.h, lib/ykpiv.c: lib: define constant
	for max pin len magic numbers lib: clear pin buffers when no longer
	used

2019-01-07  Dave Pate <dpate@yubico.com>

	* lib/ykpiv.c: lib: check internal authentication crypt errors

2019-01-07  Dave Pate <dpate@yubico.com>

	* lib/internal.c, lib/ykpiv.c: lib: clear buffers containing key
	material

2019-01-07  Dave Pate <dpate@yubico.com>

	* lib/internal.h, lib/util.c: lib: use secure zero memory platform
	functions

2019-01-07  Dave Pate <dpate@yubico.com>

	* lib/util.c, lib/ykpiv.c: lib: resolves potential reads of
	uninitialized data

2019-03-06  pedro martelletto <pedro@yubico.com>

	* doc/YubiKey_PIV_introduction.adoc: doc: set LC_CTYPE=C; fixes
	ef81d164 on MacOS

2019-03-06  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #187 from Yubico/pvs_remove_warnings Remove some warnings

2019-03-06  Gabriel Kihlman <g.kihlman@yubico.com>

	* ykcs11/ykcs11.c: Do not assign variable twice

2019-03-06  Gabriel Kihlman <g.kihlman@yubico.com>

	* ykcs11/ykcs11.c: Remove duplicate check on op_info.type !=
	YKCS11_SIGN

2019-03-05  Klas Lindfors <klas@yubico.com>

	* : commit ef81d1646536d5d9f2056cdc78a4a1052e8851a7 Author: pedro
	martelletto <pedro@yubico.com> Date:   Tue Mar 5 07:58:09 2019 +0100

2019-02-20  Alessio Di Mauro <alessio@yubico.com>

	* : Merge PR#184

2019-02-18  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl version and don't include check binaries

2019-02-15  Alessio Di Mauro <alessio@yubico.com>

	* : Merge PR#183

2019-02-15  Alessio Di Mauro <alessio@yubico.com>

	* : Merge PR #182

2019-01-07  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: ykcs11: use a large enough buffer when writing EC
	signatures

2019-01-02  Klas Lindfors <klas@yubico.com>

	* : commit 811ddbb22d293aea6508d69bb7b98d8386fc8071 Author: Stacey
	Sheldon <stac@solidgoldbomb.org> Date:   Tue Jan 1 01:43:51 2019
	-0500

2019-01-01  Stacey Sheldon <stac@solidgoldbomb.org>

	* tools/fasc.pl: FASC-N: correct encoding of the packed 4-bit
	decimal format with odd parity The BCD digits in the FASC-N credential are sent lsb first followed
	by an odd parity.  Since this perl script is simply packing the bits
	in their expected order, the encodings should exactly match figure 7
	in "Technical Implementation Guidance: Smart Card Enabled Physical
	Access Control Systems Version 2.2".

2018-12-18  Klas Lindfors <klas@yubico.com>

	* tools/fasc.pl: fix fasc-n value of 1 relates #177

2018-09-21  Klas Lindfors <klas@yubico.com>

	* : commit 898b85821cbfa2c0b841e46d39a45b42e9891bfd Author: Klas
	Lindfors <klas@yubico.com> Date:   Tue Sep 18 08:38:57 2018 +0200

2018-09-14  Dave Pate <notdpate@gmail.com>

	* configure.ac, lib/internal.c, lib/internal.h, lib/util.c,
	lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, tool/yubico-piv-tool.c: 
	libykpiv/piv-tool 1.6.3 lib: promote get_serial to base API lib: add
	ykpiv_get_serial to external API tool: add serial number/version to
	status command build: fix msvc build of case insensitive-reader
	(missing strncasecmp and cast warnings) lib: consolidate neo/yk4 +
	yk5 serial number routines lib: fix GCC 8 compilier warnings lib:
	reimplement deauthenticate to select mgmt aid build: disable
	-Waggregate-return lib: fix warning differences between gcc and msvc
	lib: add option to disable implicit card transactions lib: remove
	application reselect prior to crypt operations build: fix msvc
	warnings wrt length checking logic fixes lib: fix error condition
	logic in untransacted internal functions lib: create internal
	transactionless ykpiv_transfer_data

2018-09-14  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version to 1.6.3

2018-09-14  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.6.2

2018-09-10  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: tool: for openssl 1.1 rsa signatures
	include hash oid the rsa signature has to be over hash oid + message digest, dropping
	the oid from the hash leads to invalid certificate requests and
	selfsigned certificates.  fixes #164

2018-09-10  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: tool: only declare the static struct once
	in wrap_public_key() and make sure to just set it once for both rsa and ec

2018-09-10  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: tool: handle error conditions from signing
	with openssl 1.1 relates #164

2018-09-07  Alessio Di Mauro <alessio@yubico.com>

	* : Merge PR #163

2018-08-17  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: bump openssl versions to 1.0.2p

2018-08-17  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version to 1.6.2

2018-08-17  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.6.1

2018-08-17  Klas Lindfors <klas@yubico.com>

	* NEWS: update NEWS for more changes that happened in 1.6.0

2018-08-17  Klas Lindfors <klas@yubico.com>

	* configure.ac: finish up version bump to 1.6.1, LT_REVISION has to
	increase

2018-08-16  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: tool: check length before trying to store
	cert in buffer fixes #148

2018-08-16  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: ykpiv: when decoding an object compare lengths
	correctly the length comparison when reading an object out was messed up, this
	fixes it to compare correctly.  relates #154

2018-08-16  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: ykpiv: fix length when encoding exactly 0xff bytes this should be encoded as 81 ff, not 82 00 ff relates #154

2018-08-09  Klas Lindfors <klas@yubico.com>

	* : commit d613b42b0c65dab0ac18dd8686631e075ea947b9 Author: Jakub
	Jelen <jjelen@redhat.com> Date:   Wed Aug 8 16:03:23 2018 +0200

2018-08-08  Thordur Bjornsson <thorduri@yubico.com>

	* configure.ac: Revert the configure.ac portion of c31a0425.  Bugfixes don't change the libtool versions, so revert back.

2018-08-08  Thordur Bjornsson <thorduri@yubico.com>

	* NEWS, configure.ac: Bump version to 1.6.1 unreleased

2018-08-06  Thordur Bjornsson <thorduri@yubico.com>

	* NEWS, configure.ac: release: 1.6.0

2018-05-22  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: lib: in _ykpiv_fetch_object() handle bogus length by
	returning otherwise we might memmove() to much data Thanks to Eric Sesterhenn of x41 D-Sec for reporting this issue to
	us.

2018-05-22  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: lib: in ykpiv_transfer_data() handle overflow by
	exiting this is detected and printed, but we never exit the function Thanks to Eric Sesterhenn of x41 D-Sec for reporting this issue to
	us.

2018-05-15  Alessio Di Mauro <alessio@alessiodimauro.com>

	* ykcs11/objects.c: ykcs11: ignore more attributes when creating
	objects

2018-05-09  Alessio Di Mauro <alessio@alessiodimauro.com>

	* ykcs11/objects.c: Make slot 9e private so that OpenSSL can ask for
	a PIN

2018-05-07  Alessio Di Mauro <alessio@alessiodimauro.com>

	* ykcs11/yubico_token.c: Remove 384 from the supported lengths for
	EC key generation in ykcs11 Closes #149

2018-05-03  Alessio Di Mauro <alessio@alessiodimauro.com>

	* ykcs11/mechanisms.c: Ignore CKA_PRIVATE in ykcs11 Newer version of pkcs11-tool set the CKA_PRIVATE attribute during
	generation making the operation fail. The attribute is now ignored.

2018-05-03  Alessio Di Mauro <alessio@alessiodimauro.com>

	* ykcs11/openssl_utils.c: Update key generation in ykcs11 to work
	with OpenSSL 1.1 Manually setting a signature for a certificate is not possible in
	OpenSSL 1.1 because some of the structs have become opaque. Use
	X509_sign() with a bogus key instead.

2018-03-25  Klas Lindfors <klas@yubico.com>

	* : commit 9d8f8f3f2b8232862452e1557305b5f9f74bb5b1 Author: James
	Alseth <james@jalseth.me> Date:   Fri Mar 23 14:53:27 2018 -0700

2018-03-19  Alessio Di Mauro <alessio@yubico.com>

	* vagrant/development/provision.sh: Add check as a dependency to the
	Vagrant provision script Closes #142.

2018-03-06  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #139 from notdpate/master Libykpiv ROCA mitigation changes for PIV tool/Minidriver - Release
	1.5.2

2018-03-05  Dave Pate <notdpate@gmail.com>

	* : Merge upstream master commits

2018-02-27  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #138 from Jakuje/master Compiler warnings and compatibility with older check versions

2018-02-10  Jakub Jelen <jjelen@redhat.com>

	* lib/tests/api.c, lib/util.c, tool/util.c: Remove unused variables

2018-02-27  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #141 from laomaiweng/openssl-1.1.0-compat Improve compatibility with OpenSSL 1.1.0

2018-02-10  Jakub Jelen <jjelen@redhat.com>

	* lib/tests/api.c: Do not build test if HW_TESTS is not enabled (to
	avoid warnings)

2018-02-09  Dave Pate <notdpate@gmail.com>

	* lib/ykpiv.c: Fix msvc build warning re: return values

2018-02-09  Dave Pate <notdpate@gmail.com>

	* lib/internal.c, lib/ykpiv.c: Fix warnings in msvc build

2018-02-09  Dave Pate <notdpate@gmail.com>

	* .gitignore, configure.ac, lib/internal.c, lib/internal.h,
	lib/util.c, lib/ykpiv.c: Add syslog/windows event log output Read
	multistage configuration Update ROCA mitigation check and warnings

2018-01-25  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #137 from Yubico/custom_pcsc Support specifying custom PCSC lib

2018-01-02  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #136 from jmyreen/openssl-1.1-fixes Fixed some bugs in the port to Openssl-1.1:

2017-12-30  Johan Myren <jem@grey.localdomain>

	* tool/yubico-piv-tool.c: Fixed some bugs in the port to
	Openssl-1.1: - wrap_public_key() passed the address of the local stack variable   internal_key to RSA_meth_set0_data(), which was used long after   wrap_public_key() had returned. Changed to static.  - The callback functions yk_rsa_meth_sign and yk_ec_meth_sign
	  'siglen' parameter has type (unisgned int *), which was cast to
	  (size_t *) before it was used to write a value in the caller's
	  memory space. This caused stack corruption on machines where size_t
	  is bigger than unsigned int.  - The callback function's 'siglen' parameter is output-only, not   in-out. The input value was assumed to contain the maximum size of   the output buffer as input, and a bogus value was compared to the   amount of data received from the token in function   _general_authenticate(). Changed to pass in the values returned by   RSA_size(rsa) and ECDSA_size(ec), which Openssl specifies as
	  minimum buffer sizes.  - The callback functions' return values were swapped; fixed to
	  return 1 on success, 0 on failure.

2017-12-29  Aloz1 <kno0001@gmail.com>

	* tool/openssl-compat.c, tool/openssl-compat.h,
	tool/yubico-piv-tool.c, ykcs11/openssl_utils.c,
	ykcs11/tests/ykcs11_tests.c: Added checks to allow building against
	LibreSSL It seems that when OpenSSL 1.1.0 support was added, LibreSSL was
	broken due to the way version checking was done. This adds extra
	checks for LIBRESSL_VERSION_NUMBER where applicable.

2017-11-29  Trevor Bentley <trevor@yubico.com>

	* NEWS, configure.ac: Bump version to 1.5.1 unreleased

2017-11-29  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #133 from Yubico/distclean Use library dependencies for openssl compat layer

2017-11-29  Trevor Bentley <mrmekon@gmail.com>

	* configure.ac, lib/tests/Makefile.am, ykcs11/tests/Makefile.am: Use
	library dependencies for openssl compat layer

2017-11-29  Trevor Bentley <trevor@yubico.com>

	* NEWS: Updated NEWS

2017-11-29  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #132 from Yubico/bump_openssl Bump Windows/Mac builds to latest OpenSSL 1.0.x

2017-11-27  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #131 from Yubico/openssl1.1_jakuje OpenSSL 1.1 compatibility

2017-11-27  Trevor Bentley <trevor@yubico.com>

	* mac.mk, windows.mk: Build with correct OpenSSL version number on
	Mac and mingw32/64 This is a cosmetic change.  OpenSSL picks up the VERSION environment
	variable when building, which is set to the yubico-piv-tool version
	number during Travis-CI builds.  This overrides it back to the
	OpenSSL version when building OpenSSL.

2017-11-27  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c, linux.mk, tool/openssl-compat.h: Fix OpenSSL 1.1
	build with mingw32/64

2017-11-24  Trevor Bentley <trevor@yubico.com>

	* .travis.yml, build-and-test.sh, configure.ac, linux.mk: Build
	against OpenSSL 1.1 in travis-ci

2017-11-21  Trevor Bentley <trevor@yubico.com>

	* configure.ac, lib/internal.c, lib/tests/Makefile.am,
	lib/tests/api.c, lib/ykpiv.c, tool/util.c, tool/yubico-piv-tool.c,
	ykcs11/tests/Makefile.am, ykcs11/tests/ykcs11_tests.c: Fix OpenSSL
	 1.1 compat layer - Changes for latest ykpiv_util refactor  - Passes hw tests with openssl 1.0 and 1.1  - Passes valgrind

2017-11-20  Trevor Bentley <trevor@yubico.com>

	* : commit 3aaa525efc678f9bca1fb08716e282eb00536356 Merge: d5283ff
	6a34b6e Author: Trevor Bentley <mrmekon@gmail.com> Date:   Mon Nov
	20 10:23:05 2017 +0100

2017-11-16  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c, windows.mk, ykcs11/tests/ykcs11_tests.c: Fix
	cross-compiling for mingw64

2017-11-14  Jakub Jelen <jjelen@redhat.com>

	* tool/openssl-compat.c, tool/openssl-compat.h,
	tool/yubico-piv-tool.c, ykcs11/tests/ykcs11_tests.c: Properly apply
	the OpenSSL version checks

2017-11-14  Trevor Bentley <trevor@yubico.com>

	* build-and-test.sh: Install 'check' package in build script.

2017-11-14  Jakub Jelen <jjelen@redhat.com>

	* tool/yubico-piv-tool.c: Do not use the new API with the old
	OpenSSL

2017-11-14  Jakub Jelen <jjelen@redhat.com>

	* ykcs11/tests/ykcs11_tests.c: Provide the bogus signature with
	OpenSSL 1.1.0 API

2017-11-14  Jakub Jelen <jjelen@redhat.com>

	* ykcs11/tests/ykcs11_tests.c: Use the new OpenSSL 1.1.0 API also in
	the HW tests

2017-11-13  Jakub Jelen <jjelen@redhat.com>

	* ykcs11/openssl_utils.c: Use OpenSSL 1.1.0 API

2017-10-20  Jakub Jelen <jjelen@redhat.com>

	* tool/yubico-piv-tool.c, ykcs11/openssl_utils.c: WIP:Use RSA/EC_KEY
	METHOD to provide X509 signatures using high-level OpenSSL API

2017-10-20  Jakub Jelen <jjelen@redhat.com>

	* lib/ykpiv.c, tool/yubico-piv-tool.c, ykcs11/tests/ykcs11_tests.c: 
	RAND_pseudo_bytes is deprecated in OpenSSL 1.1.0

2017-02-23  Jakub Jelen <jjelen@redhat.com>

	* tool/Makefile.am, tool/openssl-compat.c, tool/openssl-compat.h,
	tool/util.c, tool/yubico-piv-tool.c, ykcs11/openssl_utils.c: Few
	more OpenSSL 1.1.0 incompatibilities

2017-02-20  Jakub Jelen <jjelen@redhat.com>

	* tool/Makefile.am, tool/openssl-compat.c, tool/openssl-compat.h,
	tool/util.c, tool/yubico-piv-tool.c: Initial idea of openssl-1.1.0
	compatibility (still missing some magic around certificates)

2017-11-08  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.h: Doxygen documentation for ykpiv_util_* API.

2017-11-08  Trevor Bentley <trevor@yubico.com>

	* README, configure.ac, lib/util.c, lib/ykpiv.c, lib/ykpiv.h: Clean
	up typos, warnings, and incorrect libtool age.

2017-11-03  Trevor Bentley <trevor@yubico.com>

	* .gitignore: Update .gitignore

2017-11-03  Trevor Bentley <trevor@yubico.com>

	* NEWS, lib/ykpiv.h: Organize ykpiv.h, update NEWS file for 1.5.0

2017-11-03  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c: Add integration test for PIN cache

2017-10-31  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c, ykcs11/tests/ykcs11_tests.c: Skip unusable
	integration tests when testing a NEO

2017-10-31  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c: Allow changing libykpiv compile-time ifdefs from
	CFLAGS

2017-10-31  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c, lib/util.c, lib/ykpiv.c,
	ykcs11/tests/Makefile.am, ykcs11/tests/reset.sh: Disable
	ensure_application_selected() by default, since it breaks PIN
	policy.

2017-10-26  Trevor Bentley <trevor@yubico.com>

	* lib/internal.h, lib/tests/Makefile.am, lib/tests/api.c,
	lib/ykpiv.c, lib/ykpiv.map: Fix build on Linux Signed-off-by: Trevor Bentley <trevor@yubico.com>

2017-10-26  Dave Pate <dpate@yubico.com>

	* lib/internal.c, lib/ykpiv.c, lib/ykpiv.h: api: use uintptr_t for
	architecture specific handle sizes

2017-10-26  Trevor Bentley <trevor@yubico.com>

	* configure.ac, lib/tests/Makefile.am, tool/tests/Makefile.am,
	ykcs11/tests/Makefile.am, ykcs11/tests/ykcs11_tests.c: Fix compile
	time warnings about -no-install on Darwin/clang

2017-10-25  Trevor Bentley <trevor@yubico.com>

	* lib/util.c: Suppress sscanf_s error on Windows

2017-10-25  Trevor Bentley <trevor@yubico.com>

	* lib/util.c: Remove accidental printf

2017-10-24  Trevor Bentley <trevor@yubico.com>

	* lib/util.c, tool/yubico-piv-tool.c: Move YK4 insecure on-chip key
	generation prevention from yubico-piv-tool to libykpiv

2017-10-24  Trevor Bentley <trevor@yubico.com>

	* Makefile.am, lib/tests/api.c, tool/tests/basic.sh,
	tools/confirm.sh, ykcs11/tests/ykcs11_tests.c: Move hardware tests
	to "make hwtest", with one warning for all test suites.  - "make check" will mark destructive tests as skipped - "make hwtest" will ask once for user confirmation

2017-10-23  Trevor Bentley <trevor@yubico.com>

	* tool/yubico-piv-tool.c: Remove artifact from rebase (bad local
	variable)

2017-10-23  Trevor Bentley <trevor@yubico.com>

	* configure.ac, lib/ykpiv.map: Bump libykpiv version to 1.5.0

2017-10-23  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: Some documentation and cleanup of
	ykpiv.h

2017-10-23  Trevor Bentley <trevor@yubico.com>

	* Makefile.am, configure.ac, lib/Doxyfile, lib/ykpiv.h,
	m4/ac_doxygen.m4: Generate Doxygen docs for libykpiv if doxygen is
	available.

2017-10-23  Trevor Bentley <trevor@yubico.com>

	* lib/internal.c, lib/tests/api.c: Use openssl implementation of
	DES_is_weak_key on non-Windows, and add unit test.

2017-10-20  Trevor Bentley <trevor@yubico.com>

	* lib/internal.h, lib/util.c, lib/ykpiv.c: Fix applet selection for
	whole public API.

2017-10-20  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c, lib/ykpiv.c, lib/ykpiv.h, tool/tests/basic.sh: 
	Fix unit tests for NEO: use ECCP256 and detect attestation errors

2017-10-20  Trevor Bentley <trevor@yubico.com>

	* tool/tests/basic.sh: Extra attempts for PIN/PUK block in unit test

2017-10-10  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c: Fix PIN length handling in ykpiv_verify*()

2017-10-10  Trevor Bentley <trevor@yubico.com>

	* lib/tests/Makefile.am, lib/tests/{util.c => api.c}: Rename util.c
	test suite to api.c

2017-10-10  Trevor Bentley <trevor@yubico.com>

	* lib/util.c, lib/ykpiv.c, lib/ykpiv.h: Backport minidriver changes * Port ykpiv_auth_getchallenge and ykpiv_auth_verifyresponse  - Commit 8fde607b50b19c57a662c53c6b276b54a78606d8  - Commit 6046b98e477cfef59a590ce2177336d694813e7e  - Commit 422cea11745dc67d15039e242ed21ecb5208ae55  - Commit 1d31647e5a27bd2df6bda76512c7d673980f0bec * Rename connect2() and done2() to connect_with_external_card(),
	etc.  * Select applet in ykpiv_change_pin, change_puk, and unblock_pin

2017-09-28  Trevor Bentley <trevor@yubico.com>

	* tool/tests/basic.sh, tool/tests/cert.pem, tool/tests/private.pem,
	tool/tests/public.pem: Add automated tests for yubico-piv-tool CLI
	(hw-tests only)

2017-09-27  Trevor Bentley <trevor@yubico.com>

	* lib/internal.c, tool/util.c, ykcs11/openssl_utils.c,
	ykcs11/utils.c, ykcs11/ykcs11.c, ykcs11/yubico_slot.c,
	ykcs11/yubico_token.c: Fix all clang scan-build warnings

2017-09-26  Trevor Bentley <trevor@yubico.com>

	* lib/tests/util.c, tool/yubico-piv-tool.c: Unit test for
	ykpiv_attest()

2017-09-26  Trevor Bentley <trevor@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: Fix issue #123 -
	specify text/binary mode for open files

2017-09-26  Trevor Bentley <trevor@yubico.com>

	* lib/util.c, lib/ykpiv.h, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c, ykcs11/token_vendors.c: Use slot enum
	consistently.  Move slot->object translation into libykpiv.

2017-09-25  Trevor Bentley <trevor@yubico.com>

	* lib/internal.h, lib/util.c, lib/ykpiv.h, tool/yubico-piv-tool.c: 
	Add ykpiv_util_(get/set)_cccid(), and use in yubico-piv-tool

2017-09-20  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: Fix ykpiv_attest slot argument name

2017-09-20  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: Add
	ykpiv_attest() and use it in yubico-piv-tool

2017-09-19  Trevor Bentley <trevor@yubico.com>

	* tool/yubico-piv-tool.c: yubico-piv-tool: use ykpiv_util_read_cert

2017-09-19  Trevor Bentley <trevor@yubico.com>

	* tool/yubico-piv-tool.c: yubico-piv-tool: use
	ykpiv_util_delete_cert

2017-09-18  Trevor Bentley <trevor@yubico.com>

	* lib/tests/util.c, lib/util.c, lib/ykpiv.h, tool/util.c,
	tool/util.h, tool/yubico-piv-tool.c: Add gzip support to
	ykpiv_util_import_certificate(), and use in yubico-piv-tool

2017-09-13  Trevor Bentley <trevor@yubico.com>

	* lib/tests/util.c, lib/ykpiv.c, lib/ykpiv.h,
	tool/yubico-piv-tool.c: yubico-piv-tool: Switch to
	ykpiv_set_pin_retries()

2017-09-12  Trevor Bentley <trevor@yubico.com>

	* tool/yubico-piv-tool.c: yubico-piv-tool: use ykpiv_util_reset()

2017-09-12  Trevor Bentley <trevor@yubico.com>

	* tool/yubico-piv-tool.c: yubico-piv-tool: use util function for key
	generation

2017-09-12  Trevor Bentley <trevor@yubico.com>

	* lib/internal.h, lib/util.c, lib/ykpiv.c: Move shared functionality
	from util.c to internal.h

2017-09-12  Trevor Bentley <trevor@yubico.com>

	* lib/internal.c, lib/internal.h, lib/util.c, lib/ykpiv.c,
	lib/ykpiv.h: Cleanup compiler warnings, and switch to cross-platform
	data types

2017-09-12  Trevor Bentley <trevor@yubico.com>

	* lib/internal.c, lib/internal.h, lib/ykpiv.c, lib/ykpiv.h: Cleanup
	function names.  Make PIN cache optional.

2017-09-11  Trevor Bentley <trevor@yubico.com>

	* lib/Makefile.am, lib/internal.c, lib/internal.h, lib/util.c,
	lib/ykpiv.c, lib/ykpiv.h: Fix DES bugs in Linux.  Windows+Linux both
	pass unit tests.

2017-08-28  Trevor Bentley <trevor@yubico.com>

	* lib/Makefile.am, lib/internal.h, lib/tests/util.c, lib/util.c,
	lib/ykpiv.c, lib/ykpiv.h: Backport from minidriver: commit 90020fea0ac34b2f98b68a5798fa85cb5ad12175 (tag: 3.2) Author:
	Dave Pate <dpate@yubico.com> Date:   Thu Jul 27 00:31:54 2017 -0700     Release 3.2     Adds automatic PUK blocking     Adds feature to turn automatic PUK blocking off     Miscellaneous fixes with metadata handling

2017-08-07  Trevor Bentley <trevor@yubico.com>

	* lib/util.c: Backport from minidriver:
	11788a4a36bf83a01104700f171774336086e9b4 commit 11788a4a36bf83a01104700f171774336086e9b4 Author: Dave Pate
	<dpate@yubico.com> Date:   Tue Jul 18 18:28:48 2017 -0700     Fixes #114 - jump to cleanup section in ykpiv_util_write_mscmap
	    on invalid size

2017-08-07  Trevor Bentley <trevor@yubico.com>

	* .gitignore, lib/tests/Makefile.am, lib/tests/util.c, lib/ykpiv.c,
	lib/ykpiv.h: Continuing unit tests and minor bug fixes * Support unit tests on Yubikey NEO * Test ykpiv_get_version * Test ykpiv_import_private_key * Test ykpiv_sign_data * Test ykpiv_decipher_data * Test ykpiv_change_pin * Test ykpiv_change_puk * Test ykpiv_get_pin_retries * Test ykpiv_set_pin_retries * Test ykpiv_verify * Fix segfault when |tries| is NULL * Fix segfault when import_private_key algorithm is wrong

2017-07-24  Trevor Bentley <trevor@yubico.com>

	* lib/tests/util.c: Tests for ykpiv_list_readers and
	ykpiv_set_mgmkey

2017-07-12  Trevor Bentley <trevor@yubico.com>

	* lib/internal.h, lib/tests/util.c, lib/util.c, lib/ykpiv.c,
	lib/ykpiv.h: Port custom allocator from minidriver, and add test
	case for it.

2017-07-12  Trevor Bentley <trevor@yubico.com>

	* lib/tests/util.c, lib/util.c: Added tests for authenticate and
	reset.  Fixed bug in reset (always returned success).

2017-07-10  Trevor Bentley <trevor@yubico.com>

	* lib/tests/Makefile.am, lib/tests/util.c: Test cases for
	ykpiv_util_* functions

2017-07-04  Trevor Bentley <trevor@yubico.com>

	* lib/Makefile.am, lib/internal.h, lib/util.c, lib/ykpiv.c,
	lib/ykpiv.h: WIP port minidriver ykpiv_util_* functions

2017-07-03  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c: Port fix from ykpiv-minidriver: commit 79ae87153c2be06e8193a491e26b799e3b5ba028 Author: Oscar K So
	JR <oscar@yubico.com> Date:   Mon Jan 30 22:08:29 2017 +0000     Fixed Issue #78 - P2 Bug: MXCT352 - Importing PKCS#12 with key
	    size 4096 bits crashed CertUtil.exe

2017-06-30  Trevor Bentley <trevor@yubico.com>

	* configure.ac, lib/tests/Makefile.am, lib/tests/basic.c,
	lib/tests/parse_key.c, tool/tests/Makefile.am,
	tool/tests/parse_name.c, tool/tests/test_inout.c,
	ykcs11/tests/Makefile.am: Switch test cases to use libcheck
	framework This keeps the test logic the same, but moves most of them into the
	libcheck test suite framework.  It gives better control over
	grouping related tests, running them in parallel, and reporting on
	multiple failures.  Running in parallel also brings problems, so libykcs11 tests are
	left untouched.  Parallel access to a single hardware DUT does not
	make sense, and pcsc-lite doesn't work after a fork() in OS X
	10.11+, so it can't run in libcheck's tests anyway.

2017-06-29  Trevor Bentley <trevor@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/utils.c: Fix test cases:
	uninitialized memory and non-terminated string compare

2017-10-18  Emil Lundberg <emil@yubico.com>

	* README: Explicitly link "Vagrant VM" to GitHub

2017-10-18  Emil Lundberg <emil@yubico.com>

	* vagrant/development/README, vagrant/development/{README.adoc =>
	README.md}: Revert "Rewrite vagrant/development/README to asciidoc" This reverts commit 558dcc1a2dd24f2d64eeeb3818ca71282f42b310.

2017-10-18  Emil Lundberg <emil@yubico.com>

	* vagrant/development/README, vagrant/development/{README.md =>
	README.adoc}: Rewrite vagrant/development/README to asciidoc

2017-10-17  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version after release

2017-10-17  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.4.4

2017-10-17  Klas Lindfors <klas@yubico.com>

	* ykcs11/token_vendors.c: ykcs11: disable rsa keygeneration for yk4
	< 4.3.5 see https://yubi.co/ysa201701/ relates #127

2017-10-17  Klas Lindfors <klas@yubico.com>

	* .travis.yml: try to find correct packages for travis

2017-10-17  Klas Lindfors <klas@yubico.com>

	* : commit ea006783145e6214d944b81f9ba950bcddeefcd8 Author: edent
	<github.com@shkspr.mobi> Date:   Tue Oct 17 08:02:02 2017 +0100

2017-10-16  Emil Lundberg <emil@yubico.com>

	* README: Fix Vagrant VM link in README

2017-10-16  Emil Lundberg <emil@yubico.com>

	* .gitignore, README, vagrant/development/README.md,
	vagrant/development/Vagrantfile, vagrant/development/provision.sh: 
	Add Vagrant VM for development

2017-10-16  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: disable rsa keygen for yubikey4 before
	4.3.5 point at https://yubi.co/ysa201701/

2017-05-30  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: change _change_pin_internal to change_pin_internal to
	match style all other internal functions have plain names

2017-05-30  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: drop unused variable

2017-05-30  Klas Lindfors <klas@yubico.com>

	* : commit d1db8eb282276a68bcfbe78bbeda9ff3e5a09d1c Author: emersonl
	<emersonl@yahoo-inc.com> Date:   Mon May 29 04:19:49 2017 -0700

2017-05-26  emersonl <emersonl@yahoo-inc.com>

	* lib/ykpiv.c: Fix issue #116

2017-05-25  emersonl <emersonl@yahoo-inc.com>

	* lib/internal.h, lib/ykpiv.c: Fix issue #88 and #102

2017-05-25  Emerson Lin <Gh0u1L5@foxmail.com>

	* mac.mk, windows.mk: bump openssl to 1.0.2l OpenSSL just released a new version and 1.0.2k no longer works

2017-04-24  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo: touch-policy and pin-policy is only available on
	YubiKey 4

2017-04-19  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo: add a line about slot f9 to help output

2017-04-19  Klas Lindfors <klas@yubico.com>

	* Makefile.am, tool/yubico-piv-tool.adoc: let help2adoc use the h2m
	file as extra include

2017-04-19  Klas Lindfors <klas@yubico.com>

	* README, doc/YubiKey_PIV_introduction.adoc, tool/cmdline.ggo,
	tool/yubico-piv-tool.adoc, tool/yubico-piv-tool.h2m: update
	documentation and help output for how to specify secrets on stdin also update all examples to have no space after short option.

2017-04-18  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump verions after release

2017-04-18  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: NEWS for 1.4.3

2017-04-06  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: bump openssl to 1.0.2k

2017-04-06  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: add a new hidden flag --stdin-input for
	straight stdin input

2017-03-30  Alessio Di Mauro <alessio@yubico.com>

	* : Merge PR/113, fixup for PSS

2017-03-26  Hannes Mehnert <hannes@mehnert.org>

	* ykcs11/mechanisms.c, ykcs11/openssl_utils.c, ykcs11/ykcs11.c,
	ykcs11/ykcs11.h: fix PSS signing support

2016-11-29  Klas Lindfors <klas@yubico.com>

	* Makefile.am: drop dropped docs from dist sources

2016-11-03  Dain Nilsson <dain@yubico.com>

	* doc/YubiKey_PIV_introduction.adoc: Correct size of stored objects.

2016-10-19  Dain Nilsson <dain@yubico.com>

	* README, doc/Android_code_signing.adoc, doc/Attestation.adoc,
	doc/Certificate_Authority.adoc, doc/OS_X_code_signing.adoc,
	doc/SSH_User_certificates.adoc, doc/SSH_with_PIV_and_PKCS11.adoc,
	doc/Windows_certificate.adoc, doc/YKCS11_release_notes.adoc,
	doc/YubiKey_PIV_introduction.adoc: Updated docs.

2016-10-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Better approximation for signature size Relates to #98.

2016-10-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Always set number of slots Relates to #98.

2016-10-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: Return correct modulus When asked for CKA_MODULUS on a private key return only n and not
	the whole key Relates to #98.

2016-10-04  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: drop la files and pkgconfig files for mac and
	windows builds since the location in these wont make sense anyways

2016-10-03  Alessio Di Mauro <alessio@yubico.com>

	* doc/SSH_with_PIV_and_PKCS11.adoc: Fix AsciiDoc issue

2016-10-03  Alessio Di Mauro <alessio@yubico.com>

	* doc/SSH_with_PIV_and_PKCS11.adoc: Whitespace cleanup

2016-10-03  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #90 from acdha/patch-1 Improve SSH with PIV and PKCS11 instructions

2016-09-23  Klas Lindfors <klali@avm.se>

	* : Merge pull request #87 from fredemmott/patch-1 Update documentation on ssh-agent on macos

2016-09-23  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: add libtool for osx build

2016-09-23  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: do autoreconf after adding packages and set -e
	for travis

2016-09-22  Fred Emmott <mail@fredemmott.co.uk>

	* doc/SSH_with_PIV_and_PKCS11.adoc: Update documentation on
	ssh-agent on macos Works fine on clean installs of sierra - just needs opensc from
	homebrew

2016-09-12  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: fixup dependencies for yubico-piv-tool.1 should now support parallel builds

2016-08-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: make sure to return RSA keys with
	ASN1_NULL as parameter

2016-08-12  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2016-08-12  Klas Lindfors <klas@yubico.com>

	* NEWS: release 1.4.2

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* README: Markup fixes.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* README: Whitespace fix.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* NEWS, README: Doc fixes.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* ykcs11/ykcs11.pc.in: Drop cflags since this "library" doesn't have
	any public header files.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* ykcs11/pkcs11.h: We modified it => add license header.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* ykcs11/Makefile.am: Don't install ykcs11-version.h.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* Makefile.am, build-and-test.sh, configure.ac, lib/Makefile.am,
	lib/error.c, lib/internal.h, lib/tests/Makefile.am,
	lib/tests/basic.c, lib/tests/parse_key.c, lib/version.c,
	lib/ykpiv-version.h.in, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	lib/ykpiv.pc.in, mac.mk, tool/Makefile.am, tool/cmdline.ggo,
	tool/tests/Makefile.am, tool/tests/basic.sh,
	tool/tests/parse_name.c, tool/tests/test_inout.c, tool/util.c,
	tool/util.h, tool/yubico-piv-tool.adoc, tool/yubico-piv-tool.c,
	tool/yubico-piv-tool.h2m, tools/fasc.pl, windows.mk,
	ykcs11/Makefile.am, ykcs11/debug.h, ykcs11/mechanisms.c,
	ykcs11/mechanisms.h, ykcs11/obj_types.h, ykcs11/objects.c,
	ykcs11/objects.h, ykcs11/openssl_types.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/pkcs11y.h, ykcs11/slot_vendors.c,
	ykcs11/slot_vendors.h, ykcs11/tests/Makefile.am,
	ykcs11/tests/ykcs11_tests.c, ykcs11/token_vendors.c,
	ykcs11/token_vendors.h, ykcs11/utils.c, ykcs11/utils.h,
	ykcs11/vendor_ids.h, ykcs11/vendors.c, ykcs11/vendors.h,
	ykcs11/ykcs11-version.h.in, ykcs11/ykcs11.c, ykcs11/ykcs11.h,
	ykcs11/ykcs11.map, ykcs11/ykcs11.pc.in, ykcs11/yubico_slot.c,
	ykcs11/yubico_slot.h, ykcs11/yubico_token.c, ykcs11/yubico_token.h: 
	Improve license headers.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* doc/YubiKey_PIV_introduction.adoc: Improve doc.

2016-08-12  Klas Lindfors <klas@yubico.com>

	* ykcs11/pkcs11.h: if CRYPTOKI_EXPORTS is not defined don't add
	__declspec this messes up the windows build since we're already using libtool
	for the exports.

2016-08-12  Klas Lindfors <klas@yubico.com>

	* ykcs11/Makefile.am, ykcs11/version.c, ykcs11/ykcs11-version.h.in: 
	drop ykcs11_check_version() that was never used or exported

2016-08-12  Klas Lindfors <klas@yubico.com>

	* ykcs11/Makefile.am: fixup license header of Makefile.am

2016-08-12  Klas Lindfors <klas@yubico.com>

	* ykcs11/Makefile.am, ykcs11/mechanisms.c, ykcs11/obj_types.h,
	ykcs11/objects.c, ykcs11/openssl_utils.h, ykcs11/pkcs11.h,
	ykcs11/pkcs11f.h, ykcs11/pkcs11t.h, ykcs11/pkcs11y.h,
	ykcs11/slot_vendors.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h,
	ykcs11/yubico_slot.h: switch out the pkcs11 headers for the SCUTE
	pkcs11 header from opensc create pkcs11y.h for our additional things

2016-08-12  Klas Lindfors <klas@yubico.com>

	* ykcs11/debug.h, ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/openssl_types.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/slot_vendors.c,
	ykcs11/slot_vendors.h, ykcs11/tests/ykcs11_tests.c,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/utils.c,
	ykcs11/utils.h, ykcs11/vendor_ids.h, ykcs11/vendors.c,
	ykcs11/vendors.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h,
	ykcs11/yubico_slot.c, ykcs11/yubico_slot.h, ykcs11/yubico_token.c,
	ykcs11/yubico_token.h: add copyright and license header

2016-08-12  Klas Lindfors <klas@yubico.com>

	* windows.mk: enable asm for windows openssl builds also choose the correct target for 32bits

2016-08-11  Klas Lindfors <klas@yubico.com>

	* ykcs11/version.c, ykcs11/ykcs11-version.h.in, ykcs11/ykcs11.map: 
	correct license on ykcs11 files

2016-08-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Return CKR_FUNCTION_FAILED for unimplemented func Closes #84

2016-08-11  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2016-08-11  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.4.1

2016-08-11  Alessio Di Mauro <alessio@yubico.com>

	* doc/Certificate_Authority.adoc, doc/OS_X_code_signing.adoc,
	doc/SSH_with_PIV_and_PKCS11.adoc, doc/Windows_certificate.adoc,
	doc/YubiKey_PIV_introduction.adoc: Fix a few typos in the
	documentation

2016-08-10  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: bump windows and mac builds to 1.0.2h

2016-08-10  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: make certificate serial
	number random by default

2016-08-01  Alessio Di Mauro <alessio@yubico.com>

	* doc/SSH_User_certificates.adoc: Add link to ssh-keygen manpage for
	User SSH certs

2016-07-29  Alessio Di Mauro <alessio@yubico.com>

	* doc/SSH_User_certificates.adoc: Fix typo

2016-07-29  Alessio Di Mauro <alessio@yubico.com>

	* doc/SSH_User_certificates.adoc: Fix a few typos Obligatory after-push typo.

2016-07-29  Alessio Di Mauro <alessio@yubico.com>

	* Makefile.am, doc/SSH_User_certificates.adoc: Add doc on SSH User
	certificates

2016-07-12  Alessio Di Mauro <alessio@yubico.com>

	* tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: Add SSH export for RSA public key

2016-06-28  Oscar <oscarso@hotmail.com>

	* : Merge pull request #78 from Yubico/oscarso-patch-1 Supplying --key when management key value is longer the default
	value

2016-06-28  Oscar <oscarso@hotmail.com>

	* doc/Windows_certificate.adoc: Update Windows_certificate.adoc

2016-06-28  Oscar <oscarso@hotmail.com>

	* doc/Windows_certificate.adoc: Supplying --key at the generate
	command Supply the management key value during generate key if it has ever
	been modified

2016-06-29  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_PIV_introduction.adoc: fix wording

2016-05-31  Klas Lindfors <klas@yubico.com>

	* doc/Attestation.adoc: use >> when adding to a file

2016-05-31  Klas Lindfors <klas@yubico.com>

	* doc/Attestation.adoc: add text about verifying an attestation

2016-05-24  Klas Lindfors <klas@yubico.com>

	* doc/Attestation.adoc: link and headings

2016-05-24  Klas Lindfors <klas@yubico.com>

	* doc/Attestation.adoc: move extensions used to other attestation
	doc

2016-05-16  Klas Lindfors <klas@yubico.com>

	* NEWS: make NEWS for 1.4.0 clearer

2016-05-09  Klas Lindfors <klali@avm.se>

	* : Merge pull request #75 from mscherer/add_sw_const Replace magic number for status word by constants

2016-05-09  Klas Lindfors <klas@yubico.com>

	* : commit 215fc8d0cfdf7dc1b9f65435f4281138de2ed54d Merge: fc5e153
	6a4608f Author: Klas Lindfors <klali@avm.se> Date:   Mon May 9
	08:59:08 2016 +0200

2016-05-09  Klas Lindfors <klali@avm.se>

	* : Merge pull request #74 from mscherer/fix_constant_name Fix error in the define name YKPIV_INS_GENERATE_ASYMMERTRIC

2016-05-09  Klas Lindfors <klali@avm.se>

	* : Merge pull request #70 from mscherer/add_constant Add YKPIV_ALGO_TAG

2016-05-05  Michael Scherer <misc@zarb.org>

	* lib/ykpiv.c: Use more constant for filling apdu struct.

2016-05-04  Michael Scherer <misc@zarb.org>

	* lib/ykpiv.c, tool/util.c, tool/yubico-piv-tool.c: Fix various
	errors messages

2016-05-05  Michael Scherer <misc@zarb.org>

	* lib/ykpiv.h, tool/yubico-piv-tool.c, ykcs11/token_vendors.c: Fix
	error in the define name YKPIV_INS_GENERATE_ASYMMERTRIC

2016-05-04  Michael Scherer <misc@zarb.org>

	* lib/ykpiv.h, tool/yubico-piv-tool.c, ykcs11/token_vendors.c: Add
	YKPIV_ALGO_TAG Replace the magic constant 0x80 when sending a packet to the key

2016-05-03  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version

2016-05-03  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: release 1.4.0

2016-05-03  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add attest doc to dist

2016-05-03  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: bump openssl to 1.0.2g

2016-05-03  Klas Lindfors <klas@yubico.com>

	* : commit b1139a516b5a2d9e97ac7cbf8a63f0131b4623df Author: Klas
	Lindfors <klas@yubico.com> Date:   Fri Apr 22 09:41:41 2016 +0200

2016-04-19  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_PIV_introduction.adoc: change examples to be with 6
	digit pins

2016-04-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: enforce minimum 6 digits of pin when
	changing in the tool

2016-04-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: error isn't an iso error, run
	ykpiv_strerror() on it

2016-04-19  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore more

2016-04-19  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version

2016-04-19  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.3.1

2016-04-18  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: unblock pin should unblock pin, not change puk

2016-03-31  Klas Lindfors <klas@yubico.com>

	* doc/Attestation.adoc: add some documentation for attestation

2016-03-31  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo: change wording in help text authentication key -> management key

2016-03-23  Klas Lindfors <klas@yubico.com>

	* README, tool/yubico-piv-tool.h2m: clearer text on --help and
	--verbose add example of touch-policy

2016-03-18  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo: clarify --new-key

2016-03-18  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: newer openssl for windows and mac

2016-03-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: add ykpiv touchpolicy to ykpiv

2016-03-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: add YKPIV_KEY_ATTESTATION to
	ykpiv_import_key()

2016-03-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/util.c: add touch-policy
	cached

2016-03-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: actually open output_file in attest()

2016-03-10  Klas Lindfors <klas@yubico.com>

	* : commit d52b8bd3efb179f20b5ee5f3bc36c05a6ec29fc7 Author: Klas
	Lindfors <klas@yubico.com> Date:   Fri Feb 19 12:40:23 2016 +0100

2016-02-19  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version to 1.3.1

2016-02-19  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.3.0

2016-02-15  Klas Lindfors <klas@yubico.com>

	* tool/util.c: make step unsigned in dump_data() since it's muliplied with another unsigned int

2016-02-15  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: Move asking for PKCS12 password outside of
	import_key() also restructure a bit when deciding to do authentication relates #66

2016-02-15  Klas Lindfors <klali@avm.se>

	* : Merge pull request #65 from
	mattmoyer/add-self-signed-cert-options Add options for configuring self-signed certs.

2016-02-12  Matt Moyer <moyer@simple.com>

	* tool/yubico-piv-tool.c: Drop const from these these int
	parameters.

2016-02-10  Matt Moyer <moyer@simple.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: Add a --serial parameter
	to yubico-piv-tool.  Allows the serial number of self signed certificates to be
	configured.

2016-02-10  Matt Moyer <moyer@simple.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: Add a --valid-days
	parameter to yubico-piv-tool.  Allows the expiration date (notAfter) value of self signed
	certificates to be configured.

2016-01-18  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #62 from denisenkom/win-fixes Fix Win64 building problems for ykcs11.

2016-01-11  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c: Typo.

2016-01-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/pkcs11t.h: Whitespace fix.

2016-01-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/pkcs11.h, ykcs11/pkcs11t.h: Addresses #59, ykcs11 still has
	issues on Win64.

2016-01-11  Alessio Di Mauro <alessio@yubico.com>

	* lib/internal.h: Remove unnecessary fields from ykpiv_state.

2015-12-24  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Remove some clutter.

2015-12-24  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Print CCC with status action. Relates to
	#57.

2015-12-21  Klas Lindfors <klas@yubico.com>

	* : Merge remote-tracking branch 'origin/generic_objects'

2015-12-17  Klas Lindfors <klas@yubico.com>

	* tool/tests/test_inout.c: rework inout test to use pipes for
	emulating files

2015-12-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use unsigned long for len

2015-12-17  Klas Lindfors <klas@yubico.com>

	* tool/tests/test_inout.c: don't use tmpfile(), it's broken on
	windows

2015-12-17  Klas Lindfors <klas@yubico.com>

	* .gitignore, tool/tests/Makefile.am, tool/tests/test_inout.c: add a
	simple test case for the dump/read data functions

2015-12-15  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: add libykpiv as a dependency for libpiv_util

2015-12-15  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c, ykcs11/ykcs11.c: 
	remove the util function dump_hex() in favor of dump_data()

2015-12-15  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: add format for read/write object as
	hex/base64/binary relates #31

2015-12-15  Klas Lindfors <klas@yubico.com>

	* tool/util.h: util depends on stdbool

2015-12-15  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: more work on automake dependencies to rebuild
	things correctly relates #53

2015-12-14  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: use top_builddir for relations between dirs

2015-12-14  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: add configure.ac as a dependency of the
	yubico-piv-tool binary since if version number changes it should be rebuilt relates #53

2015-12-14  Klas Lindfors <klas@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c: change
	multiplication of minor to 10 so we don't overflow possibly temporary fix..

2015-12-14  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac, lib/ykpiv.map: next version will be 1.3.0
	since new interfaces where added also fixup map file to show 1.2.0 correctly

2015-12-14  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: add generic write and
	read object actions for the tool this take in/out hex dump of the data

2015-12-11  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac: Bump LT version.

2015-12-11  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.map: Fixup ykpiv exports and untabify.

2015-12-11  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #51 from denisenkom/misc-bugfixes Implement explicit pin management in libykpiv and expose it through
	C_SetPIN in ykcs11.

2015-12-10  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #50 from denisenkom/misc-bugfixes Fixed extraction of RSA modulus and exponent

2015-12-08  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #49 from Jakuje/master Get rid of warnings about unused functions when running without
	HW_TESTS

2015-12-08  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.2.2

2015-12-08  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: fix an old overflow bug we need to do 8 - new_len, not 16 - new_len which overflows the
	indata buffer

2015-12-08  Jakub Jelen <jjelen@redhat.com>

	* ykcs11/tests/ykcs11_tests.c: Get rid of warnings about unused
	functions when running without HW_TESTS

2015-12-08  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions to 1.2.2

2015-12-08  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.2.1

2015-12-07  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: increase buffer sizes when building the
	status view otherwise data buffer will be to small after loading a big
	certificate

2015-12-07  Klas Lindfors <klas@yubico.com>

	* mac.mk: add cflags for mac build

2015-12-07  Klas Lindfors <klas@yubico.com>

	* windows.mk: change around windows layout, include libssl, drop all
	pkgconfig

2015-12-07  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2015-12-07  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: next version is 1.2.0, also NEWS for it

2015-12-07  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: bump openssl to 1.0.1q for windows and mac
	builds

2015-12-07  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add Android code signing doc for dist

2015-12-07  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: don't overfill the buffer on cert import

2015-12-03  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #46 from denisenkom/getattr-fix Return CKR_ATTRIBUTE_TYPE_INVALID instead of CKR_FUNCTION_FAILED for
	unsupported attributes.

2015-12-03  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.c, ykcs11/ykcs11.c: YKCS11: update cert
	buffer size.

2015-12-03  Alessio Di Mauro <alessio@yubico.com>

	* tool/util.c: YKCS11: allow key generation for retired keys slots.

2015-12-03  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.c: YKCS11: Fix RSA2048 key generation
	template.

2015-12-03  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #38 from denisenkom/patch-1 Return CKR_SESSION_READ_ONLY_EXISTS only when trying to log in SO.

2015-12-03  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: difference between CHUID and CCC in
	success message.

2015-12-03  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: add a new action set-ccc change aroudn so set_chuid() becomes set_dataobject() and a bit more
	generic fixes #33

2015-12-01  Mikhail Denisenko <denisenkom@gmail.com>

	* ykcs11/token_vendors.c: Securely dispose of pin copy

2015-12-01  Mikhail Denisenko <denisenkom@gmail.com>

	* ykcs11/token_vendors.c: Fixed bug #39 C_Login fails with CKR_PIN_INCORRECT when pin and pinLen are valid
	but pin is not null terminated

2015-12-01  denisenkom <denisenkom@gmail.com>

	* ykcs11/ykcs11.c: Update ykcs11.c According to PKCS11 spec CKR_SESSION_READ_ONLY_EXISTS should only be
	returned by C_Login when SO user is logging in.  From spec: If the application calling C_Login has a R/O session open
	with the token, then it will be unable to log the SO into a session
	(see [PKCS11-UG] for further details).  An attempt to do this will
	result in the error code CKR_SESSION_READ_ONLY_EXISTS.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: started adding RSA test.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c: More memcpy.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: add more tests.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c: Minor fix.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Minor fix.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: use memcpy.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Fix parameter check in SignInit.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: YKCS11: Return the object handler after importing
	certs/keys.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: started test on key import
	and signatures.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: Test logins.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: Report disabled hw test in the
	logfile of the test.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: Add more to session tests.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: test session.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: test mechanisms.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Typo

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: openjdk -> OpenJDK

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: formatting of blocks

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: wording on list points

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: bind together what should be one
	block

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: shorten very long lines

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: add short doc on android code
	signing fixes #20

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: More YKCS11 tests.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: Make ykcs11 functions pointer global
	to all tests.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: Add/fix some prints for tests.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: Whitespace fix.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac, ykcs11/tests/ykcs11_tests.c: Added infrastructure
	for hardware tests.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c: Whitelist retired key IDs.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.h, ykcs11/utils.c, ykcs11/yubico_token.c,
	ykcs11/yubico_token.h: YKCS11: report correct version.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c: Whitespace fix.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/yubico_token.c: Fix some comments.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/yubico_token.c: Add retired keys to Find operations.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: Capitalize.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/yubico_token.c: Add
	retired keys in more places.

2015-11-23  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: Add OIDs for retired keys and rearrange.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c: Start adding retired keys to
	ykcs11.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: Add retired key
	definitions to libykpiv.  Include retired keys in import_key's
	check.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Change behavior of yubico-piv-tool -a
	status.  Status only prints information from populated slots. Additionally,
	it is possible to explicitly choose a single slot and only print
	information reagarding it.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac: Bump libtool version.

2015-11-20  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, tool/yubico-piv-tool.c: raise buffer sizes and remove
	a miss-leading error

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Whitespace cleanup.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: Refactor
	yubico-piv-tool to use import_private_key from libykpiv.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c: Remove leftover print.

2015-11-19  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/pkcs11t.h,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/ykcs11.c: 
	Switch ykcs11 to use private key import from libykpiv.

2015-11-19  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: Add import private key to libykpiv.

2015-11-19  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.map: Export ykpiv_import_private_key globally.

2015-11-11  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: Initial work on doing padding internally

2015-11-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: accept EC keys that are 1 byte shorter.

2015-11-19  Klas Lindfors <klali@avm.se>

	* : Merge pull request #36 from akgood/master Use @loader_path rather than @executable_path for OS X dylib paths

2015-11-18  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/yubico-piv-tool.c: add attest
	action

2015-11-18  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/util.c: add f9 slot for
	attestation

2015-11-16  Adam Goodman <akgood@duosecurity.com>

	* mac.mk: YKCS11: On OS X, use @loader_path rather than
	@executable_path for dylib paths

2015-11-16  Klas Lindfors <klas@yubico.com>

	* configure.ac: bump LT_REVISION for version bump

2015-11-14  Alessio Di Mauro <alessio@yubico.com>

	* NEWS, configure.ac: Bump version.  Signed-off-by: Alessio Di Mauro <alessio@yubico.com>

2015-11-13  Alessio Di Mauro <alessio@yubico.com>

	* NEWS: Version 1.1.2.  Signed-off-by: Alessio Di Mauro <alessio@yubico.com>

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Remove debug print.

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c, ykcs11/ykcs11.c: YKCS11: more elaborate solution
	for stripping DER encoding from ECDSA signatures.  It is possible to receive different padding length for r and s,
	where their length is [-1, 1] wrt the component lenght. Take this
	into account.

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: Do not call initialize for
	the YKCS11 tests.  If initialize is called, the test requires a YubiKey with a working
	PIV application in order to function.

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* .gitignore, ykcs11/tests/test-suite.log,
	ykcs11/tests/ykcs11_tests.log, ykcs11/tests/ykcs11_tests.trs: Ignore
	more.

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* .gitignore: Ignore more.

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac, ykcs11/Makefile.am, ykcs11/tests/Makefile.am,
	ykcs11/tests/test-suite.log, ykcs11/tests/ykcs11_tests.c,
	ykcs11/tests/ykcs11_tests.log, ykcs11/tests/ykcs11_tests.trs: 
	YKCS11: add basic tests.  Signed-off-by: Alessio Di Mauro <alessio@yubico.com>

2015-11-11  Alessio Di Mauro <alessio@yubico.com>

	* NEWS, configure.ac: Bump version.

2015-11-11  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: always reset the context to SCARD_INVALID_CONTEXT
	after release

2015-11-10  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c: YKPIV: Make sure that context is established only if
	it is invalid.

2015-11-09  Alessio Di Mauro <alessio@yubico.com>

	* doc/YKCS11_release_notes.adoc: Added reference to PKCS#11 specs in
	the docs.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* NEWS: Reword NEWS file.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* NEWS, configure.ac: Bump version.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* doc/YubiKey_PIV_introduction.adoc: Fix docs.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* Makefile.am: Apparently order matters.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* Makefile.am: Add ykcs11 release notes to automake.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* : commit 94f8d57af94a3bba3c04f37ef0bd0b1e662e3c32 Author: Alessio
	Di Mauro <alessio@yubico.com> Date:   Fri Nov 6 16:10:35 2015 +0100

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: YKCS11: print out signature related data only if
	debug is enabled.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* doc/YKCS11_release_notes.adoc: YKCS11: update docs.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac, ykcs11/debug.h: YKCS11: turn off debug by default
	and make it a configure option (--enable-ykcs11-debug).

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* : commit a8825c99f32860120af9e2d8a6f8100e8fefb974 Author: Alessio
	Di Mauro <alessio@yubico.com> Date:   Fri Nov 6 13:58:46 2015 +0100

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* Makefile.am, README, doc/{Certificate_Authority_with_NEO.adoc =>
	Certificate_Authority.adoc}, doc/OS_X_code_signing.adoc,
	doc/SSH_with_PIV_and_PKCS11.adoc, doc/Windows_certificate.adoc,
	doc/{YubiKey_NEO_PIV_introduction.adoc =>
	YubiKey_PIV_introduction.adoc}, tool/yubico-piv-tool.adoc,
	tool/yubico-piv-tool.h2m: Replace YubiKey NEO with YubiKey.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* README, doc/Certificate_Authority_with_NEO.adoc,
	doc/OS_X_code_signing.adoc, doc/SSH_with_PIV_and_PKCS11.adoc,
	doc/Windows_certificate.adoc,
	doc/YubiKey_NEO_PIV_introduction.adoc, lib/error.c, lib/ykpiv.c,
	tool/yubico-piv-tool.adoc, tool/yubico-piv-tool.c,
	tool/yubico-piv-tool.h2m: Change applet to application.

2015-11-06  Klas Lindfors <klali@avm.se>

	* : Merge pull request #34 from chevah/doc-ssh-pkey-export Update Neo SSH integration guide.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: YKCS11: expose module version.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac: fixup ykcs11-version.h with the correct symbols.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/ykcs11.c, ykcs11/yubico_token.c: 
	YKCS11: remove some warnings.

2015-11-06  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: for travis: set -e later and hope for the
	best..

2015-11-06  Klas Lindfors <klas@yubico.com>

	* : commit 3b4947ed9e57e4da504a0390e5e2d4d392bed91e Author: Klas
	Lindfors <klas@yubico.com> Date:   Fri Nov 6 10:42:48 2015 +0100

2015-11-06  Adi Roiban <adi.roiban@chevah.com>

	* doc/SSH_with_PIV_and_PKCS11.adoc: Update docs.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c: Constify.  Whitespace.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* m4/manywarnings.m4: Drop Wmudflap

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: add check on buffer length.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: initialize more.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h: YKCS11: makde DBG variadic in every case.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: remove more messsages

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/mechanisms.c, ykcs11/objects.c,
	ykcs11/openssl_utils.c, ykcs11/token_vendors.c, ykcs11/ykcs11.c,
	ykcs11/yubico_token.c: YKCS11: Change DBG to print to stderr.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: YKCS11: Remove some useless comments.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: YKCS11: add more precondition checks during
	SingInit.

2015-11-04  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: fix type typo.

2015-11-04  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/pkcs11t.h, ykcs11/token_vendors.c,
	ykcs11/token_vendors.h, ykcs11/ykcs11.c: YKCS11: added certificate
	deletion.

2015-11-02  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c: Initialize context to -1 and always call establish
	context.

2015-10-28  Klas Lindfors <klas@yubico.com>

	* : commit f46a4713bdc742f0619041a0c150920f064d25e7 Merge: aff57db
	f558983 Author: Klas Lindfors <klas@yubico.com> Date:   Wed Oct 28
	16:08:00 2015 +0100

2015-10-28  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: add an error print for failing
	set-pin-retries

2015-10-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.c, ykcs11/ykcs11.c, ykcs11/yubico_token.c: 
	YKCS11: Suppress some warnings.

2015-10-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.c: Indent.

2015-10-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/token_vendors.c,
	ykcs11/token_vendors.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: YKCS11:
	added support for touch and PIN policy during generate.

2015-10-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/pkcs11t.h, ykcs11/token_vendors.c, ykcs11/token_vendors.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h: Added support for touch and change
	policy during key import.

2015-10-23  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h: 
	YKCS11: Added raw certificate extraction.

2015-10-23  Klas Lindfors <klas@yubico.com>

	* ykcs11/Makefile.am: export functions for mac correctly C_ matches what we should export for pkcs11

2015-10-20  Klas Lindfors <klas@yubico.com>

	* : commit 066ea79211c0dfbdf05719c35235d17583b6fde7 Author: Klas
	Lindfors <klas@yubico.com> Date:   Thu Oct 15 09:20:42 2015 +0200

2015-10-09  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: read key from stdin if
	no key is given as argument

2015-10-09  Klas Lindfors <klas@yubico.com>

	* lib/tests/Makefile.am, tool/tests/Makefile.am: actually run
	valgrind for the tests

2015-10-07  Klas Lindfors <klas@yubico.com>

	* .travis.yml, build-and-test.sh, mac.mk: try travis for osx

2015-10-01  Klas Lindfors <klas@yubico.com>

	* NEWS: bump version in NEWS

2015-10-01  Klas Lindfors <klas@yubico.com>

	* configure.ac: bump version

2015-10-01  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.0.3

2015-09-28  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: use 261 byte buffer for receive

2015-09-24  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Mask more one pin change.

2015-09-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/ykcs11.c: 
	Move login into common functions.

2015-09-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Fix return value check on parse_readers.

2015-09-18  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use in, not signinput to actually sign
	anything in the ecc case

2015-09-17  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/vendors.c, ykcs11/ykcs11.c: Minor
	fixes.

2015-09-17  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: Export more info for EC keys too.

2015-09-17  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h: 
	Export more public key parameters.

2015-09-16  Klas Lindfors <klas@yubico.com>

	* configure.ac: Output a no if nothing is found on windows/mac check

2015-09-16  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: unblock-pin shouldn't tell you new puk

2015-09-16  Klas Lindfors <klas@yubico.com>

	* configure.ac: don't auto-select windows backend on else less confusing to fall through, also better message for no pcsc
	library found

2015-09-11  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add ykcs11 to cppcheck

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/yubico_token.c: Fix some warnings.

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.h, ykcs11/utils.c, ykcs11/utils.h,
	ykcs11/ykcs11.c, ykcs11/yubico_token.c, ykcs11/yubico_token.h: Add
	parsing of model number.

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/slot_vendors.c, ykcs11/slot_vendors.h,
	ykcs11/yubico_slot.c, ykcs11/yubico_slot.h: Remove get slot
	description and use the reader string from pcsclite.

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c, ykcs11/ykcs11.c: Imporve support for multiple
	readers/cards.

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/token_vendors.c: Minor cleanups.

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Free more.

2015-09-08  Alessio Di Mauro <alessio@yubico.com>

	* : commit 99ebfdf37c218e6426438d0ac131ea77440e5a26 Author: Alessio
	Di Mauro <alessio@yubico.com> Date:   Tue Sep 8 18:00:48 2015 +0200

2015-09-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.map: remove ykpiv_sign_data2() from map

2015-09-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, tool/yubico-piv-tool.c, ykcs11/ykcs11.c: drop
	ykpiv_sign_data2() and change ykpiv_sign_data() to not pad

2015-09-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: let ykpiv_connect() call ykpiv_list_readers()

2015-09-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/cmdline.ggo,
	tool/yubico-piv-tool.c, ykcs11/ykcs11.c: add list-readers action to
	tool also refactor ykpiv_list_readers() a bit

2015-09-07  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, ykcs11/ykcs11.c: drop
	ykpiv_connect2() and add ykpiv_list_readers()

2015-09-07  Klas Lindfors <klas@yubico.com>

	* : commit 8c411f4473d337f1669fe5f1b1e01d21a17bfb5f Author: Klas
	Lindfors <klas@yubico.com> Date:   Mon Sep 7 14:33:26 2015 +0200

2015-09-07  Klas Lindfors <klas@yubico.com>

	* : commit 1b8d819cc2c3638c81c4c9239f2d44e4eca22c8f Author: Klas
	Lindfors <klas@yubico.com> Date:   Fri Sep 4 09:22:32 2015 +0200

2015-09-04  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.0.2

2015-09-02  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c: More cleanup.

2015-09-02  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/token_vendors.c: Fixed typo.

2015-09-01  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/openssl_utils.c,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/ykcs11.c: 
	Added key import.

2015-08-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/token_vendors.c,
	ykcs11/token_vendors.h, ykcs11/ykcs11.c: Initial stab at private key
	import.

2015-08-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/ykcs11.c: 
	Added certificate import

2015-08-26  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Squalch more warnings.

2015-08-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c: Remove some warnings.

2015-08-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/ykcs11.c: Add of
	DigestInit.

2015-08-26  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c: Fixed x509 certificate created during
	generation to comply with OpenSSL 1.0.1i more strict rules.

2015-08-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c: Strip DER
	encoding from EC signatures.

2015-08-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Use longer buffer to store the signature.

2015-08-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/pkcs11t.h, ykcs11/yubico_token.c: Add
	support for ECDSA_SHA256.

2015-08-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: authentication failed is supposed to be 0x63cX not
	0x630X so mask everything but the low 4 bits for remaining tries

2015-08-21  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: More debug messages.

2015-08-21  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Temporary fix for multiple logins.

2015-08-21  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Add debug messages for failed login.

2015-08-21  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac, ykcs11/Makefile.am, ykcs11/pkcs11t.h,
	ykcs11/slot_vendors.c: Removed nspr stuff.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Close the operation after sign is done.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: More debug messages and precondition checks.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/token_vendors.h, ykcs11/ykcs11.c,
	ykcs11/yubico_token.c, ykcs11/yubico_token.h: Use buffer length
	while storing cert.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: More debug messages and precondition checks.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Skip PIN initialization.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Skip token initialization.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/ykcs11.c: Add more precondition checks and
	debug messages.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c: Fixed PSS (still untested).

2015-08-21  Klas Lindfors <klas@yubico.com>

	* mac.mk: add mac install_name_tool fixes for ykcs11 build

2015-08-21  Klas Lindfors <klas@yubico.com>

	* ykcs11/Makefile.am: fixup filenames and add missing headers

2015-08-21  Klas Lindfors <klas@yubico.com>

	* ykcs11/ykcs11-version.h, ykcs11/ykcs11.pc: drop generated files

2015-08-20  Klas Lindfors <klas@yubico.com>

	* : commit 81f3b608fd6d3de2e03eb006dfe88fd45383a24a Author: Klas
	Lindfors <klas@yubico.com> Date:   Thu Aug 20 09:25:18 2015 +0200

2015-08-19  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c: Removed unnecessary line.

2015-08-19  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c: Fixed RSA_X_509 padding.

2015-08-19  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c: Fixed unhashed sign
	mechanisms.

2015-08-19  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h: 
	More free.

2015-08-13  Klas Lindfors <klali@avm.se>

	* : Merge pull request #26 from syzzer/query-for-pin Query for PIN/PUK/mgmt-key if not supplied on command line

2015-08-12  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/ykcs11.c: Fixed wrong free.

2015-08-12  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Added simple logout function.

2015-08-12  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, ykcs11/debug.h, ykcs11/mechanisms.c,
	ykcs11/openssl_utils.c, ykcs11/ykcs11.c: Fixed pkcs1.5 padding

2015-08-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Update object in the session (when the object
	wasn't there to begin with).

2015-08-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/objects.c, ykcs11/openssl_utils.c,
	ykcs11/token_vendors.c, ykcs11/ykcs11.c: Update object in the
	session after key creation (if object already exists).

2015-08-11  Alessio Di Mauro <alessio@yubico.com>

	* tool/util.c, tool/util.h, ykcs11/debug.h, ykcs11/openssl_utils.c,
	ykcs11/token_vendors.c: Added certificate import on key generation.

2015-08-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/mechanisms.c, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/pkcs11t.h, ykcs11/token_vendors.c,
	ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: 
	Added EC key generation.

2015-08-10  Klas Lindfors <klas@yubico.com>

	* BLURB: drop BLURB (not used)

2015-08-07  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/token_vendors.c,
	ykcs11/token_vendors.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h,
	ykcs11/yubico_token.c: First stab at key generation.

2015-08-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/debug.h, ykcs11/mechanisms.c,
	ykcs11/objects.c, ykcs11/objects.h, ykcs11/openssl_utils.c,
	ykcs11/utils.c, ykcs11/ykcs11.c, ykcs11/yubico_token.c: Moved debug
	capabilities to its own file.  Fixed EC point replresentation.

2015-08-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/ykcs11.c: Added more attribute
	extraction for objects.

2015-08-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/ykcs11.c: Fixed
	object attribute matching.  Added ECDSA.

2015-08-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/obj_types.h,
	ykcs11/objects.c, ykcs11/openssl_types.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h,
	ykcs11/yubico_token.c: Added PSS (first stab).

2015-08-04  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/openssl_types.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: Added more
	signature infrestructure.

2015-08-03  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, ykcs11/mechanisms.c,
	ykcs11/mechanisms.h, ykcs11/openssl_utils.c, ykcs11/ykcs11.c: Added
	sign_data2 to libykpiv to disable padding.

2015-08-03  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/ykcs11.c: Hiding
	private objects if user is not logged in.

2015-08-03  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/ykcs11.c: Added object matching.

2015-07-31  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/pkcs11t.h, ykcs11/ykcs11.c: Improvement on sign and object
	handling.

2015-07-30  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/utils.c,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h, ykcs11/yubico_token.c,
	ykcs11/yubico_token.h: First crude signature implementation plus
	additional refactor.

2015-07-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c: Start to do some crypto.

2015-07-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/token_vendors.h, ykcs11/utils.c, ykcs11/utils.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h, ykcs11/yubico_token.c: Yet another
	refactor of objects.

2015-07-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/slot_vendors.c, ykcs11/slot_vendors.h,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/utils.c,
	ykcs11/vendor_ids.h, ykcs11/vendors.c, ykcs11/vendors.h,
	ykcs11/ykcs11.c, ykcs11/yubico_slot.c, ykcs11/yubico_slot.h,
	ykcs11/{yubico.c => yubico_token.c}, ykcs11/{yubico.h =>
	yubico_token.h}: Separated slot vendors and token vendors.

2015-07-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/utils.c,
	ykcs11/utils.h, ykcs11/vendors.c, ykcs11/vendors.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h, ykcs11/ykcs11.map,
	ykcs11/yubico.c, ykcs11/yubico.h: Started major overhaul of slot
	vendors and token vendors.

2015-07-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Some improvements on sign.

2015-07-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/vendors.c,
	ykcs11/vendors.h, ykcs11/ykcs11.c, ykcs11/yubico.c, ykcs11/yubico.h: 
	Refactor more.

2015-07-22  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c: Refined get attribute value.

2015-07-21  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/pkcs11t.h,
	ykcs11/ykcs11.c, ykcs11/yubico.c: More object handling.

2015-07-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/obj_types.h, ykcs11/objects.c,
	ykcs11/objects.h, ykcs11/pkcs11t.h, ykcs11/utils.h,
	ykcs11/vendors.c, ykcs11/vendors.h, ykcs11/ykcs11.c,
	ykcs11/yubico.c, ykcs11/yubico.h: Initial work to add object
	handling.

2015-07-16  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c, ykcs11/vendors.c, ykcs11/vendors.h,
	ykcs11/ykcs11.c, ykcs11/yubico.c, ykcs11/yubico.h: Added mechanisms
	handling.

2015-07-16  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/pkcs11t.h, ykcs11/utils.c, ykcs11/vendors.c,
	ykcs11/vendors.h, ykcs11/ykcs11.c, ykcs11/yubico.c, ykcs11/yubico.h: 
	More refactoring.

2015-07-15  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: More work on login.

2015-07-15  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Added basic session handling.

2015-07-15  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h: Added utils files.

2015-07-15  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Changed tokenless to with_token.

2015-07-14  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.h, ykcs11/pkcs11t.h, ykcs11/ykcs11.c: Added basic
	version of login.

2015-07-14  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Handle token presence in slots.

2015-07-14  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, ykcs11/Makefile.am,
	ykcs11/vendors.c, ykcs11/vendors.h, ykcs11/ykcs11.c,
	ykcs11/yubico.c, ykcs11/yubico.h: Major refactor and vendor
	abstraction.

2015-07-10  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2015-07-10  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.0.1

2015-07-09  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop unused variable found with clang scan-build

2015-07-09  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: check result from get_length() found with clang scan-build

2015-07-09  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: avoid copying data to NULL pointer found by clang scan-build

2015-07-09  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: don't do memcpy with NULL argument found with clang scan-build

2015-07-09  Klas Lindfors <klas@yubico.com>

	* windows.mk: strip away unneeded stuff from the windows openssl
	build

2015-07-09  Klas Lindfors <klas@yubico.com>

	* mac.mk: add openssl to mac build since the openssl bundled with mac is old and deprecated we build
	our own instead

2015-07-08  Klas Lindfors <klas@yubico.com>

	* : commit fe0fd7b774114dd4b50970c2a2133b19075de246 Author: Klas
	Lindfors <klas@yubico.com> Date:   Wed Jul 8 14:51:45 2015 +0200

2015-07-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.pc.in: add Requires.private on libcrypto

2015-07-07  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Fix debug message.

2015-07-07  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Add a bunch of TODOs.

2015-07-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/pkcs11f.h, ykcs11/ykcs11.c: GetInfo.

2015-07-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/pkcs11t.h, ykcs11/vendors.c, ykcs11/vendors.h,
	ykcs11/ykcs11.c, ykcs11/yubico.c, ykcs11/yubico.h: More
	GetTokenInfo.

2015-07-03  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, ykcs11/Makefile.am, ykcs11/vendors.c,
	ykcs11/vendors.h, ykcs11/ykcs11.c, ykcs11/yubico.c, ykcs11/yubico.h: 
	Added basic multivendor support for token information.

2015-07-03  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.adoc: remove extra \

2015-07-03  Klas Lindfors <klas@yubico.com>

	* Makefile.am, tool/{yubico-piv-tool.h2a => yubico-piv-tool.adoc}: 
	name include file .adoc instead

2015-07-03  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.h2a: use asciidoc comments for comments in
	asciidoc file

2015-07-03  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for yk4beta

2015-07-01  Klas Lindfors <klas@yubico.com>

	* COPYING, Makefile.am, README, configure.ac, lib/Makefile.am,
	lib/error.c, lib/internal.h, lib/tests/Makefile.am,
	lib/tests/basic.c, lib/tests/parse_key.c, lib/version.c,
	lib/ykpiv-version.h.in, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	mac.mk, tool/Makefile.am, tool/cmdline.ggo, tool/tests/Makefile.am,
	tool/tests/basic.sh, tool/tests/parse_name.c, tool/util.c,
	tool/util.h, tool/yubico-piv-tool.c, tool/yubico-piv-tool.h2a,
	tool/yubico-piv-tool.h2m, tools/fasc.pl, windows.mk: relicense to
	2-clause BSD license

2015-07-01  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac: add help2adoc processing on release

2015-07-01  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.h2a: add include file for help2adoc

2015-06-30  Alessio Di Mauro <alessio@yubico.com>

	* lib/internal.h, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	ykcs11/Makefile.am, ykcs11/ykcs11.c: Added basic version of slot
	info functions.

2015-06-30  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo: move around texts for help

2015-06-30  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: change IS_XXKEY
	macros to be YKPIV_IS_XX

2015-06-26  Alessio Di Mauro <alessio@yubico.com>

	* .gitignore, Makefile.am, configure.ac, ykcs11/Makefile.am,
	ykcs11/pkcs11.h, ykcs11/pkcs11f.h, ykcs11/pkcs11t.h,
	ykcs11/version.c, ykcs11/ykcs11-version.h,
	ykcs11/ykcs11-version.h.in, ykcs11/ykcs11.c, ykcs11/ykcs11.map,
	ykcs11/ykcs11.pc, ykcs11/ykcs11.pc.in: Initial commit for ykcs11.

2015-06-26  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: fix indentation

2015-06-26  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: move padding for signing to ykpiv_sign_data() and only pad if in_len != key_len

2015-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: better errors for fail on pin-policy and
	touch-policy

2015-06-25  Klas Lindfors <klas@yubico.com>

	* configure.ac, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/cmdline.ggo, tool/yubico-piv-tool.c: add touch for set-mgm-key

2015-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: add touch tlv for generate and import-key

2015-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: pin policy code for generate and import-key

2015-06-24  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: better errors for generate on
	non-supported algorithm or slot

2015-06-23  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/util.c: add support for
	retired key objects slots 82-95

2015-06-24  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use IS_RSAKEY and IS_ECKEY macros, fix
	minor stuff for ECCP384

2015-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: add macros for IS_ECKEY and IS_RSAKEY,
	also fix tag on ECCP384

2015-05-27  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: add sha384 hash and refactor some common
	patterns

2015-05-27  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/cmdline.ggo, tool/util.c,
	tool/yubico-piv-tool.c: start adding secp384r1

2015-06-23  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl version for windows build

2015-06-23  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2015-06-23  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.0.0

2015-06-23  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: mark upcoming version as 1.0.0 fixes #22

2015-06-23  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: verify that e is 0x10001 on import fixes #13

2015-05-25  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: drop --repo-token for coveralls

2015-05-25  Henrik Strth <minisu@users.noreply.github.com>

	* doc/YubiKey_NEO_PIV_introduction.adoc: Added yubikey-piv-manager
	to software list

2015-05-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: let RSA_public_encrypt() do the PKCS1
	padding noteworthy is that it will do pkcs1 type 2 padding

2015-05-19  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, tool/cmdline.ggo,
	tool/yubico-piv-tool.c: add a test-decipher command test-decipher will for rsa do public encrypt on a random string and
	let the key decrypt for ec it will generate a new ec key and do ecdh
	and confirm it gets the same answer back

2015-05-18  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: drop verbose prints from library for ykpiv_verify() they're in tool as well.

2015-05-08  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: add newline at end of output

2015-05-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: use a transation while sending and receiving data

2015-04-09  Klas Lindfors <klas@yubico.com>

	* doc/Certificate_Authority_with_NEO.adoc: add more extensions for
	certificates in doc

2015-04-07  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_NEO_PIV_introduction.adoc: mgm-key not needed for
	change-pin and change-puk

2015-03-23  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version

2015-03-23  Klas Lindfors <klas@yubico.com>

	* NEWS: release 0.1.6

2015-03-20  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop openssl/err.h again

2015-03-20  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: replace
	EVP_MD_CTX_verify() stuff with RSA_verify()/ECDSA_verify() since the EVP_MD_CTX stuff doesn't seem to exist on osx at all.

2015-03-20  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.6

2015-03-18  Klas Lindfors <klas@yubico.com>

	* README, tool/cmdline.ggo, tool/yubico-piv-tool.c,
	tool/yubico-piv-tool.h2m: add a test-signature action that takes a certificate in and does a signature with the given
	slot, then verifying that signature with the given certificate.

2015-03-20  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl version

2015-03-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: add missing } that's why you should always build before push..

2015-03-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: move up validation of pin-retries
	parameters

2015-03-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: move more validation of parameters
	together

2015-03-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: write version to output file

2015-03-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: call get_algorithm() to get the algorithm as it was already implemented..

2015-03-19  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_NEO_PIV_introduction.adoc: give a better link for PIV
	standards

2015-03-19  Klas Lindfors <klas@yubico.com>

	* README: mention version of gengetopt required

2015-03-18  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: refactor
	dump_hex to drop some redundant code

2015-03-18  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: make parts of argument validation cleaner

2015-03-18  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: write action name instead of number

2015-03-18  Klas Lindfors <klas@yubico.com>

	* README: space to fix formatting

2015-03-18  Klas Lindfors <klas@yubico.com>

	* README: add status to README relates #17

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: break out after error

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: print out slot/cert algorithm in status relates #17

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: write CHUID in status relates #17

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: write out number of pin tries left references #17

2015-03-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: verify with NULL pin now reports tries without
	decrementing

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: add status action and
	print certificate information relates #17

2015-03-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: don't try to parse returned data if it was an error

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: add a read-certificate
	action

2015-03-05  Simon Josefsson <simon@josefsson.org>

	* README: Slight word tweak.

2015-02-20  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add fasc.pl to the distribution

2015-02-19  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_NEO_PIV_introduction.adoc: add that pin has to be
	verified for reset retry counters

2015-02-04  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2015-02-04  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.5

2015-02-04  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_NEO_PIV_introduction.adoc: use same format for default
	key as other keys

2015-02-04  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: set parity bits for weak check instead of enforcing
	them rework of dca651070d9e6e326dedcf77ac76c33e4ef7a8b6

2015-02-03  Klas Lindfors <klas@yubico.com>

	* lib/tests/parse_key.c: add a negative test for the hex decode

2015-02-02  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions after release

2015-02-02  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.4

2015-02-02  Klas Lindfors <klas@yubico.com>

	* lib/tests/parse_key.c: add a test with uppercase hex

2015-02-02  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl version

2015-02-02  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: make sure we try to decode uppercase hex

2015-02-02  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: use DES_set_key_checked() instead of
	DES_is_weak_key() since DES_set_key_checked() checks the parity as well

2015-02-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: report error if setting a new key fails

2015-02-02  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: calculate offsets properly

2015-02-02  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, tool/yubico-piv-tool.c: return error properly on hex
	decode

2015-01-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use bounded scanf

2015-01-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop unnecessary memset()

2015-01-29  Klas Lindfors <klas@yubico.com>

	* lib/version.c: reduce scope of variables

2015-01-29  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: move parantheses to make check clearer

2015-01-29  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac: add cppcheck rule

2015-01-20  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore coverage artifacts

2015-01-20  Klas Lindfors <klas@yubico.com>

	* .travis.yml, build-and-test.sh, configure.ac: run coverage for
	travis

2015-01-20  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac, lib/Makefile.am, tool/Makefile.am,
	tool/tests/Makefile.am: add --enable-coverage for lcov

2015-01-19  Klas Lindfors <klali@avm.se>

	* : Merge pull request #14 from westfeld/fixed_unblock_pin_response Fixed error when parameters in unblock-pin

2015-01-14  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: mark all bits of the signature as used the first byte of a bit string marks how many bits should be
	subtracted, make sure this doesn't get set.

2015-01-12  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: rip
	input_ready() and call isatty() instead should be more portable (work on windows) relates to #12

2015-01-12  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: try to discover
	if there is input waiting on stdin otherwise give the user a hint resolves #12

2015-01-08  Simon Josefsson <simon@josefsson.org>

	* tool/yubico-piv-tool.h2m: Fix markup.

2015-01-08  Simon Josefsson <simon@josefsson.org>

	* tool/yubico-piv-tool.c: Fix typo.

2015-01-08  Klas Lindfors <klas@yubico.com>

	* mac.mk: add a check for mac linking being correct relates to #10

2015-01-08  Klas Lindfors <klas@yubico.com>

	* mac.mk: fix mac makefile

2015-01-08  Klas Lindfors <klas@yubico.com>

	* configure.ac: fixup libtool versions

2014-12-18  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2014-12-18  Klas Lindfors <klas@yubico.com>

	* NEWS: news for 0.1.3

2014-12-18  Klas Lindfors <klas@yubico.com>

	* configure.ac: correctly bump versions

2014-12-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: add more feedback for successful actions

2014-12-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: diagnostic output for generate key

2014-12-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: switch diagnostic output to stderr

2014-12-17  Klas Lindfors <klas@yubico.com>

	* doc/OS_X_code_signing.adoc: s/codesigning/code signing/g

2014-12-09  Klas Lindfors <klas@yubico.com>

	* configure.ac, lib/tests/Makefile.am, m4/valgrind-tests.m4,
	tool/tests/Makefile.am: add valgrind for tests

2014-12-09  Klas Lindfors <klas@yubico.com>

	* doc/SSH_with_PIV_and_PKCS11.adoc: text about ssh-agent support

2014-12-09  Klas Lindfors <klas@yubico.com>

	* Makefile.am, doc/SSH_with_PIV_and_PKCS11.adoc: add instructions
	for SSH with PIV

2014-12-09  Klas Lindfors <klas@yubico.com>

	* Makefile.am: doc files changed names.

2014-12-09  Henrik Strth <minisu@users.noreply.github.com>

	* README: Update README

2014-12-09  Henrik Strth <henrik@yubico.com>

	* doc/{CertificateAuthorityWithNEO.txt =>
	Certificate_Authority_with_NEO.adoc}, doc/{OS-X-Codesigning.txt =>
	OS_X_code_signing.adoc}, doc/{Windows-Certificate.txt =>
	Windows_certificate.adoc}, doc/{YubiKey-NEO-PIV-Introduction.txt =>
	YubiKey_NEO_PIV_introduction.adoc}: Renamed doc files to snake case.

2014-12-05  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add new doc to EXTRA_DIST

2014-12-05  Klas Lindfors <klas@yubico.com>

	* doc/OS-X-Codesigning.txt: more text

2014-12-05  Klas Lindfors <klas@yubico.com>

	* doc/OS-X-Codesigning.txt: add some text about how to use for
	codesigning on OS X

2014-12-05  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/util.h, tool/yubico-piv-tool.c: add DER
	format for certificate import

2014-11-14  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions after release

2014-11-14  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.2

2014-11-12  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: check length of
	private key components before setting the card functions only accepts key components of correct size so
	here we add 0 before if they're shorter (usually one byte shorter)
	thus fixing the issue where the card returned 6f00

2014-11-10  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions after release

2014-11-10  Klas Lindfors <klas@yubico.com>

	* Makefile.am: dist the docs, and check that all docs are included

2014-11-10  Klas Lindfors <klas@yubico.com>

	* doc/{Windows-Certificate.asciidoc => Windows-Certificate.txt}: 
	move to .txt for consistency

2014-11-10  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.1

2014-11-10  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: cast cert_len to size_t shouldn't be
	negative here.  gets rid of warnings about int/size_t combinations

2014-11-10  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: check that stat completes correctly

2014-11-10  Klas Lindfors <klas@yubico.com>

	* : commit 7e0fdd8f9d01dce6e09f914b34fa38f06cedf847 Author: Klas
	Lindfors <klas@yubico.com> Date:   Mon Nov 10 09:49:54 2014 +0100

2014-11-07  David Woodhouse <David.Woodhouse@intel.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c,
	tool/yubico-piv-tool.h2m: Add support for compressed certificates This could be more sophisticated — it could automatically compress
	certificates if they are too large, instead of expecting the user to
	do so manually. But this is a good start.

2014-10-30  Klas Lindfors <klas@yubico.com>

	* windows.mk: newer openssl, install fewer things and use curl

2014-10-30  Klas Lindfors <klas@yubico.com>

	* configure.ac, lib/Makefile.am: don't use AC_LIB_HAVE_LINKFLAGS it seems to be from gnulib or such, not always available fixes #7

2014-10-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: fix broken unblock-pin action the unblock pin action misstakenly used pin reference 0x81 (unblock)
	instead of 0x80 (pin)

2014-10-28  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: add an error message for wrong key length

2014-10-27  Daniel Barnes <nasonfish@nasonfish.com>

	* tool/yubico-piv-tool.c: Check if new keys being set are the
	correct length, since longer or shorter keys yield inconsistant
	results

2014-10-07  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: Fix.

2014-10-07  Simon Josefsson <simon@josefsson.org>

	* : commit b16dce294d6f8624228c61af0480b2d276418b6a Author: Klas
	Lindfors <klas@yubico.com> Date:   Thu Oct 2 13:28:02 2014 +0200

2014-10-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: give errors when sign fails

2014-10-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: a bit of verbosity for authentication
	needs

2014-10-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: don't change the action_arg pointer, add
	to it in place instead this effectively reverses 931d224485ad197ba4ef85b76777ea96cf3471e2

2014-10-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor to let request-cert and
	selfsign-cert use different hashes namely sha1 and sha512 as well with sha256 as default

2014-10-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use temporary args_info for parsing if
	auth is needed

2014-10-02  Klas Lindfors <klas@yubico.com>

	* .gitignore, tool/Makefile.am, tool/cmdline-signer.ggo,
	tool/cmdline.ggo, tool/yubico-piv-signer.c, tool/yubico-piv-tool.c: 
	move the signer into the standard tool as a hidden option to discourage use

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: mark basic constraints as
	critical

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: key usages

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* : commit 675839362a62319a8ab226917a1416271cd54b3f Author: Simon
	Josefsson <simon@josefsson.org> Date:   Wed Oct 1 14:45:00 2014
	+0200

2014-10-01  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: only authenticate with the applet if
	needed

2014-09-30  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.h2m: drop \n in man file, gives warnings

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: Fix.

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: Typo.

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: Add.

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/YubiKey-NEO-PIV-Introduction.txt: Fix.

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/YubiKey-NEO-PIV-Introduction.txt: Add.

2014-09-29  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: add the length of the padding when checking RSA
	length

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-signer.c: better error message

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-signer.c: add a success message for signer

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-signer.c: check the return value of the signing
	operation

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/cmdline-signer.ggo, tool/yubico-piv-signer.c: add SHA512 for
	signing

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: add cmdline-signer to sources properly

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-signer.c: for rsa let it sign a correct DigestInfo
	structure which has to have the digest OID, with a NULL parameter and then the
	hash.

2014-09-26  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-signer.c: let the signer sign

2014-09-26  Klas Lindfors <klas@yubico.com>

	* tool/cmdline-signer.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-signer.c, tool/yubico-piv-tool.c: start implementing
	signer

2014-09-26  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore

2014-09-26  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am, tool/cmdline-signer.ggo,
	tool/yubico-piv-signer.c: start on yubico-piv-signer

2014-09-26  Klas Lindfors <klas@yubico.com>

	* tool/util.h: make util.h header more self-contained

2014-09-11  Klas Lindfors <klas@yubico.com>

	* mac.mk: fix mac build

2014-08-26  Klas Lindfors <klas@yubico.com>

	* tool/tests/Makefile.am: use PACKAGE_VERSION to obtain version
	instead seems to work more reliably?

2014-08-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: set the signature algorithm again in the
	cert

2014-08-25  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions after release

2014-08-25  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.0 release

2014-08-25  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl version and add -static-libgcc for
	openssl compile

2014-06-27  Klas Lindfors <klas@yubico.com>

	* lib/tests/parse_key.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/yubico-piv-tool.c: replace ykpiv_parse_key() with
	ykpiv_hex_decode()

2014-06-27  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: temp fix for ykpiv_parse_key() it should be removed and replaced by a real hex encoder.

2014-06-26  Klas Lindfors <klas@yubico.com>

	* Makefile.am: fix EXTRA_DIST

2014-06-26  Klas Lindfors <klas@yubico.com>

	* : commit c5c06c3c036b69eab8d60f7aa667075efeb5a557 Author: Klas
	Lindfors <klas@yubico.com> Date:   Wed Jun 18 10:29:22 2014 +0200

2014-06-26  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: let set_object set tag as well, not only lv

2014-06-26  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, tool/yubico-piv-tool.c: refactor delete action to use
	ykpiv_save_object()

2014-06-26  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor set_chuid() to use
	ykpiv_save_object()

2014-06-26  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, tool/yubico-piv-tool.c: 
	refactor writing object to it's own library function ykpiv_save_object(), use that for writing certs

2014-06-26  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: refactor to let send_data take an APDU* for data

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: let set_length take a size_t

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: add openssl/rsa.h for ykpiv.c

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: rename ykpiv_send_data() to send_data() since it's
	local

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/util.h: drop apdu structure from tool

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop unused code from delete_cert

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: refactor so
	ykpiv_sign_data() takes size_t input

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map: stop exporting
	ykpiv_send_data()

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor change_pin() to use
	ykpiv_transfer_data()

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor to ykpiv_transfer_data() for
	chuid setting

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor pin-retries to use
	ykpiv_transfer_data()

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor reset to use
	ykpiv_transfer_data() instead

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: refactor transfer data so it can send 0 bytes

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, tool/util.c, tool/util.h: make get_length() take a
	const buffer

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: set version on the selfsigned cert

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/error.c: add error messages

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: change around
	and let ykpiv_sign_data() pad

2014-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: 3f ff for object

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/tests/parse_name.c: some negative tests of parse_name()

2014-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: only return the actual data in ykpiv_fetch_data()

2014-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: rework some
	stuff to size_t

2014-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map: add ykpiv_fetch_object()
	to library

2014-06-24  Simon Josefsson <simon@josefsson.org>

	* doc/YubiKey-NEO-PIV-Introduction.txt: Fix.

2014-06-24  Simon Josefsson <simon@josefsson.org>

	* doc/YubiKey-NEO-PIV-Introduction.txt: Add.

2014-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/util.c: add macros for piv objects

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: fix indentation

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: let util.h
	include cmdline.h since it's using declarations from it..

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: link the util lib with openssl

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/tests/parse_name.c: constify

2014-06-24  Klas Lindfors <klas@yubico.com>

	* .gitignore, tool/tests/Makefile.am, tool/tests/parse_name.c: test
	for parse_name()

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h: let parse_name() take a const char*
	instead

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am, tool/util.c, tool/{internal.h => util.h},
	tool/yubico-piv-tool.c: change internal.h to util.h

2014-06-24  Klas Lindfors <klas@yubico.com>

	* .gitignore, Makefile.am, configure.ac, lib/Makefile.am, {tests =>
	lib/tests}/Makefile.am, {tests => lib/tests}/basic.c, {tests =>
	lib/tests}/parse_key.c: move lib tests under lib

2014-06-24  Klas Lindfors <klas@yubico.com>

	* .gitignore, configure.ac, tests/Makefile.am, tool/Makefile.am,
	tool/tests/Makefile.am, {tests => tool/tests}/basic.sh: move
	basic.sh test to subdir of tool

2014-06-24  Klas Lindfors <klas@yubico.com>

	* .gitignore, tool/Makefile.am, tool/internal.h, tool/util.c,
	tool/yubico-piv-tool.c: split out util functions from
	yubico-piv-tool.c

2014-06-23  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, tool/yubico-piv-tool.c: 
	add ykpiv_verify to the library

2014-06-18  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/yubico-piv-tool.c: make constants for more
	instructions

2014-06-18  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use constants for algorithm ids

2014-06-18  Klas Lindfors <klas@yubico.com>

	* NEWS: set version correctly in NEWS

2014-06-18  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl version for windows

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, tool/yubico-piv-tool.c: 
	add ykpiv_get_version()  function

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/Makefile.am, lib/error.c, lib/ykpiv.c, lib/ykpiv.h,
	lib/ykpiv.map, tool/yubico-piv-tool.c: move sign_data() function to
	library

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: include windows.h on windows

2014-06-17  Klas Lindfors <klas@yubico.com>

	* .gitignore, tool/Makefile.am: make a small temp library to avoid
	warnings on ggo file

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: no EXTRA_DIST in tool

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map: add ykpiv_disconnect()

2014-06-17  Klas Lindfors <klas@yubico.com>

	* .gitignore, tests/Makefile.am, tests/basic.c, tests/parse_key.c: 
	some tests for the library

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h: include ykpiv-version.h in ykpiv.h

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/yubico-piv-tool.c: add ykpiv_parse_key()

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/yubico-piv-tool.c: add ykpiv_set_mgmkey()

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: make constants for algorithms, keys and
	instructions

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: more constness

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/internal.h, lib/ykpiv.c: move apdu structure to internal.h

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/yubico-piv-tool.c: move authenticate to library as
	ykpiv_authenticate()

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: let
	the ykpiv_connect() function select as well

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am, tool/yubico-piv-tool.c: drop direct PCSC
	dependency for the tool

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: call ykpiv_done() before exiting

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop verbose parameter to alot of
	functions since it's stored in state now

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop the connect_reader() function

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: get rid of the
	YKPIV_APDU_* macros transport the starting 4 bytes as an array instead

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tests/basic.sh: fix the test with new directory structure

2014-06-16  Klas Lindfors <klas@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/yubico-piv-tool.c: break out connect and send data to the
	library exporting ykpiv_connect() ykpiv_send_data() ykpiv_transfer_data()

2014-06-16  Klas Lindfors <klas@yubico.com>

	* .gitignore, configure.ac, lib/Makefile.am, lib/error.c,
	lib/internal.h, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map: start
	moving code to the library, and add error codes

2014-06-16  Klas Lindfors <klas@yubico.com>

	* lib/Makefile.am, lib/internal.h, lib/ykpiv.c, lib/ykpiv.h,
	lib/ykpiv.map: start library structure

2014-06-16  Klas Lindfors <klas@yubico.com>

	* configure.ac: bump version properly with librarisation

2014-06-16  Klas Lindfors <klas@yubico.com>

	* configure.ac, tool/Makefile.am: let configure.ac try to find
	gengetopt

2014-06-16  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: let the tool link with the library

2014-06-16  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore more

2014-06-16  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac, lib/Makefile.am, lib/version.c,
	lib/ykpiv-version.h.in, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	lib/ykpiv.pc.in, m4/ld-version-script.m4: start of the ykpiv library

2014-06-16  Klas Lindfors <klas@yubico.com>

	* .gitignore, Makefile.am, configure.ac, tool/Makefile.am,
	cmdline.ggo => tool/cmdline.ggo, yubico-piv-tool.c =>
	tool/yubico-piv-tool.c, yubico-piv-tool.h2m =>
	tool/yubico-piv-tool.h2m: move the cli stuff to subdir tool

2014-05-28  Klas Lindfors <klas@yubico.com>

	* README, yubico-piv-tool.h2m: add an example of using
	delete-certificate

2014-05-26  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version after release to 0.0.4

2014-05-26  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl to 1.0.1g

2014-05-26  Klas Lindfors <klas@yubico.com>

	* README: fix typo

2014-05-26  Klas Lindfors <klas@yubico.com>

	* NEWS: news for 0.0.3

2014-05-16  Klas Lindfors <klas@yubico.com>

	* README, yubico-piv-tool.h2m: add note about just
	import-certificate to help texts

2014-05-16  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add a delete-certificate action resolves #2

2014-04-07  Klas Lindfors <klas@yubico.com>

	* tools/fasc.pl: drop unused, commented code

2014-04-02  Klas Lindfors <klas@yubico.com>

	* doc/Windows-Certificate.asciidoc: break line in right place

2014-04-02  Klas Lindfors <klas@yubico.com>

	* doc/Windows-Certificate.asciidoc: short documentation on how to
	request a cert from a Windows CA

2014-04-01  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: don't continue processing if we failed an
	action

2014-03-11  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: change functions around to have failure as
	default mode

2014-03-11  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: fix null dereferences reported by coverity's free scanner

2014-02-19  Klas Lindfors <klas@yubico.com>

	* Makefile.am: fixup release target

2014-02-19  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2014-02-14  Klas Lindfors <klas@yubico.com>

	* BLURB: add Travis link to BLURB

2014-02-14  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: actually do the full mutual auth with a
	challenge from the host

2014-02-13  Klas Lindfors <klas@yubico.com>

	* Makefile.am, yubico-piv-tool.h2m: add examples to the manpage and will remove from the README when we figure out how to publish
	manpages like these properly.

2014-02-13  Klas Lindfors <klas@yubico.com>

	* README: spelling: publick -> public

2014-02-13  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: correct GUID offset GUID was set one byte off resulting in invalid message

2014-02-12  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: return at the end of main() and call
	EVP_cleanup() before

2014-02-11  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: make sure to initialize num_readers before
	using.

2014-02-11  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: simplify selfsign and request, some stuff is
	already allocated.

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: gnulib shouldn't be needed explicitly

2014-02-11  Klas Lindfors <klas@yubico.com>

	* windows.mk: try to specify CC for windows build

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: change around to try to get windows-build to work

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: and in precise the package is namned mingw-w64-dev

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: try to add mingw-dev package

2014-02-11  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: rework build-and-test for windows cheat with tar instead of running make dist

2014-02-11  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: cheat by touching the man-page before make dist since the binary doesn't exist yet.

2014-02-11  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: check for arch instead

2014-02-11  Klas Lindfors <klas@yubico.com>

	* tests/Makefile.am: use TESTS_ENVIRONMENT instead of
	AM_TESTS_ENVIRONMENT since automake 1.11 (shipped with precise) doesn't support
	AM_TESTS_ENVIRONMENT

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: more packages required

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: libpcslite -> libpcsclite

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml, build-and-test.sh: add travis stuff

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore more release artifacts

2014-02-11  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: upload target for mac and windows

2014-02-11  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2014-02-11  Klas Lindfors <klas@yubico.com>

	* Makefile.am: fix release target

2014-02-11  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS file (marked as 0.0.1 release)

2014-02-10  Klas Lindfors <klas@yubico.com>

	* BLURB: add BLURB

2014-02-10  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add tests/basic.sh to EXTRA_DIST

2014-02-10  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: CHECK=check for windows and mac

2014-02-10  Klas Lindfors <klas@yubico.com>

	* tests/Makefile.am, tests/basic.sh, windows.mk: windows fixes for
	selftest

2014-02-10  Klas Lindfors <klas@yubico.com>

	* .gitignore, Makefile.am, configure.ac, tests/Makefile.am,
	tests/basic.sh: add a very simple selftest

2014-02-10  Klas Lindfors <klas@yubico.com>

	* Makefile.am, cmdline.ggo: remove details and put them as text

2014-02-10  Klas Lindfors <klas@yubico.com>

	* configure.ac: print more build options

2014-02-10  Klas Lindfors <klas@yubico.com>

	* README: example for selfsigned cert

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: use sign_data() from request_certificate()

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: break out signing from selfsign to it's own
	function

2014-02-10  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add a selfsign-certificate action

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: move opening files to it's own function

2014-02-10  Klas Lindfors <klas@yubico.com>

	* README: README text

2014-02-10  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo: more text on key slots

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: text

2014-02-10  Klas Lindfors <klas@yubico.com>

	* Makefile.am, mac.mk: add mac.mk for binary mac builds

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: properly dereference pointer before assigning

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: re-encode fasc

2014-02-10  Klas Lindfors <klas@yubico.com>

	* tools/fasc.pl: explaining comments and small change-around

2014-02-09  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: make sure to zero-out apdu before use

2014-02-09  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: more text about pin-retries

2014-02-09  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: refactor import_key() to use transfer_data()
	instead of own chaining.

2014-02-09  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: let import_cert() use transfer_data() instead
	of own chaining

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: better error messages for verify pin

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: successfull -> successful

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: drop verbose print of digest

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: setup the ec pub key properly when doing
	generate key

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: switch to sha256 for cert requests and fix for
	ec csr

2014-02-08  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add unblock-pin action and more
	text and checks to change-

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: make sure to set ret to false before goto

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: properly initialize memory to 0

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: check the new key before setting it

2014-02-07  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo: more help on actions

2014-02-07  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement change-pin

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: let generate use chaining with transfer_data()

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: break out looped sending from request-cert to
	own function

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: fix bug with continued data in request cert

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: drop debug prints

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: correct certificate length text

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: remove usage of strtok_r so it builds on
	windows again

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: reorder includes so openssl includes fix
	X509_NAME on windows

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: some support for ecc key import

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: refactor send_len to calculate the send_len
	internally

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: fix warnings and variable names

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: add some code for ecc CSR

2014-02-07  Klas Lindfors <klas@yubico.com>

	* Makefile.am, cmdline.ggo: more help for subject, and generate man
	page from detailed-help

2014-02-07  Klas Lindfors <klas@yubico.com>

	* : commit 4b64a5c800d6e3c01a6202831db2d7bd0bf55b24 Author: Klas
	Lindfors <klas@yubico.com> Date:   Fri Feb 7 10:52:56 2014 +0100

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: more work on request, try to sign digest

2014-02-06  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add a verify-pin action (needed
	for signing request)

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: refactor so we get algorithm from a function.

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: open output for writing..

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: more work on request

2014-02-06  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: start on request certificate
	action

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: print verbose information about found key

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: print sizes in a more stable fashion

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: don't print password instead remind the user the password might be wrong.

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: remove debug prints.

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: rework get_length() and fix bug(s)

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: more text

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: use sizeof(aid) instead of constant

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: chuid comments..

2014-02-05  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add code for setting CHUID

2014-02-05  Klas Lindfors <klas@yubico.com>

	* tools/fasc.pl: small tool to build the fasc

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: change around and let send_data() take a
	pointer to APDU

2014-02-05  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore more

2014-02-05  Klas Lindfors <klas@yubico.com>

	* .gitignore, build-aux/config.rpath: add a config.rpath

2014-02-05  Klas Lindfors <klas@yubico.com>

	* windows.mk: add a windows.mk

2014-02-04  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac, yubico-piv-tool.c: pcsc for platforms
	fixes

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add password for private keys

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add certificate import

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: use switch-case for action args

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo: fix help

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo: set default reader to Yubikey

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: drop ec.h

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: handle generation of ecc keys

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: correct C style comment

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: more error info

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: proper output of public key after generate

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: TODO

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: a bit more messages

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: make action a multi-val

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: PKCS12 support for import

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement import-key action

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement set pin retries

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement reset instruction

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: rework verbose prints

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: make -v take a numeric value

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add action to set management key

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo: 9b is not available as a slot generally

2014-02-03  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement algorithms for generate

2014-02-03  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: multiple fetch for public key.

2014-02-03  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement generate

2014-02-03  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add action for what to do

2014-02-03  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: get rid of openssl warnings

2014-02-03  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: print version

2014-02-03  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac, yubico-piv-tool.c: implement
	authenticate

2014-02-03  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: parse authentication key

2014-02-03  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: some working code for selecting
	applet

2014-02-03  Klas Lindfors <klas@yubico.com>

	* Makefile.am, yubico-piv-tool.c: drop indent rule and re-indent

2014-02-03  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore more

2014-02-03  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: various stuff

2014-02-03  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore

2014-02-03  Klas Lindfors <klas@yubico.com>

	* COPYING, Makefile.am, cmdline.ggo, configure.ac,
	m4/manywarnings.m4, m4/pkg.m4, m4/warnings.m4, yubico-piv-tool.c: 
	basic structure

2014-02-03  Klas Lindfors <klas@yubico.com>

	* Initial commit

