2018-09-14  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.6.2

2018-09-10  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: tool: for openssl 1.1 rsa signatures
	include hash oid the rsa signature has to be over hash oid + message digest, dropping
	the oid from the hash leads to invalid certificate requests and
	selfsigned certificates.  fixes #164

2018-09-10  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: tool: only declare the static struct once
	in wrap_public_key() and make sure to just set it once for both rsa and ec

2018-09-10  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: tool: handle error conditions from signing
	with openssl 1.1 relates #164

2018-09-07  Alessio Di Mauro <alessio@yubico.com>

	* : Merge PR #163

2018-08-17  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: bump openssl versions to 1.0.2p

2018-08-17  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version to 1.6.2

2018-08-17  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.6.1

2018-08-17  Klas Lindfors <klas@yubico.com>

	* NEWS: update NEWS for more changes that happened in 1.6.0

2018-08-17  Klas Lindfors <klas@yubico.com>

	* configure.ac: finish up version bump to 1.6.1, LT_REVISION has to
	increase

2018-08-16  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: tool: check length before trying to store
	cert in buffer fixes #148

2018-08-16  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: ykpiv: when decoding an object compare lengths
	correctly the length comparison when reading an object out was messed up, this
	fixes it to compare correctly.  relates #154

2018-08-16  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: ykpiv: fix length when encoding exactly 0xff bytes this should be encoded as 81 ff, not 82 00 ff relates #154

2018-08-09  Klas Lindfors <klas@yubico.com>

	* : commit d613b42b0c65dab0ac18dd8686631e075ea947b9 Author: Jakub
	Jelen <jjelen@redhat.com> Date:   Wed Aug 8 16:03:23 2018 +0200

2018-08-08  Thordur Bjornsson <thorduri@yubico.com>

	* configure.ac: Revert the configure.ac portion of c31a0425.  Bugfixes don't change the libtool versions, so revert back.

2018-08-08  Thordur Bjornsson <thorduri@yubico.com>

	* NEWS, configure.ac: Bump version to 1.6.1 unreleased

2018-08-06  Thordur Bjornsson <thorduri@yubico.com>

	* NEWS, configure.ac: release: 1.6.0

2018-05-22  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: lib: in _ykpiv_fetch_object() handle bogus length by
	returning otherwise we might memmove() to much data Thanks to Eric Sesterhenn of x41 D-Sec for reporting this issue to
	us.

2018-05-22  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: lib: in ykpiv_transfer_data() handle overflow by
	exiting this is detected and printed, but we never exit the function Thanks to Eric Sesterhenn of x41 D-Sec for reporting this issue to
	us.

2018-05-15  Alessio Di Mauro <alessio@alessiodimauro.com>

	* ykcs11/objects.c: ykcs11: ignore more attributes when creating
	objects

2018-05-09  Alessio Di Mauro <alessio@alessiodimauro.com>

	* ykcs11/objects.c: Make slot 9e private so that OpenSSL can ask for
	a PIN

2018-05-07  Alessio Di Mauro <alessio@alessiodimauro.com>

	* ykcs11/yubico_token.c: Remove 384 from the supported lengths for
	EC key generation in ykcs11 Closes #149

2018-05-03  Alessio Di Mauro <alessio@alessiodimauro.com>

	* ykcs11/mechanisms.c: Ignore CKA_PRIVATE in ykcs11 Newer version of pkcs11-tool set the CKA_PRIVATE attribute during
	generation making the operation fail. The attribute is now ignored.

2018-05-03  Alessio Di Mauro <alessio@alessiodimauro.com>

	* ykcs11/openssl_utils.c: Update key generation in ykcs11 to work
	with OpenSSL 1.1 Manually setting a signature for a certificate is not possible in
	OpenSSL 1.1 because some of the structs have become opaque. Use
	X509_sign() with a bogus key instead.

2018-03-25  Klas Lindfors <klas@yubico.com>

	* : commit 9d8f8f3f2b8232862452e1557305b5f9f74bb5b1 Author: James
	Alseth <james@jalseth.me> Date:   Fri Mar 23 14:53:27 2018 -0700

2018-03-19  Alessio Di Mauro <alessio@yubico.com>

	* vagrant/development/provision.sh: Add check as a dependency to the
	Vagrant provision script Closes #142.

2018-03-06  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #139 from notdpate/master Libykpiv ROCA mitigation changes for PIV tool/Minidriver - Release
	1.5.2

2018-03-05  Dave Pate <notdpate@gmail.com>

	* : Merge upstream master commits

2018-02-27  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #138 from Jakuje/master Compiler warnings and compatibility with older check versions

2018-02-10  Jakub Jelen <jjelen@redhat.com>

	* lib/tests/api.c, lib/util.c, tool/util.c: Remove unused variables

2018-02-27  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #141 from laomaiweng/openssl-1.1.0-compat Improve compatibility with OpenSSL 1.1.0

2018-02-10  Jakub Jelen <jjelen@redhat.com>

	* lib/tests/api.c: Do not build test if HW_TESTS is not enabled (to
	avoid warnings)

2018-02-09  Dave Pate <notdpate@gmail.com>

	* lib/ykpiv.c: Fix msvc build warning re: return values

2018-02-09  Dave Pate <notdpate@gmail.com>

	* lib/internal.c, lib/ykpiv.c: Fix warnings in msvc build

2018-02-09  Dave Pate <notdpate@gmail.com>

	* .gitignore, configure.ac, lib/internal.c, lib/internal.h,
	lib/util.c, lib/ykpiv.c: Add syslog/windows event log output Read
	multistage configuration Update ROCA mitigation check and warnings

2018-01-25  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #137 from Yubico/custom_pcsc Support specifying custom PCSC lib

2018-01-02  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #136 from jmyreen/openssl-1.1-fixes Fixed some bugs in the port to Openssl-1.1:

2017-12-30  Johan Myren <jem@grey.localdomain>

	* tool/yubico-piv-tool.c: Fixed some bugs in the port to
	Openssl-1.1: - wrap_public_key() passed the address of the local stack variable   internal_key to RSA_meth_set0_data(), which was used long after   wrap_public_key() had returned. Changed to static.  - The callback functions yk_rsa_meth_sign and yk_ec_meth_sign
	  'siglen' parameter has type (unisgned int *), which was cast to
	  (size_t *) before it was used to write a value in the caller's
	  memory space. This caused stack corruption on machines where size_t
	  is bigger than unsigned int.  - The callback function's 'siglen' parameter is output-only, not   in-out. The input value was assumed to contain the maximum size of   the output buffer as input, and a bogus value was compared to the   amount of data received from the token in function   _general_authenticate(). Changed to pass in the values returned by   RSA_size(rsa) and ECDSA_size(ec), which Openssl specifies as
	  minimum buffer sizes.  - The callback functions' return values were swapped; fixed to
	  return 1 on success, 0 on failure.

2017-12-29  Aloz1 <kno0001@gmail.com>

	* tool/openssl-compat.c, tool/openssl-compat.h,
	tool/yubico-piv-tool.c, ykcs11/openssl_utils.c,
	ykcs11/tests/ykcs11_tests.c: Added checks to allow building against
	LibreSSL It seems that when OpenSSL 1.1.0 support was added, LibreSSL was
	broken due to the way version checking was done. This adds extra
	checks for LIBRESSL_VERSION_NUMBER where applicable.

2017-11-29  Trevor Bentley <trevor@yubico.com>

	* NEWS, configure.ac: Bump version to 1.5.1 unreleased

2017-11-29  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #133 from Yubico/distclean Use library dependencies for openssl compat layer

2017-11-29  Trevor Bentley <mrmekon@gmail.com>

	* configure.ac, lib/tests/Makefile.am, ykcs11/tests/Makefile.am: Use
	library dependencies for openssl compat layer

2017-11-29  Trevor Bentley <trevor@yubico.com>

	* NEWS: Updated NEWS

2017-11-29  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #132 from Yubico/bump_openssl Bump Windows/Mac builds to latest OpenSSL 1.0.x

2017-11-27  Trevor Bentley <mrmekon@gmail.com>

	* : Merge pull request #131 from Yubico/openssl1.1_jakuje OpenSSL 1.1 compatibility

2017-11-27  Trevor Bentley <trevor@yubico.com>

	* mac.mk, windows.mk: Build with correct OpenSSL version number on
	Mac and mingw32/64 This is a cosmetic change.  OpenSSL picks up the VERSION environment
	variable when building, which is set to the yubico-piv-tool version
	number during Travis-CI builds.  This overrides it back to the
	OpenSSL version when building OpenSSL.

2017-11-27  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c, linux.mk, tool/openssl-compat.h: Fix OpenSSL 1.1
	build with mingw32/64

2017-11-24  Trevor Bentley <trevor@yubico.com>

	* .travis.yml, build-and-test.sh, configure.ac, linux.mk: Build
	against OpenSSL 1.1 in travis-ci

2017-11-21  Trevor Bentley <trevor@yubico.com>

	* configure.ac, lib/internal.c, lib/tests/Makefile.am,
	lib/tests/api.c, lib/ykpiv.c, tool/util.c, tool/yubico-piv-tool.c,
	ykcs11/tests/Makefile.am, ykcs11/tests/ykcs11_tests.c: Fix OpenSSL
	 1.1 compat layer - Changes for latest ykpiv_util refactor  - Passes hw tests with openssl 1.0 and 1.1  - Passes valgrind

2017-11-20  Trevor Bentley <trevor@yubico.com>

	* : commit 3aaa525efc678f9bca1fb08716e282eb00536356 Merge: d5283ff
	6a34b6e Author: Trevor Bentley <mrmekon@gmail.com> Date:   Mon Nov
	20 10:23:05 2017 +0100

2017-11-16  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c, windows.mk, ykcs11/tests/ykcs11_tests.c: Fix
	cross-compiling for mingw64

2017-11-14  Jakub Jelen <jjelen@redhat.com>

	* tool/openssl-compat.c, tool/openssl-compat.h,
	tool/yubico-piv-tool.c, ykcs11/tests/ykcs11_tests.c: Properly apply
	the OpenSSL version checks

2017-11-14  Trevor Bentley <trevor@yubico.com>

	* build-and-test.sh: Install 'check' package in build script.

2017-11-14  Jakub Jelen <jjelen@redhat.com>

	* tool/yubico-piv-tool.c: Do not use the new API with the old
	OpenSSL

2017-11-14  Jakub Jelen <jjelen@redhat.com>

	* ykcs11/tests/ykcs11_tests.c: Provide the bogus signature with
	OpenSSL 1.1.0 API

2017-11-14  Jakub Jelen <jjelen@redhat.com>

	* ykcs11/tests/ykcs11_tests.c: Use the new OpenSSL 1.1.0 API also in
	the HW tests

2017-11-13  Jakub Jelen <jjelen@redhat.com>

	* ykcs11/openssl_utils.c: Use OpenSSL 1.1.0 API

2017-10-20  Jakub Jelen <jjelen@redhat.com>

	* tool/yubico-piv-tool.c, ykcs11/openssl_utils.c: WIP:Use RSA/EC_KEY
	METHOD to provide X509 signatures using high-level OpenSSL API

2017-10-20  Jakub Jelen <jjelen@redhat.com>

	* lib/ykpiv.c, tool/yubico-piv-tool.c, ykcs11/tests/ykcs11_tests.c: 
	RAND_pseudo_bytes is deprecated in OpenSSL 1.1.0

2017-02-23  Jakub Jelen <jjelen@redhat.com>

	* tool/Makefile.am, tool/openssl-compat.c, tool/openssl-compat.h,
	tool/util.c, tool/yubico-piv-tool.c, ykcs11/openssl_utils.c: Few
	more OpenSSL 1.1.0 incompatibilities

2017-02-20  Jakub Jelen <jjelen@redhat.com>

	* tool/Makefile.am, tool/openssl-compat.c, tool/openssl-compat.h,
	tool/util.c, tool/yubico-piv-tool.c: Initial idea of openssl-1.1.0
	compatibility (still missing some magic around certificates)

2017-11-08  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.h: Doxygen documentation for ykpiv_util_* API.

2017-11-08  Trevor Bentley <trevor@yubico.com>

	* README, configure.ac, lib/util.c, lib/ykpiv.c, lib/ykpiv.h: Clean
	up typos, warnings, and incorrect libtool age.

2017-11-03  Trevor Bentley <trevor@yubico.com>

	* .gitignore: Update .gitignore

2017-11-03  Trevor Bentley <trevor@yubico.com>

	* NEWS, lib/ykpiv.h: Organize ykpiv.h, update NEWS file for 1.5.0

2017-11-03  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c: Add integration test for PIN cache

2017-10-31  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c, ykcs11/tests/ykcs11_tests.c: Skip unusable
	integration tests when testing a NEO

2017-10-31  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c: Allow changing libykpiv compile-time ifdefs from
	CFLAGS

2017-10-31  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c, lib/util.c, lib/ykpiv.c,
	ykcs11/tests/Makefile.am, ykcs11/tests/reset.sh: Disable
	ensure_application_selected() by default, since it breaks PIN
	policy.

2017-10-26  Trevor Bentley <trevor@yubico.com>

	* lib/internal.h, lib/tests/Makefile.am, lib/tests/api.c,
	lib/ykpiv.c, lib/ykpiv.map: Fix build on Linux Signed-off-by: Trevor Bentley <trevor@yubico.com>

2017-10-26  Dave Pate <dpate@yubico.com>

	* lib/internal.c, lib/ykpiv.c, lib/ykpiv.h: api: use uintptr_t for
	architecture specific handle sizes

2017-10-26  Trevor Bentley <trevor@yubico.com>

	* configure.ac, lib/tests/Makefile.am, tool/tests/Makefile.am,
	ykcs11/tests/Makefile.am, ykcs11/tests/ykcs11_tests.c: Fix compile
	time warnings about -no-install on Darwin/clang

2017-10-25  Trevor Bentley <trevor@yubico.com>

	* lib/util.c: Suppress sscanf_s error on Windows

2017-10-25  Trevor Bentley <trevor@yubico.com>

	* lib/util.c: Remove accidental printf

2017-10-24  Trevor Bentley <trevor@yubico.com>

	* lib/util.c, tool/yubico-piv-tool.c: Move YK4 insecure on-chip key
	generation prevention from yubico-piv-tool to libykpiv

2017-10-24  Trevor Bentley <trevor@yubico.com>

	* Makefile.am, lib/tests/api.c, tool/tests/basic.sh,
	tools/confirm.sh, ykcs11/tests/ykcs11_tests.c: Move hardware tests
	to "make hwtest", with one warning for all test suites.  - "make check" will mark destructive tests as skipped - "make hwtest" will ask once for user confirmation

2017-10-23  Trevor Bentley <trevor@yubico.com>

	* tool/yubico-piv-tool.c: Remove artifact from rebase (bad local
	variable)

2017-10-23  Trevor Bentley <trevor@yubico.com>

	* configure.ac, lib/ykpiv.map: Bump libykpiv version to 1.5.0

2017-10-23  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: Some documentation and cleanup of
	ykpiv.h

2017-10-23  Trevor Bentley <trevor@yubico.com>

	* Makefile.am, configure.ac, lib/Doxyfile, lib/ykpiv.h,
	m4/ac_doxygen.m4: Generate Doxygen docs for libykpiv if doxygen is
	available.

2017-10-23  Trevor Bentley <trevor@yubico.com>

	* lib/internal.c, lib/tests/api.c: Use openssl implementation of
	DES_is_weak_key on non-Windows, and add unit test.

2017-10-20  Trevor Bentley <trevor@yubico.com>

	* lib/internal.h, lib/util.c, lib/ykpiv.c: Fix applet selection for
	whole public API.

2017-10-20  Trevor Bentley <trevor@yubico.com>

	* lib/tests/api.c, lib/ykpiv.c, lib/ykpiv.h, tool/tests/basic.sh: 
	Fix unit tests for NEO: use ECCP256 and detect attestation errors

2017-10-20  Trevor Bentley <trevor@yubico.com>

	* tool/tests/basic.sh: Extra attempts for PIN/PUK block in unit test

2017-10-10  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c: Fix PIN length handling in ykpiv_verify*()

2017-10-10  Trevor Bentley <trevor@yubico.com>

	* lib/tests/Makefile.am, lib/tests/{util.c => api.c}: Rename util.c
	test suite to api.c

2017-10-10  Trevor Bentley <trevor@yubico.com>

	* lib/util.c, lib/ykpiv.c, lib/ykpiv.h: Backport minidriver changes * Port ykpiv_auth_getchallenge and ykpiv_auth_verifyresponse  - Commit 8fde607b50b19c57a662c53c6b276b54a78606d8  - Commit 6046b98e477cfef59a590ce2177336d694813e7e  - Commit 422cea11745dc67d15039e242ed21ecb5208ae55  - Commit 1d31647e5a27bd2df6bda76512c7d673980f0bec * Rename connect2() and done2() to connect_with_external_card(),
	etc.  * Select applet in ykpiv_change_pin, change_puk, and unblock_pin

2017-09-28  Trevor Bentley <trevor@yubico.com>

	* tool/tests/basic.sh, tool/tests/cert.pem, tool/tests/private.pem,
	tool/tests/public.pem: Add automated tests for yubico-piv-tool CLI
	(hw-tests only)

2017-09-27  Trevor Bentley <trevor@yubico.com>

	* lib/internal.c, tool/util.c, ykcs11/openssl_utils.c,
	ykcs11/utils.c, ykcs11/ykcs11.c, ykcs11/yubico_slot.c,
	ykcs11/yubico_token.c: Fix all clang scan-build warnings

2017-09-26  Trevor Bentley <trevor@yubico.com>

	* lib/tests/util.c, tool/yubico-piv-tool.c: Unit test for
	ykpiv_attest()

2017-09-26  Trevor Bentley <trevor@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: Fix issue #123 -
	specify text/binary mode for open files

2017-09-26  Trevor Bentley <trevor@yubico.com>

	* lib/util.c, lib/ykpiv.h, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c, ykcs11/token_vendors.c: Use slot enum
	consistently.  Move slot->object translation into libykpiv.

2017-09-25  Trevor Bentley <trevor@yubico.com>

	* lib/internal.h, lib/util.c, lib/ykpiv.h, tool/yubico-piv-tool.c: 
	Add ykpiv_util_(get/set)_cccid(), and use in yubico-piv-tool

2017-09-20  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: Fix ykpiv_attest slot argument name

2017-09-20  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: Add
	ykpiv_attest() and use it in yubico-piv-tool

2017-09-19  Trevor Bentley <trevor@yubico.com>

	* tool/yubico-piv-tool.c: yubico-piv-tool: use ykpiv_util_read_cert

2017-09-19  Trevor Bentley <trevor@yubico.com>

	* tool/yubico-piv-tool.c: yubico-piv-tool: use
	ykpiv_util_delete_cert

2017-09-18  Trevor Bentley <trevor@yubico.com>

	* lib/tests/util.c, lib/util.c, lib/ykpiv.h, tool/util.c,
	tool/util.h, tool/yubico-piv-tool.c: Add gzip support to
	ykpiv_util_import_certificate(), and use in yubico-piv-tool

2017-09-13  Trevor Bentley <trevor@yubico.com>

	* lib/tests/util.c, lib/ykpiv.c, lib/ykpiv.h,
	tool/yubico-piv-tool.c: yubico-piv-tool: Switch to
	ykpiv_set_pin_retries()

2017-09-12  Trevor Bentley <trevor@yubico.com>

	* tool/yubico-piv-tool.c: yubico-piv-tool: use ykpiv_util_reset()

2017-09-12  Trevor Bentley <trevor@yubico.com>

	* tool/yubico-piv-tool.c: yubico-piv-tool: use util function for key
	generation

2017-09-12  Trevor Bentley <trevor@yubico.com>

	* lib/internal.h, lib/util.c, lib/ykpiv.c: Move shared functionality
	from util.c to internal.h

2017-09-12  Trevor Bentley <trevor@yubico.com>

	* lib/internal.c, lib/internal.h, lib/util.c, lib/ykpiv.c,
	lib/ykpiv.h: Cleanup compiler warnings, and switch to cross-platform
	data types

2017-09-12  Trevor Bentley <trevor@yubico.com>

	* lib/internal.c, lib/internal.h, lib/ykpiv.c, lib/ykpiv.h: Cleanup
	function names.  Make PIN cache optional.

2017-09-11  Trevor Bentley <trevor@yubico.com>

	* lib/Makefile.am, lib/internal.c, lib/internal.h, lib/util.c,
	lib/ykpiv.c, lib/ykpiv.h: Fix DES bugs in Linux.  Windows+Linux both
	pass unit tests.

2017-08-28  Trevor Bentley <trevor@yubico.com>

	* lib/Makefile.am, lib/internal.h, lib/tests/util.c, lib/util.c,
	lib/ykpiv.c, lib/ykpiv.h: Backport from minidriver: commit 90020fea0ac34b2f98b68a5798fa85cb5ad12175 (tag: 3.2) Author:
	Dave Pate <dpate@yubico.com> Date:   Thu Jul 27 00:31:54 2017 -0700     Release 3.2     Adds automatic PUK blocking     Adds feature to turn automatic PUK blocking off     Miscellaneous fixes with metadata handling

2017-08-07  Trevor Bentley <trevor@yubico.com>

	* lib/util.c: Backport from minidriver:
	11788a4a36bf83a01104700f171774336086e9b4 commit 11788a4a36bf83a01104700f171774336086e9b4 Author: Dave Pate
	<dpate@yubico.com> Date:   Tue Jul 18 18:28:48 2017 -0700     Fixes #114 - jump to cleanup section in ykpiv_util_write_mscmap
	    on invalid size

2017-08-07  Trevor Bentley <trevor@yubico.com>

	* .gitignore, lib/tests/Makefile.am, lib/tests/util.c, lib/ykpiv.c,
	lib/ykpiv.h: Continuing unit tests and minor bug fixes * Support unit tests on Yubikey NEO * Test ykpiv_get_version * Test ykpiv_import_private_key * Test ykpiv_sign_data * Test ykpiv_decipher_data * Test ykpiv_change_pin * Test ykpiv_change_puk * Test ykpiv_get_pin_retries * Test ykpiv_set_pin_retries * Test ykpiv_verify * Fix segfault when |tries| is NULL * Fix segfault when import_private_key algorithm is wrong

2017-07-24  Trevor Bentley <trevor@yubico.com>

	* lib/tests/util.c: Tests for ykpiv_list_readers and
	ykpiv_set_mgmkey

2017-07-12  Trevor Bentley <trevor@yubico.com>

	* lib/internal.h, lib/tests/util.c, lib/util.c, lib/ykpiv.c,
	lib/ykpiv.h: Port custom allocator from minidriver, and add test
	case for it.

2017-07-12  Trevor Bentley <trevor@yubico.com>

	* lib/tests/util.c, lib/util.c: Added tests for authenticate and
	reset.  Fixed bug in reset (always returned success).

2017-07-10  Trevor Bentley <trevor@yubico.com>

	* lib/tests/Makefile.am, lib/tests/util.c: Test cases for
	ykpiv_util_* functions

2017-07-04  Trevor Bentley <trevor@yubico.com>

	* lib/Makefile.am, lib/internal.h, lib/util.c, lib/ykpiv.c,
	lib/ykpiv.h: WIP port minidriver ykpiv_util_* functions

2017-07-03  Trevor Bentley <trevor@yubico.com>

	* lib/ykpiv.c: Port fix from ykpiv-minidriver: commit 79ae87153c2be06e8193a491e26b799e3b5ba028 Author: Oscar K So
	JR <oscar@yubico.com> Date:   Mon Jan 30 22:08:29 2017 +0000     Fixed Issue #78 - P2 Bug: MXCT352 - Importing PKCS#12 with key
	    size 4096 bits crashed CertUtil.exe

2017-06-30  Trevor Bentley <trevor@yubico.com>

	* configure.ac, lib/tests/Makefile.am, lib/tests/basic.c,
	lib/tests/parse_key.c, tool/tests/Makefile.am,
	tool/tests/parse_name.c, tool/tests/test_inout.c,
	ykcs11/tests/Makefile.am: Switch test cases to use libcheck
	framework This keeps the test logic the same, but moves most of them into the
	libcheck test suite framework.  It gives better control over
	grouping related tests, running them in parallel, and reporting on
	multiple failures.  Running in parallel also brings problems, so libykcs11 tests are
	left untouched.  Parallel access to a single hardware DUT does not
	make sense, and pcsc-lite doesn't work after a fork() in OS X
	10.11+, so it can't run in libcheck's tests anyway.

2017-06-29  Trevor Bentley <trevor@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/utils.c: Fix test cases:
	uninitialized memory and non-terminated string compare

2017-10-18  Emil Lundberg <emil@yubico.com>

	* README: Explicitly link "Vagrant VM" to GitHub

2017-10-18  Emil Lundberg <emil@yubico.com>

	* vagrant/development/README, vagrant/development/{README.adoc =>
	README.md}: Revert "Rewrite vagrant/development/README to asciidoc" This reverts commit 558dcc1a2dd24f2d64eeeb3818ca71282f42b310.

2017-10-18  Emil Lundberg <emil@yubico.com>

	* vagrant/development/README, vagrant/development/{README.md =>
	README.adoc}: Rewrite vagrant/development/README to asciidoc

2017-10-17  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version after release

2017-10-17  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.4.4

2017-10-17  Klas Lindfors <klas@yubico.com>

	* ykcs11/token_vendors.c: ykcs11: disable rsa keygeneration for yk4
	< 4.3.5 see https://yubi.co/ysa201701/ relates #127

2017-10-17  Klas Lindfors <klas@yubico.com>

	* .travis.yml: try to find correct packages for travis

2017-10-17  Klas Lindfors <klas@yubico.com>

	* : commit ea006783145e6214d944b81f9ba950bcddeefcd8 Author: edent
	<github.com@shkspr.mobi> Date:   Tue Oct 17 08:02:02 2017 +0100

2017-10-16  Emil Lundberg <emil@yubico.com>

	* README: Fix Vagrant VM link in README

2017-10-16  Emil Lundberg <emil@yubico.com>

	* .gitignore, README, vagrant/development/README.md,
	vagrant/development/Vagrantfile, vagrant/development/provision.sh: 
	Add Vagrant VM for development

2017-10-16  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: disable rsa keygen for yubikey4 before
	4.3.5 point at https://yubi.co/ysa201701/

2017-05-30  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: change _change_pin_internal to change_pin_internal to
	match style all other internal functions have plain names

2017-05-30  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: drop unused variable

2017-05-30  Klas Lindfors <klas@yubico.com>

	* : commit d1db8eb282276a68bcfbe78bbeda9ff3e5a09d1c Author: emersonl
	<emersonl@yahoo-inc.com> Date:   Mon May 29 04:19:49 2017 -0700

2017-05-26  emersonl <emersonl@yahoo-inc.com>

	* lib/ykpiv.c: Fix issue #116

2017-05-25  emersonl <emersonl@yahoo-inc.com>

	* lib/internal.h, lib/ykpiv.c: Fix issue #88 and #102

2017-05-25  Emerson Lin <Gh0u1L5@foxmail.com>

	* mac.mk, windows.mk: bump openssl to 1.0.2l OpenSSL just released a new version and 1.0.2k no longer works

2017-04-24  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo: touch-policy and pin-policy is only available on
	YubiKey 4

2017-04-19  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo: add a line about slot f9 to help output

2017-04-19  Klas Lindfors <klas@yubico.com>

	* Makefile.am, tool/yubico-piv-tool.adoc: let help2adoc use the h2m
	file as extra include

2017-04-19  Klas Lindfors <klas@yubico.com>

	* README, doc/YubiKey_PIV_introduction.adoc, tool/cmdline.ggo,
	tool/yubico-piv-tool.adoc, tool/yubico-piv-tool.h2m: update
	documentation and help output for how to specify secrets on stdin also update all examples to have no space after short option.

2017-04-18  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump verions after release

2017-04-18  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: NEWS for 1.4.3

2017-04-06  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: bump openssl to 1.0.2k

2017-04-06  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: add a new hidden flag --stdin-input for
	straight stdin input

2017-03-30  Alessio Di Mauro <alessio@yubico.com>

	* : Merge PR/113, fixup for PSS

2017-03-26  Hannes Mehnert <hannes@mehnert.org>

	* ykcs11/mechanisms.c, ykcs11/openssl_utils.c, ykcs11/ykcs11.c,
	ykcs11/ykcs11.h: fix PSS signing support

2016-11-29  Klas Lindfors <klas@yubico.com>

	* Makefile.am: drop dropped docs from dist sources

2016-11-03  Dain Nilsson <dain@yubico.com>

	* doc/YubiKey_PIV_introduction.adoc: Correct size of stored objects.

2016-10-19  Dain Nilsson <dain@yubico.com>

	* README, doc/Android_code_signing.adoc, doc/Attestation.adoc,
	doc/Certificate_Authority.adoc, doc/OS_X_code_signing.adoc,
	doc/SSH_User_certificates.adoc, doc/SSH_with_PIV_and_PKCS11.adoc,
	doc/Windows_certificate.adoc, doc/YKCS11_release_notes.adoc,
	doc/YubiKey_PIV_introduction.adoc: Updated docs.

2016-10-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Better approximation for signature size Relates to #98.

2016-10-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Always set number of slots Relates to #98.

2016-10-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: Return correct modulus When asked for CKA_MODULUS on a private key return only n and not
	the whole key Relates to #98.

2016-10-04  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: drop la files and pkgconfig files for mac and
	windows builds since the location in these wont make sense anyways

2016-10-03  Alessio Di Mauro <alessio@yubico.com>

	* doc/SSH_with_PIV_and_PKCS11.adoc: Fix AsciiDoc issue

2016-10-03  Alessio Di Mauro <alessio@yubico.com>

	* doc/SSH_with_PIV_and_PKCS11.adoc: Whitespace cleanup

2016-10-03  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #90 from acdha/patch-1 Improve SSH with PIV and PKCS11 instructions

2016-09-23  Klas Lindfors <klali@avm.se>

	* : Merge pull request #87 from fredemmott/patch-1 Update documentation on ssh-agent on macos

2016-09-23  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: add libtool for osx build

2016-09-23  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: do autoreconf after adding packages and set -e
	for travis

2016-09-22  Fred Emmott <mail@fredemmott.co.uk>

	* doc/SSH_with_PIV_and_PKCS11.adoc: Update documentation on
	ssh-agent on macos Works fine on clean installs of sierra - just needs opensc from
	homebrew

2016-09-12  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: fixup dependencies for yubico-piv-tool.1 should now support parallel builds

2016-08-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: make sure to return RSA keys with
	ASN1_NULL as parameter

2016-08-12  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2016-08-12  Klas Lindfors <klas@yubico.com>

	* NEWS: release 1.4.2

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* README: Markup fixes.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* README: Whitespace fix.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* NEWS, README: Doc fixes.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* ykcs11/ykcs11.pc.in: Drop cflags since this "library" doesn't have
	any public header files.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* ykcs11/pkcs11.h: We modified it => add license header.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* ykcs11/Makefile.am: Don't install ykcs11-version.h.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* Makefile.am, build-and-test.sh, configure.ac, lib/Makefile.am,
	lib/error.c, lib/internal.h, lib/tests/Makefile.am,
	lib/tests/basic.c, lib/tests/parse_key.c, lib/version.c,
	lib/ykpiv-version.h.in, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	lib/ykpiv.pc.in, mac.mk, tool/Makefile.am, tool/cmdline.ggo,
	tool/tests/Makefile.am, tool/tests/basic.sh,
	tool/tests/parse_name.c, tool/tests/test_inout.c, tool/util.c,
	tool/util.h, tool/yubico-piv-tool.adoc, tool/yubico-piv-tool.c,
	tool/yubico-piv-tool.h2m, tools/fasc.pl, windows.mk,
	ykcs11/Makefile.am, ykcs11/debug.h, ykcs11/mechanisms.c,
	ykcs11/mechanisms.h, ykcs11/obj_types.h, ykcs11/objects.c,
	ykcs11/objects.h, ykcs11/openssl_types.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/pkcs11y.h, ykcs11/slot_vendors.c,
	ykcs11/slot_vendors.h, ykcs11/tests/Makefile.am,
	ykcs11/tests/ykcs11_tests.c, ykcs11/token_vendors.c,
	ykcs11/token_vendors.h, ykcs11/utils.c, ykcs11/utils.h,
	ykcs11/vendor_ids.h, ykcs11/vendors.c, ykcs11/vendors.h,
	ykcs11/ykcs11-version.h.in, ykcs11/ykcs11.c, ykcs11/ykcs11.h,
	ykcs11/ykcs11.map, ykcs11/ykcs11.pc.in, ykcs11/yubico_slot.c,
	ykcs11/yubico_slot.h, ykcs11/yubico_token.c, ykcs11/yubico_token.h: 
	Improve license headers.

2016-08-12  Simon Josefsson <simon@josefsson.org>

	* doc/YubiKey_PIV_introduction.adoc: Improve doc.

2016-08-12  Klas Lindfors <klas@yubico.com>

	* ykcs11/pkcs11.h: if CRYPTOKI_EXPORTS is not defined don't add
	__declspec this messes up the windows build since we're already using libtool
	for the exports.

2016-08-12  Klas Lindfors <klas@yubico.com>

	* ykcs11/Makefile.am, ykcs11/version.c, ykcs11/ykcs11-version.h.in: 
	drop ykcs11_check_version() that was never used or exported

2016-08-12  Klas Lindfors <klas@yubico.com>

	* ykcs11/Makefile.am: fixup license header of Makefile.am

2016-08-12  Klas Lindfors <klas@yubico.com>

	* ykcs11/Makefile.am, ykcs11/mechanisms.c, ykcs11/obj_types.h,
	ykcs11/objects.c, ykcs11/openssl_utils.h, ykcs11/pkcs11.h,
	ykcs11/pkcs11f.h, ykcs11/pkcs11t.h, ykcs11/pkcs11y.h,
	ykcs11/slot_vendors.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h,
	ykcs11/yubico_slot.h: switch out the pkcs11 headers for the SCUTE
	pkcs11 header from opensc create pkcs11y.h for our additional things

2016-08-12  Klas Lindfors <klas@yubico.com>

	* ykcs11/debug.h, ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/openssl_types.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/slot_vendors.c,
	ykcs11/slot_vendors.h, ykcs11/tests/ykcs11_tests.c,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/utils.c,
	ykcs11/utils.h, ykcs11/vendor_ids.h, ykcs11/vendors.c,
	ykcs11/vendors.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h,
	ykcs11/yubico_slot.c, ykcs11/yubico_slot.h, ykcs11/yubico_token.c,
	ykcs11/yubico_token.h: add copyright and license header

2016-08-12  Klas Lindfors <klas@yubico.com>

	* windows.mk: enable asm for windows openssl builds also choose the correct target for 32bits

2016-08-11  Klas Lindfors <klas@yubico.com>

	* ykcs11/version.c, ykcs11/ykcs11-version.h.in, ykcs11/ykcs11.map: 
	correct license on ykcs11 files

2016-08-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Return CKR_FUNCTION_FAILED for unimplemented func Closes #84

2016-08-11  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2016-08-11  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.4.1

2016-08-11  Alessio Di Mauro <alessio@yubico.com>

	* doc/Certificate_Authority.adoc, doc/OS_X_code_signing.adoc,
	doc/SSH_with_PIV_and_PKCS11.adoc, doc/Windows_certificate.adoc,
	doc/YubiKey_PIV_introduction.adoc: Fix a few typos in the
	documentation

2016-08-10  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: bump windows and mac builds to 1.0.2h

2016-08-10  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: make certificate serial
	number random by default

2016-08-01  Alessio Di Mauro <alessio@yubico.com>

	* doc/SSH_User_certificates.adoc: Add link to ssh-keygen manpage for
	User SSH certs

2016-07-29  Alessio Di Mauro <alessio@yubico.com>

	* doc/SSH_User_certificates.adoc: Fix typo

2016-07-29  Alessio Di Mauro <alessio@yubico.com>

	* doc/SSH_User_certificates.adoc: Fix a few typos Obligatory after-push typo.

2016-07-29  Alessio Di Mauro <alessio@yubico.com>

	* Makefile.am, doc/SSH_User_certificates.adoc: Add doc on SSH User
	certificates

2016-07-12  Alessio Di Mauro <alessio@yubico.com>

	* tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: Add SSH export for RSA public key

2016-06-28  Oscar <oscarso@hotmail.com>

	* : Merge pull request #78 from Yubico/oscarso-patch-1 Supplying --key when management key value is longer the default
	value

2016-06-28  Oscar <oscarso@hotmail.com>

	* doc/Windows_certificate.adoc: Update Windows_certificate.adoc

2016-06-28  Oscar <oscarso@hotmail.com>

	* doc/Windows_certificate.adoc: Supplying --key at the generate
	command Supply the management key value during generate key if it has ever
	been modified

2016-06-29  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_PIV_introduction.adoc: fix wording

2016-05-31  Klas Lindfors <klas@yubico.com>

	* doc/Attestation.adoc: use >> when adding to a file

2016-05-31  Klas Lindfors <klas@yubico.com>

	* doc/Attestation.adoc: add text about verifying an attestation

2016-05-24  Klas Lindfors <klas@yubico.com>

	* doc/Attestation.adoc: link and headings

2016-05-24  Klas Lindfors <klas@yubico.com>

	* doc/Attestation.adoc: move extensions used to other attestation
	doc

2016-05-16  Klas Lindfors <klas@yubico.com>

	* NEWS: make NEWS for 1.4.0 clearer

2016-05-09  Klas Lindfors <klali@avm.se>

	* : Merge pull request #75 from mscherer/add_sw_const Replace magic number for status word by constants

2016-05-09  Klas Lindfors <klas@yubico.com>

	* : commit 215fc8d0cfdf7dc1b9f65435f4281138de2ed54d Merge: fc5e153
	6a4608f Author: Klas Lindfors <klali@avm.se> Date:   Mon May 9
	08:59:08 2016 +0200

2016-05-09  Klas Lindfors <klali@avm.se>

	* : Merge pull request #74 from mscherer/fix_constant_name Fix error in the define name YKPIV_INS_GENERATE_ASYMMERTRIC

2016-05-09  Klas Lindfors <klali@avm.se>

	* : Merge pull request #70 from mscherer/add_constant Add YKPIV_ALGO_TAG

2016-05-05  Michael Scherer <misc@zarb.org>

	* lib/ykpiv.c: Use more constant for filling apdu struct.

2016-05-04  Michael Scherer <misc@zarb.org>

	* lib/ykpiv.c, tool/util.c, tool/yubico-piv-tool.c: Fix various
	errors messages

2016-05-05  Michael Scherer <misc@zarb.org>

	* lib/ykpiv.h, tool/yubico-piv-tool.c, ykcs11/token_vendors.c: Fix
	error in the define name YKPIV_INS_GENERATE_ASYMMERTRIC

2016-05-04  Michael Scherer <misc@zarb.org>

	* lib/ykpiv.h, tool/yubico-piv-tool.c, ykcs11/token_vendors.c: Add
	YKPIV_ALGO_TAG Replace the magic constant 0x80 when sending a packet to the key

2016-05-03  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version

2016-05-03  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: release 1.4.0

2016-05-03  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add attest doc to dist

2016-05-03  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: bump openssl to 1.0.2g

2016-05-03  Klas Lindfors <klas@yubico.com>

	* : commit b1139a516b5a2d9e97ac7cbf8a63f0131b4623df Author: Klas
	Lindfors <klas@yubico.com> Date:   Fri Apr 22 09:41:41 2016 +0200

2016-04-19  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_PIV_introduction.adoc: change examples to be with 6
	digit pins

2016-04-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: enforce minimum 6 digits of pin when
	changing in the tool

2016-04-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: error isn't an iso error, run
	ykpiv_strerror() on it

2016-04-19  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore more

2016-04-19  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version

2016-04-19  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.3.1

2016-04-18  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: unblock pin should unblock pin, not change puk

2016-03-31  Klas Lindfors <klas@yubico.com>

	* doc/Attestation.adoc: add some documentation for attestation

2016-03-31  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo: change wording in help text authentication key -> management key

2016-03-23  Klas Lindfors <klas@yubico.com>

	* README, tool/yubico-piv-tool.h2m: clearer text on --help and
	--verbose add example of touch-policy

2016-03-18  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo: clarify --new-key

2016-03-18  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: newer openssl for windows and mac

2016-03-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: add ykpiv touchpolicy to ykpiv

2016-03-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: add YKPIV_KEY_ATTESTATION to
	ykpiv_import_key()

2016-03-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/util.c: add touch-policy
	cached

2016-03-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: actually open output_file in attest()

2016-03-10  Klas Lindfors <klas@yubico.com>

	* : commit d52b8bd3efb179f20b5ee5f3bc36c05a6ec29fc7 Author: Klas
	Lindfors <klas@yubico.com> Date:   Fri Feb 19 12:40:23 2016 +0100

2016-02-19  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version to 1.3.1

2016-02-19  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.3.0

2016-02-15  Klas Lindfors <klas@yubico.com>

	* tool/util.c: make step unsigned in dump_data() since it's muliplied with another unsigned int

2016-02-15  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: Move asking for PKCS12 password outside of
	import_key() also restructure a bit when deciding to do authentication relates #66

2016-02-15  Klas Lindfors <klali@avm.se>

	* : Merge pull request #65 from
	mattmoyer/add-self-signed-cert-options Add options for configuring self-signed certs.

2016-02-12  Matt Moyer <moyer@simple.com>

	* tool/yubico-piv-tool.c: Drop const from these these int
	parameters.

2016-02-10  Matt Moyer <moyer@simple.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: Add a --serial parameter
	to yubico-piv-tool.  Allows the serial number of self signed certificates to be
	configured.

2016-02-10  Matt Moyer <moyer@simple.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: Add a --valid-days
	parameter to yubico-piv-tool.  Allows the expiration date (notAfter) value of self signed
	certificates to be configured.

2016-01-18  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #62 from denisenkom/win-fixes Fix Win64 building problems for ykcs11.

2016-01-11  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c: Typo.

2016-01-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/pkcs11t.h: Whitespace fix.

2016-01-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/pkcs11.h, ykcs11/pkcs11t.h: Addresses #59, ykcs11 still has
	issues on Win64.

2016-01-11  Alessio Di Mauro <alessio@yubico.com>

	* lib/internal.h: Remove unnecessary fields from ykpiv_state.

2015-12-24  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Remove some clutter.

2015-12-24  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Print CCC with status action. Relates to
	#57.

2015-12-21  Klas Lindfors <klas@yubico.com>

	* : Merge remote-tracking branch 'origin/generic_objects'

2015-12-17  Klas Lindfors <klas@yubico.com>

	* tool/tests/test_inout.c: rework inout test to use pipes for
	emulating files

2015-12-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use unsigned long for len

2015-12-17  Klas Lindfors <klas@yubico.com>

	* tool/tests/test_inout.c: don't use tmpfile(), it's broken on
	windows

2015-12-17  Klas Lindfors <klas@yubico.com>

	* .gitignore, tool/tests/Makefile.am, tool/tests/test_inout.c: add a
	simple test case for the dump/read data functions

2015-12-15  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: add libykpiv as a dependency for libpiv_util

2015-12-15  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c, ykcs11/ykcs11.c: 
	remove the util function dump_hex() in favor of dump_data()

2015-12-15  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: add format for read/write object as
	hex/base64/binary relates #31

2015-12-15  Klas Lindfors <klas@yubico.com>

	* tool/util.h: util depends on stdbool

2015-12-15  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: more work on automake dependencies to rebuild
	things correctly relates #53

2015-12-14  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: use top_builddir for relations between dirs

2015-12-14  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: add configure.ac as a dependency of the
	yubico-piv-tool binary since if version number changes it should be rebuilt relates #53

2015-12-14  Klas Lindfors <klas@yubico.com>

	* ykcs11/tests/ykcs11_tests.c, ykcs11/ykcs11.c: change
	multiplication of minor to 10 so we don't overflow possibly temporary fix..

2015-12-14  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac, lib/ykpiv.map: next version will be 1.3.0
	since new interfaces where added also fixup map file to show 1.2.0 correctly

2015-12-14  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: add generic write and
	read object actions for the tool this take in/out hex dump of the data

2015-12-11  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac: Bump LT version.

2015-12-11  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.map: Fixup ykpiv exports and untabify.

2015-12-11  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #51 from denisenkom/misc-bugfixes Implement explicit pin management in libykpiv and expose it through
	C_SetPIN in ykcs11.

2015-12-10  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #50 from denisenkom/misc-bugfixes Fixed extraction of RSA modulus and exponent

2015-12-08  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #49 from Jakuje/master Get rid of warnings about unused functions when running without
	HW_TESTS

2015-12-08  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.2.2

2015-12-08  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: fix an old overflow bug we need to do 8 - new_len, not 16 - new_len which overflows the
	indata buffer

2015-12-08  Jakub Jelen <jjelen@redhat.com>

	* ykcs11/tests/ykcs11_tests.c: Get rid of warnings about unused
	functions when running without HW_TESTS

2015-12-08  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions to 1.2.2

2015-12-08  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.2.1

2015-12-07  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: increase buffer sizes when building the
	status view otherwise data buffer will be to small after loading a big
	certificate

2015-12-07  Klas Lindfors <klas@yubico.com>

	* mac.mk: add cflags for mac build

2015-12-07  Klas Lindfors <klas@yubico.com>

	* windows.mk: change around windows layout, include libssl, drop all
	pkgconfig

2015-12-07  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2015-12-07  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: next version is 1.2.0, also NEWS for it

2015-12-07  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: bump openssl to 1.0.1q for windows and mac
	builds

2015-12-07  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add Android code signing doc for dist

2015-12-07  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: don't overfill the buffer on cert import

2015-12-03  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #46 from denisenkom/getattr-fix Return CKR_ATTRIBUTE_TYPE_INVALID instead of CKR_FUNCTION_FAILED for
	unsupported attributes.

2015-12-03  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.c, ykcs11/ykcs11.c: YKCS11: update cert
	buffer size.

2015-12-03  Alessio Di Mauro <alessio@yubico.com>

	* tool/util.c: YKCS11: allow key generation for retired keys slots.

2015-12-03  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.c: YKCS11: Fix RSA2048 key generation
	template.

2015-12-03  Alessio Di Mauro <a-dma@users.noreply.github.com>

	* : Merge pull request #38 from denisenkom/patch-1 Return CKR_SESSION_READ_ONLY_EXISTS only when trying to log in SO.

2015-12-03  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: difference between CHUID and CCC in
	success message.

2015-12-03  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: add a new action set-ccc change aroudn so set_chuid() becomes set_dataobject() and a bit more
	generic fixes #33

2015-12-01  Mikhail Denisenko <denisenkom@gmail.com>

	* ykcs11/token_vendors.c: Securely dispose of pin copy

2015-12-01  Mikhail Denisenko <denisenkom@gmail.com>

	* ykcs11/token_vendors.c: Fixed bug #39 C_Login fails with CKR_PIN_INCORRECT when pin and pinLen are valid
	but pin is not null terminated

2015-12-01  denisenkom <denisenkom@gmail.com>

	* ykcs11/ykcs11.c: Update ykcs11.c According to PKCS11 spec CKR_SESSION_READ_ONLY_EXISTS should only be
	returned by C_Login when SO user is logging in.  From spec: If the application calling C_Login has a R/O session open
	with the token, then it will be unable to log the SO into a session
	(see [PKCS11-UG] for further details).  An attempt to do this will
	result in the error code CKR_SESSION_READ_ONLY_EXISTS.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: started adding RSA test.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c: More memcpy.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: add more tests.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c: Minor fix.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Minor fix.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: use memcpy.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Fix parameter check in SignInit.

2015-11-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: YKCS11: Return the object handler after importing
	certs/keys.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: started test on key import
	and signatures.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: Test logins.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: Report disabled hw test in the
	logfile of the test.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: Add more to session tests.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: test session.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: test mechanisms.

2015-11-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Typo

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: openjdk -> OpenJDK

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: formatting of blocks

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: wording on list points

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: bind together what should be one
	block

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: shorten very long lines

2015-11-25  Klas Lindfors <klas@yubico.com>

	* doc/Android_code_signing.adoc: add short doc on android code
	signing fixes #20

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: More YKCS11 tests.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: Make ykcs11 functions pointer global
	to all tests.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: Add/fix some prints for tests.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: Whitespace fix.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac, ykcs11/tests/ykcs11_tests.c: Added infrastructure
	for hardware tests.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c: Whitelist retired key IDs.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.h, ykcs11/utils.c, ykcs11/yubico_token.c,
	ykcs11/yubico_token.h: YKCS11: report correct version.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c: Whitespace fix.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/yubico_token.c: Fix some comments.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/yubico_token.c: Add retired keys to Find operations.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: Capitalize.

2015-11-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/yubico_token.c: Add
	retired keys in more places.

2015-11-23  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: Add OIDs for retired keys and rearrange.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c: Start adding retired keys to
	ykcs11.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: Add retired key
	definitions to libykpiv.  Include retired keys in import_key's
	check.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Change behavior of yubico-piv-tool -a
	status.  Status only prints information from populated slots. Additionally,
	it is possible to explicitly choose a single slot and only print
	information reagarding it.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac: Bump libtool version.

2015-11-20  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, tool/yubico-piv-tool.c: raise buffer sizes and remove
	a miss-leading error

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Whitespace cleanup.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: Refactor
	yubico-piv-tool to use import_private_key from libykpiv.

2015-11-20  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c: Remove leftover print.

2015-11-19  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/pkcs11t.h,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/ykcs11.c: 
	Switch ykcs11 to use private key import from libykpiv.

2015-11-19  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: Add import private key to libykpiv.

2015-11-19  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.map: Export ykpiv_import_private_key globally.

2015-11-11  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: Initial work on doing padding internally

2015-11-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: accept EC keys that are 1 byte shorter.

2015-11-19  Klas Lindfors <klali@avm.se>

	* : Merge pull request #36 from akgood/master Use @loader_path rather than @executable_path for OS X dylib paths

2015-11-18  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/yubico-piv-tool.c: add attest
	action

2015-11-18  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/util.c: add f9 slot for
	attestation

2015-11-16  Adam Goodman <akgood@duosecurity.com>

	* mac.mk: YKCS11: On OS X, use @loader_path rather than
	@executable_path for dylib paths

2015-11-16  Klas Lindfors <klas@yubico.com>

	* configure.ac: bump LT_REVISION for version bump

2015-11-14  Alessio Di Mauro <alessio@yubico.com>

	* NEWS, configure.ac: Bump version.  Signed-off-by: Alessio Di Mauro <alessio@yubico.com>

2015-11-13  Alessio Di Mauro <alessio@yubico.com>

	* NEWS: Version 1.1.2.  Signed-off-by: Alessio Di Mauro <alessio@yubico.com>

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Remove debug print.

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c, ykcs11/ykcs11.c: YKCS11: more elaborate solution
	for stripping DER encoding from ECDSA signatures.  It is possible to receive different padding length for r and s,
	where their length is [-1, 1] wrt the component lenght. Take this
	into account.

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/tests/ykcs11_tests.c: YKCS11: Do not call initialize for
	the YKCS11 tests.  If initialize is called, the test requires a YubiKey with a working
	PIV application in order to function.

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* .gitignore, ykcs11/tests/test-suite.log,
	ykcs11/tests/ykcs11_tests.log, ykcs11/tests/ykcs11_tests.trs: Ignore
	more.

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* .gitignore: Ignore more.

2015-11-12  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac, ykcs11/Makefile.am, ykcs11/tests/Makefile.am,
	ykcs11/tests/test-suite.log, ykcs11/tests/ykcs11_tests.c,
	ykcs11/tests/ykcs11_tests.log, ykcs11/tests/ykcs11_tests.trs: 
	YKCS11: add basic tests.  Signed-off-by: Alessio Di Mauro <alessio@yubico.com>

2015-11-11  Alessio Di Mauro <alessio@yubico.com>

	* NEWS, configure.ac: Bump version.

2015-11-11  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: always reset the context to SCARD_INVALID_CONTEXT
	after release

2015-11-10  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c: YKPIV: Make sure that context is established only if
	it is invalid.

2015-11-09  Alessio Di Mauro <alessio@yubico.com>

	* doc/YKCS11_release_notes.adoc: Added reference to PKCS#11 specs in
	the docs.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* NEWS: Reword NEWS file.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* NEWS, configure.ac: Bump version.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* doc/YubiKey_PIV_introduction.adoc: Fix docs.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* Makefile.am: Apparently order matters.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* Makefile.am: Add ykcs11 release notes to automake.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* : commit 94f8d57af94a3bba3c04f37ef0bd0b1e662e3c32 Author: Alessio
	Di Mauro <alessio@yubico.com> Date:   Fri Nov 6 16:10:35 2015 +0100

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: YKCS11: print out signature related data only if
	debug is enabled.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* doc/YKCS11_release_notes.adoc: YKCS11: update docs.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac, ykcs11/debug.h: YKCS11: turn off debug by default
	and make it a configure option (--enable-ykcs11-debug).

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* : commit a8825c99f32860120af9e2d8a6f8100e8fefb974 Author: Alessio
	Di Mauro <alessio@yubico.com> Date:   Fri Nov 6 13:58:46 2015 +0100

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* Makefile.am, README, doc/{Certificate_Authority_with_NEO.adoc =>
	Certificate_Authority.adoc}, doc/OS_X_code_signing.adoc,
	doc/SSH_with_PIV_and_PKCS11.adoc, doc/Windows_certificate.adoc,
	doc/{YubiKey_NEO_PIV_introduction.adoc =>
	YubiKey_PIV_introduction.adoc}, tool/yubico-piv-tool.adoc,
	tool/yubico-piv-tool.h2m: Replace YubiKey NEO with YubiKey.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* README, doc/Certificate_Authority_with_NEO.adoc,
	doc/OS_X_code_signing.adoc, doc/SSH_with_PIV_and_PKCS11.adoc,
	doc/Windows_certificate.adoc,
	doc/YubiKey_NEO_PIV_introduction.adoc, lib/error.c, lib/ykpiv.c,
	tool/yubico-piv-tool.adoc, tool/yubico-piv-tool.c,
	tool/yubico-piv-tool.h2m: Change applet to application.

2015-11-06  Klas Lindfors <klali@avm.se>

	* : Merge pull request #34 from chevah/doc-ssh-pkey-export Update Neo SSH integration guide.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: YKCS11: expose module version.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac: fixup ykcs11-version.h with the correct symbols.

2015-11-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/ykcs11.c, ykcs11/yubico_token.c: 
	YKCS11: remove some warnings.

2015-11-06  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: for travis: set -e later and hope for the
	best..

2015-11-06  Klas Lindfors <klas@yubico.com>

	* : commit 3b4947ed9e57e4da504a0390e5e2d4d392bed91e Author: Klas
	Lindfors <klas@yubico.com> Date:   Fri Nov 6 10:42:48 2015 +0100

2015-11-06  Adi Roiban <adi.roiban@chevah.com>

	* doc/SSH_with_PIV_and_PKCS11.adoc: Update docs.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c: Constify.  Whitespace.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* m4/manywarnings.m4: Drop Wmudflap

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: add check on buffer length.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: initialize more.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h: YKCS11: makde DBG variadic in every case.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: remove more messsages

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/mechanisms.c, ykcs11/objects.c,
	ykcs11/openssl_utils.c, ykcs11/token_vendors.c, ykcs11/ykcs11.c,
	ykcs11/yubico_token.c: YKCS11: Change DBG to print to stderr.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: YKCS11: Remove some useless comments.

2015-11-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: YKCS11: add more precondition checks during
	SingInit.

2015-11-04  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: YKCS11: fix type typo.

2015-11-04  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/pkcs11t.h, ykcs11/token_vendors.c,
	ykcs11/token_vendors.h, ykcs11/ykcs11.c: YKCS11: added certificate
	deletion.

2015-11-02  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c: Initialize context to -1 and always call establish
	context.

2015-10-28  Klas Lindfors <klas@yubico.com>

	* : commit f46a4713bdc742f0619041a0c150920f064d25e7 Merge: aff57db
	f558983 Author: Klas Lindfors <klas@yubico.com> Date:   Wed Oct 28
	16:08:00 2015 +0100

2015-10-28  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: add an error print for failing
	set-pin-retries

2015-10-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.c, ykcs11/ykcs11.c, ykcs11/yubico_token.c: 
	YKCS11: Suppress some warnings.

2015-10-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.c: Indent.

2015-10-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/token_vendors.c,
	ykcs11/token_vendors.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: YKCS11:
	added support for touch and PIN policy during generate.

2015-10-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/pkcs11t.h, ykcs11/token_vendors.c, ykcs11/token_vendors.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h: Added support for touch and change
	policy during key import.

2015-10-23  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h: 
	YKCS11: Added raw certificate extraction.

2015-10-23  Klas Lindfors <klas@yubico.com>

	* ykcs11/Makefile.am: export functions for mac correctly C_ matches what we should export for pkcs11

2015-10-20  Klas Lindfors <klas@yubico.com>

	* : commit 066ea79211c0dfbdf05719c35235d17583b6fde7 Author: Klas
	Lindfors <klas@yubico.com> Date:   Thu Oct 15 09:20:42 2015 +0200

2015-10-09  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: read key from stdin if
	no key is given as argument

2015-10-09  Klas Lindfors <klas@yubico.com>

	* lib/tests/Makefile.am, tool/tests/Makefile.am: actually run
	valgrind for the tests

2015-10-07  Klas Lindfors <klas@yubico.com>

	* .travis.yml, build-and-test.sh, mac.mk: try travis for osx

2015-10-01  Klas Lindfors <klas@yubico.com>

	* NEWS: bump version in NEWS

2015-10-01  Klas Lindfors <klas@yubico.com>

	* configure.ac: bump version

2015-10-01  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.0.3

2015-09-28  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: use 261 byte buffer for receive

2015-09-24  Alessio Di Mauro <alessio@yubico.com>

	* tool/yubico-piv-tool.c: Mask more one pin change.

2015-09-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/ykcs11.c: 
	Move login into common functions.

2015-09-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Fix return value check on parse_readers.

2015-09-18  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use in, not signinput to actually sign
	anything in the ecc case

2015-09-17  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/vendors.c, ykcs11/ykcs11.c: Minor
	fixes.

2015-09-17  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c: Export more info for EC keys too.

2015-09-17  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h: 
	Export more public key parameters.

2015-09-16  Klas Lindfors <klas@yubico.com>

	* configure.ac: Output a no if nothing is found on windows/mac check

2015-09-16  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: unblock-pin shouldn't tell you new puk

2015-09-16  Klas Lindfors <klas@yubico.com>

	* configure.ac: don't auto-select windows backend on else less confusing to fall through, also better message for no pcsc
	library found

2015-09-11  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add ykcs11 to cppcheck

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/yubico_token.c: Fix some warnings.

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/token_vendors.h, ykcs11/utils.c, ykcs11/utils.h,
	ykcs11/ykcs11.c, ykcs11/yubico_token.c, ykcs11/yubico_token.h: Add
	parsing of model number.

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/slot_vendors.c, ykcs11/slot_vendors.h,
	ykcs11/yubico_slot.c, ykcs11/yubico_slot.h: Remove get slot
	description and use the reader string from pcsclite.

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c, ykcs11/ykcs11.c: Imporve support for multiple
	readers/cards.

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/token_vendors.c: Minor cleanups.

2015-09-09  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Free more.

2015-09-08  Alessio Di Mauro <alessio@yubico.com>

	* : commit 99ebfdf37c218e6426438d0ac131ea77440e5a26 Author: Alessio
	Di Mauro <alessio@yubico.com> Date:   Tue Sep 8 18:00:48 2015 +0200

2015-09-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.map: remove ykpiv_sign_data2() from map

2015-09-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, tool/yubico-piv-tool.c, ykcs11/ykcs11.c: drop
	ykpiv_sign_data2() and change ykpiv_sign_data() to not pad

2015-09-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: let ykpiv_connect() call ykpiv_list_readers()

2015-09-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/cmdline.ggo,
	tool/yubico-piv-tool.c, ykcs11/ykcs11.c: add list-readers action to
	tool also refactor ykpiv_list_readers() a bit

2015-09-07  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, ykcs11/ykcs11.c: drop
	ykpiv_connect2() and add ykpiv_list_readers()

2015-09-07  Klas Lindfors <klas@yubico.com>

	* : commit 8c411f4473d337f1669fe5f1b1e01d21a17bfb5f Author: Klas
	Lindfors <klas@yubico.com> Date:   Mon Sep 7 14:33:26 2015 +0200

2015-09-07  Klas Lindfors <klas@yubico.com>

	* : commit 1b8d819cc2c3638c81c4c9239f2d44e4eca22c8f Author: Klas
	Lindfors <klas@yubico.com> Date:   Fri Sep 4 09:22:32 2015 +0200

2015-09-04  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.0.2

2015-09-02  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c: More cleanup.

2015-09-02  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/token_vendors.c: Fixed typo.

2015-09-01  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/openssl_utils.c,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/ykcs11.c: 
	Added key import.

2015-08-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/token_vendors.c,
	ykcs11/token_vendors.h, ykcs11/ykcs11.c: Initial stab at private key
	import.

2015-08-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/ykcs11.c: 
	Added certificate import

2015-08-26  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Squalch more warnings.

2015-08-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c: Remove some warnings.

2015-08-25  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/ykcs11.c: Add of
	DigestInit.

2015-08-26  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c: Fixed x509 certificate created during
	generation to comply with OpenSSL 1.0.1i more strict rules.

2015-08-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c: Strip DER
	encoding from EC signatures.

2015-08-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Use longer buffer to store the signature.

2015-08-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/pkcs11t.h, ykcs11/yubico_token.c: Add
	support for ECDSA_SHA256.

2015-08-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: authentication failed is supposed to be 0x63cX not
	0x630X so mask everything but the low 4 bits for remaining tries

2015-08-21  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: More debug messages.

2015-08-21  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Temporary fix for multiple logins.

2015-08-21  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Add debug messages for failed login.

2015-08-21  Alessio Di Mauro <alessio@yubico.com>

	* configure.ac, ykcs11/Makefile.am, ykcs11/pkcs11t.h,
	ykcs11/slot_vendors.c: Removed nspr stuff.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Close the operation after sign is done.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: More debug messages and precondition checks.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/token_vendors.h, ykcs11/ykcs11.c,
	ykcs11/yubico_token.c, ykcs11/yubico_token.h: Use buffer length
	while storing cert.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: More debug messages and precondition checks.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Skip PIN initialization.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Skip token initialization.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/ykcs11.c: Add more precondition checks and
	debug messages.

2015-08-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c: Fixed PSS (still untested).

2015-08-21  Klas Lindfors <klas@yubico.com>

	* mac.mk: add mac install_name_tool fixes for ykcs11 build

2015-08-21  Klas Lindfors <klas@yubico.com>

	* ykcs11/Makefile.am: fixup filenames and add missing headers

2015-08-21  Klas Lindfors <klas@yubico.com>

	* ykcs11/ykcs11-version.h, ykcs11/ykcs11.pc: drop generated files

2015-08-20  Klas Lindfors <klas@yubico.com>

	* : commit 81f3b608fd6d3de2e03eb006dfe88fd45383a24a Author: Klas
	Lindfors <klas@yubico.com> Date:   Thu Aug 20 09:25:18 2015 +0200

2015-08-19  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c: Removed unnecessary line.

2015-08-19  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c: Fixed RSA_X_509 padding.

2015-08-19  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/ykcs11.c: Fixed unhashed sign
	mechanisms.

2015-08-19  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h: 
	More free.

2015-08-13  Klas Lindfors <klali@avm.se>

	* : Merge pull request #26 from syzzer/query-for-pin Query for PIN/PUK/mgmt-key if not supplied on command line

2015-08-12  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/openssl_utils.c, ykcs11/ykcs11.c: Fixed wrong free.

2015-08-12  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Added simple logout function.

2015-08-12  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, ykcs11/debug.h, ykcs11/mechanisms.c,
	ykcs11/openssl_utils.c, ykcs11/ykcs11.c: Fixed pkcs1.5 padding

2015-08-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Update object in the session (when the object
	wasn't there to begin with).

2015-08-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/objects.c, ykcs11/openssl_utils.c,
	ykcs11/token_vendors.c, ykcs11/ykcs11.c: Update object in the
	session after key creation (if object already exists).

2015-08-11  Alessio Di Mauro <alessio@yubico.com>

	* tool/util.c, tool/util.h, ykcs11/debug.h, ykcs11/openssl_utils.c,
	ykcs11/token_vendors.c: Added certificate import on key generation.

2015-08-11  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/mechanisms.c, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/pkcs11t.h, ykcs11/token_vendors.c,
	ykcs11/utils.c, ykcs11/utils.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: 
	Added EC key generation.

2015-08-10  Klas Lindfors <klas@yubico.com>

	* BLURB: drop BLURB (not used)

2015-08-07  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/debug.h, ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/token_vendors.c,
	ykcs11/token_vendors.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h,
	ykcs11/yubico_token.c: First stab at key generation.

2015-08-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/debug.h, ykcs11/mechanisms.c,
	ykcs11/objects.c, ykcs11/objects.h, ykcs11/openssl_utils.c,
	ykcs11/utils.c, ykcs11/ykcs11.c, ykcs11/yubico_token.c: Moved debug
	capabilities to its own file.  Fixed EC point replresentation.

2015-08-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/ykcs11.c: Added more attribute
	extraction for objects.

2015-08-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/ykcs11.c: Fixed
	object attribute matching.  Added ECDSA.

2015-08-05  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/obj_types.h,
	ykcs11/objects.c, ykcs11/openssl_types.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h,
	ykcs11/yubico_token.c: Added PSS (first stab).

2015-08-04  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/openssl_types.h, ykcs11/openssl_utils.c,
	ykcs11/openssl_utils.h, ykcs11/ykcs11.c, ykcs11/ykcs11.h: Added more
	signature infrestructure.

2015-08-03  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, ykcs11/mechanisms.c,
	ykcs11/mechanisms.h, ykcs11/openssl_utils.c, ykcs11/ykcs11.c: Added
	sign_data2 to libykpiv to disable padding.

2015-08-03  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/objects.h, ykcs11/ykcs11.c: Hiding
	private objects if user is not logged in.

2015-08-03  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/ykcs11.c: Added object matching.

2015-07-31  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/pkcs11t.h, ykcs11/ykcs11.c: Improvement on sign and object
	handling.

2015-07-30  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/openssl_utils.c, ykcs11/openssl_utils.h,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/utils.c,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h, ykcs11/yubico_token.c,
	ykcs11/yubico_token.h: First crude signature implementation plus
	additional refactor.

2015-07-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c: Start to do some crypto.

2015-07-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/mechanisms.c, ykcs11/mechanisms.h,
	ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/objects.h,
	ykcs11/token_vendors.h, ykcs11/utils.c, ykcs11/utils.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h, ykcs11/yubico_token.c: Yet another
	refactor of objects.

2015-07-28  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/slot_vendors.c, ykcs11/slot_vendors.h,
	ykcs11/token_vendors.c, ykcs11/token_vendors.h, ykcs11/utils.c,
	ykcs11/vendor_ids.h, ykcs11/vendors.c, ykcs11/vendors.h,
	ykcs11/ykcs11.c, ykcs11/yubico_slot.c, ykcs11/yubico_slot.h,
	ykcs11/{yubico.c => yubico_token.c}, ykcs11/{yubico.h =>
	yubico_token.h}: Separated slot vendors and token vendors.

2015-07-27  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/mechanisms.c, ykcs11/mechanisms.h, ykcs11/utils.c,
	ykcs11/utils.h, ykcs11/vendors.c, ykcs11/vendors.h,
	ykcs11/ykcs11.c, ykcs11/ykcs11.h, ykcs11/ykcs11.map,
	ykcs11/yubico.c, ykcs11/yubico.h: Started major overhaul of slot
	vendors and token vendors.

2015-07-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Some improvements on sign.

2015-07-24  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/vendors.c,
	ykcs11/vendors.h, ykcs11/ykcs11.c, ykcs11/yubico.c, ykcs11/yubico.h: 
	Refactor more.

2015-07-22  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/objects.c, ykcs11/ykcs11.c: Refined get attribute value.

2015-07-21  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/obj_types.h, ykcs11/objects.c, ykcs11/pkcs11t.h,
	ykcs11/ykcs11.c, ykcs11/yubico.c: More object handling.

2015-07-20  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/Makefile.am, ykcs11/obj_types.h, ykcs11/objects.c,
	ykcs11/objects.h, ykcs11/pkcs11t.h, ykcs11/utils.h,
	ykcs11/vendors.c, ykcs11/vendors.h, ykcs11/ykcs11.c,
	ykcs11/yubico.c, ykcs11/yubico.h: Initial work to add object
	handling.

2015-07-16  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c, ykcs11/vendors.c, ykcs11/vendors.h,
	ykcs11/ykcs11.c, ykcs11/yubico.c, ykcs11/yubico.h: Added mechanisms
	handling.

2015-07-16  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/pkcs11t.h, ykcs11/utils.c, ykcs11/vendors.c,
	ykcs11/vendors.h, ykcs11/ykcs11.c, ykcs11/yubico.c, ykcs11/yubico.h: 
	More refactoring.

2015-07-15  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: More work on login.

2015-07-15  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Added basic session handling.

2015-07-15  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/utils.c, ykcs11/utils.h: Added utils files.

2015-07-15  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Changed tokenless to with_token.

2015-07-14  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.h, ykcs11/pkcs11t.h, ykcs11/ykcs11.c: Added basic
	version of login.

2015-07-14  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Handle token presence in slots.

2015-07-14  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, ykcs11/Makefile.am,
	ykcs11/vendors.c, ykcs11/vendors.h, ykcs11/ykcs11.c,
	ykcs11/yubico.c, ykcs11/yubico.h: Major refactor and vendor
	abstraction.

2015-07-10  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2015-07-10  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.0.1

2015-07-09  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop unused variable found with clang scan-build

2015-07-09  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: check result from get_length() found with clang scan-build

2015-07-09  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: avoid copying data to NULL pointer found by clang scan-build

2015-07-09  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: don't do memcpy with NULL argument found with clang scan-build

2015-07-09  Klas Lindfors <klas@yubico.com>

	* windows.mk: strip away unneeded stuff from the windows openssl
	build

2015-07-09  Klas Lindfors <klas@yubico.com>

	* mac.mk: add openssl to mac build since the openssl bundled with mac is old and deprecated we build
	our own instead

2015-07-08  Klas Lindfors <klas@yubico.com>

	* : commit fe0fd7b774114dd4b50970c2a2133b19075de246 Author: Klas
	Lindfors <klas@yubico.com> Date:   Wed Jul 8 14:51:45 2015 +0200

2015-07-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.pc.in: add Requires.private on libcrypto

2015-07-07  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Fix debug message.

2015-07-07  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/ykcs11.c: Add a bunch of TODOs.

2015-07-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/pkcs11f.h, ykcs11/ykcs11.c: GetInfo.

2015-07-06  Alessio Di Mauro <alessio@yubico.com>

	* ykcs11/pkcs11t.h, ykcs11/vendors.c, ykcs11/vendors.h,
	ykcs11/ykcs11.c, ykcs11/yubico.c, ykcs11/yubico.h: More
	GetTokenInfo.

2015-07-03  Alessio Di Mauro <alessio@yubico.com>

	* lib/ykpiv.c, ykcs11/Makefile.am, ykcs11/vendors.c,
	ykcs11/vendors.h, ykcs11/ykcs11.c, ykcs11/yubico.c, ykcs11/yubico.h: 
	Added basic multivendor support for token information.

2015-07-03  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.adoc: remove extra \

2015-07-03  Klas Lindfors <klas@yubico.com>

	* Makefile.am, tool/{yubico-piv-tool.h2a => yubico-piv-tool.adoc}: 
	name include file .adoc instead

2015-07-03  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.h2a: use asciidoc comments for comments in
	asciidoc file

2015-07-03  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for yk4beta

2015-07-01  Klas Lindfors <klas@yubico.com>

	* COPYING, Makefile.am, README, configure.ac, lib/Makefile.am,
	lib/error.c, lib/internal.h, lib/tests/Makefile.am,
	lib/tests/basic.c, lib/tests/parse_key.c, lib/version.c,
	lib/ykpiv-version.h.in, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	mac.mk, tool/Makefile.am, tool/cmdline.ggo, tool/tests/Makefile.am,
	tool/tests/basic.sh, tool/tests/parse_name.c, tool/util.c,
	tool/util.h, tool/yubico-piv-tool.c, tool/yubico-piv-tool.h2a,
	tool/yubico-piv-tool.h2m, tools/fasc.pl, windows.mk: relicense to
	2-clause BSD license

2015-07-01  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac: add help2adoc processing on release

2015-07-01  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.h2a: add include file for help2adoc

2015-06-30  Alessio Di Mauro <alessio@yubico.com>

	* lib/internal.h, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	ykcs11/Makefile.am, ykcs11/ykcs11.c: Added basic version of slot
	info functions.

2015-06-30  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo: move around texts for help

2015-06-30  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: change IS_XXKEY
	macros to be YKPIV_IS_XX

2015-06-26  Alessio Di Mauro <alessio@yubico.com>

	* .gitignore, Makefile.am, configure.ac, ykcs11/Makefile.am,
	ykcs11/pkcs11.h, ykcs11/pkcs11f.h, ykcs11/pkcs11t.h,
	ykcs11/version.c, ykcs11/ykcs11-version.h,
	ykcs11/ykcs11-version.h.in, ykcs11/ykcs11.c, ykcs11/ykcs11.map,
	ykcs11/ykcs11.pc, ykcs11/ykcs11.pc.in: Initial commit for ykcs11.

2015-06-26  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: fix indentation

2015-06-26  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: move padding for signing to ykpiv_sign_data() and only pad if in_len != key_len

2015-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: better errors for fail on pin-policy and
	touch-policy

2015-06-25  Klas Lindfors <klas@yubico.com>

	* configure.ac, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/cmdline.ggo, tool/yubico-piv-tool.c: add touch for set-mgm-key

2015-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: add touch tlv for generate and import-key

2015-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: pin policy code for generate and import-key

2015-06-24  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: better errors for generate on
	non-supported algorithm or slot

2015-06-23  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/cmdline.ggo, tool/util.c: add support for
	retired key objects slots 82-95

2015-06-24  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use IS_RSAKEY and IS_ECKEY macros, fix
	minor stuff for ECCP384

2015-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: add macros for IS_ECKEY and IS_RSAKEY,
	also fix tag on ECCP384

2015-05-27  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-tool.c: add sha384 hash and refactor some common
	patterns

2015-05-27  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/cmdline.ggo, tool/util.c,
	tool/yubico-piv-tool.c: start adding secp384r1

2015-06-23  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl version for windows build

2015-06-23  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2015-06-23  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 1.0.0

2015-06-23  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: mark upcoming version as 1.0.0 fixes #22

2015-06-23  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: verify that e is 0x10001 on import fixes #13

2015-05-25  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: drop --repo-token for coveralls

2015-05-25  Henrik Strth <minisu@users.noreply.github.com>

	* doc/YubiKey_NEO_PIV_introduction.adoc: Added yubikey-piv-manager
	to software list

2015-05-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: let RSA_public_encrypt() do the PKCS1
	padding noteworthy is that it will do pkcs1 type 2 padding

2015-05-19  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, tool/cmdline.ggo,
	tool/yubico-piv-tool.c: add a test-decipher command test-decipher will for rsa do public encrypt on a random string and
	let the key decrypt for ec it will generate a new ec key and do ecdh
	and confirm it gets the same answer back

2015-05-18  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: drop verbose prints from library for ykpiv_verify() they're in tool as well.

2015-05-08  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: add newline at end of output

2015-05-08  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: use a transation while sending and receiving data

2015-04-09  Klas Lindfors <klas@yubico.com>

	* doc/Certificate_Authority_with_NEO.adoc: add more extensions for
	certificates in doc

2015-04-07  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_NEO_PIV_introduction.adoc: mgm-key not needed for
	change-pin and change-puk

2015-03-23  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version

2015-03-23  Klas Lindfors <klas@yubico.com>

	* NEWS: release 0.1.6

2015-03-20  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop openssl/err.h again

2015-03-20  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: replace
	EVP_MD_CTX_verify() stuff with RSA_verify()/ECDSA_verify() since the EVP_MD_CTX stuff doesn't seem to exist on osx at all.

2015-03-20  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.6

2015-03-18  Klas Lindfors <klas@yubico.com>

	* README, tool/cmdline.ggo, tool/yubico-piv-tool.c,
	tool/yubico-piv-tool.h2m: add a test-signature action that takes a certificate in and does a signature with the given
	slot, then verifying that signature with the given certificate.

2015-03-20  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl version

2015-03-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: add missing } that's why you should always build before push..

2015-03-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: move up validation of pin-retries
	parameters

2015-03-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: move more validation of parameters
	together

2015-03-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: write version to output file

2015-03-19  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: call get_algorithm() to get the algorithm as it was already implemented..

2015-03-19  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_NEO_PIV_introduction.adoc: give a better link for PIV
	standards

2015-03-19  Klas Lindfors <klas@yubico.com>

	* README: mention version of gengetopt required

2015-03-18  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: refactor
	dump_hex to drop some redundant code

2015-03-18  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: make parts of argument validation cleaner

2015-03-18  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: write action name instead of number

2015-03-18  Klas Lindfors <klas@yubico.com>

	* README: space to fix formatting

2015-03-18  Klas Lindfors <klas@yubico.com>

	* README: add status to README relates #17

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: break out after error

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: print out slot/cert algorithm in status relates #17

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: write CHUID in status relates #17

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: write out number of pin tries left references #17

2015-03-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: verify with NULL pin now reports tries without
	decrementing

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: add status action and
	print certificate information relates #17

2015-03-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: don't try to parse returned data if it was an error

2015-03-17  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c: add a read-certificate
	action

2015-03-05  Simon Josefsson <simon@josefsson.org>

	* README: Slight word tweak.

2015-02-20  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add fasc.pl to the distribution

2015-02-19  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_NEO_PIV_introduction.adoc: add that pin has to be
	verified for reset retry counters

2015-02-04  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2015-02-04  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.5

2015-02-04  Klas Lindfors <klas@yubico.com>

	* doc/YubiKey_NEO_PIV_introduction.adoc: use same format for default
	key as other keys

2015-02-04  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: set parity bits for weak check instead of enforcing
	them rework of dca651070d9e6e326dedcf77ac76c33e4ef7a8b6

2015-02-03  Klas Lindfors <klas@yubico.com>

	* lib/tests/parse_key.c: add a negative test for the hex decode

2015-02-02  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions after release

2015-02-02  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.4

2015-02-02  Klas Lindfors <klas@yubico.com>

	* lib/tests/parse_key.c: add a test with uppercase hex

2015-02-02  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl version

2015-02-02  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: make sure we try to decode uppercase hex

2015-02-02  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: use DES_set_key_checked() instead of
	DES_is_weak_key() since DES_set_key_checked() checks the parity as well

2015-02-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: report error if setting a new key fails

2015-02-02  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: calculate offsets properly

2015-02-02  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, tool/yubico-piv-tool.c: return error properly on hex
	decode

2015-01-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use bounded scanf

2015-01-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop unnecessary memset()

2015-01-29  Klas Lindfors <klas@yubico.com>

	* lib/version.c: reduce scope of variables

2015-01-29  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: move parantheses to make check clearer

2015-01-29  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac: add cppcheck rule

2015-01-20  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore coverage artifacts

2015-01-20  Klas Lindfors <klas@yubico.com>

	* .travis.yml, build-and-test.sh, configure.ac: run coverage for
	travis

2015-01-20  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac, lib/Makefile.am, tool/Makefile.am,
	tool/tests/Makefile.am: add --enable-coverage for lcov

2015-01-19  Klas Lindfors <klali@avm.se>

	* : Merge pull request #14 from westfeld/fixed_unblock_pin_response Fixed error when parameters in unblock-pin

2015-01-14  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: mark all bits of the signature as used the first byte of a bit string marks how many bits should be
	subtracted, make sure this doesn't get set.

2015-01-12  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: rip
	input_ready() and call isatty() instead should be more portable (work on windows) relates to #12

2015-01-12  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: try to discover
	if there is input waiting on stdin otherwise give the user a hint resolves #12

2015-01-08  Simon Josefsson <simon@josefsson.org>

	* tool/yubico-piv-tool.h2m: Fix markup.

2015-01-08  Simon Josefsson <simon@josefsson.org>

	* tool/yubico-piv-tool.c: Fix typo.

2015-01-08  Klas Lindfors <klas@yubico.com>

	* mac.mk: add a check for mac linking being correct relates to #10

2015-01-08  Klas Lindfors <klas@yubico.com>

	* mac.mk: fix mac makefile

2015-01-08  Klas Lindfors <klas@yubico.com>

	* configure.ac: fixup libtool versions

2014-12-18  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2014-12-18  Klas Lindfors <klas@yubico.com>

	* NEWS: news for 0.1.3

2014-12-18  Klas Lindfors <klas@yubico.com>

	* configure.ac: correctly bump versions

2014-12-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: add more feedback for successful actions

2014-12-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: diagnostic output for generate key

2014-12-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: switch diagnostic output to stderr

2014-12-17  Klas Lindfors <klas@yubico.com>

	* doc/OS_X_code_signing.adoc: s/codesigning/code signing/g

2014-12-09  Klas Lindfors <klas@yubico.com>

	* configure.ac, lib/tests/Makefile.am, m4/valgrind-tests.m4,
	tool/tests/Makefile.am: add valgrind for tests

2014-12-09  Klas Lindfors <klas@yubico.com>

	* doc/SSH_with_PIV_and_PKCS11.adoc: text about ssh-agent support

2014-12-09  Klas Lindfors <klas@yubico.com>

	* Makefile.am, doc/SSH_with_PIV_and_PKCS11.adoc: add instructions
	for SSH with PIV

2014-12-09  Klas Lindfors <klas@yubico.com>

	* Makefile.am: doc files changed names.

2014-12-09  Henrik Strth <minisu@users.noreply.github.com>

	* README: Update README

2014-12-09  Henrik Strth <henrik@yubico.com>

	* doc/{CertificateAuthorityWithNEO.txt =>
	Certificate_Authority_with_NEO.adoc}, doc/{OS-X-Codesigning.txt =>
	OS_X_code_signing.adoc}, doc/{Windows-Certificate.txt =>
	Windows_certificate.adoc}, doc/{YubiKey-NEO-PIV-Introduction.txt =>
	YubiKey_NEO_PIV_introduction.adoc}: Renamed doc files to snake case.

2014-12-05  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add new doc to EXTRA_DIST

2014-12-05  Klas Lindfors <klas@yubico.com>

	* doc/OS-X-Codesigning.txt: more text

2014-12-05  Klas Lindfors <klas@yubico.com>

	* doc/OS-X-Codesigning.txt: add some text about how to use for
	codesigning on OS X

2014-12-05  Klas Lindfors <klas@yubico.com>

	* tool/cmdline.ggo, tool/util.h, tool/yubico-piv-tool.c: add DER
	format for certificate import

2014-11-14  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions after release

2014-11-14  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.2

2014-11-12  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: check length of
	private key components before setting the card functions only accepts key components of correct size so
	here we add 0 before if they're shorter (usually one byte shorter)
	thus fixing the issue where the card returned 6f00

2014-11-10  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions after release

2014-11-10  Klas Lindfors <klas@yubico.com>

	* Makefile.am: dist the docs, and check that all docs are included

2014-11-10  Klas Lindfors <klas@yubico.com>

	* doc/{Windows-Certificate.asciidoc => Windows-Certificate.txt}: 
	move to .txt for consistency

2014-11-10  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.1

2014-11-10  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: cast cert_len to size_t shouldn't be
	negative here.  gets rid of warnings about int/size_t combinations

2014-11-10  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: check that stat completes correctly

2014-11-10  Klas Lindfors <klas@yubico.com>

	* : commit 7e0fdd8f9d01dce6e09f914b34fa38f06cedf847 Author: Klas
	Lindfors <klas@yubico.com> Date:   Mon Nov 10 09:49:54 2014 +0100

2014-11-07  David Woodhouse <David.Woodhouse@intel.com>

	* tool/cmdline.ggo, tool/yubico-piv-tool.c,
	tool/yubico-piv-tool.h2m: Add support for compressed certificates This could be more sophisticated — it could automatically compress
	certificates if they are too large, instead of expecting the user to
	do so manually. But this is a good start.

2014-10-30  Klas Lindfors <klas@yubico.com>

	* windows.mk: newer openssl, install fewer things and use curl

2014-10-30  Klas Lindfors <klas@yubico.com>

	* configure.ac, lib/Makefile.am: don't use AC_LIB_HAVE_LINKFLAGS it seems to be from gnulib or such, not always available fixes #7

2014-10-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: fix broken unblock-pin action the unblock pin action misstakenly used pin reference 0x81 (unblock)
	instead of 0x80 (pin)

2014-10-28  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: add an error message for wrong key length

2014-10-27  Daniel Barnes <nasonfish@nasonfish.com>

	* tool/yubico-piv-tool.c: Check if new keys being set are the
	correct length, since longer or shorter keys yield inconsistant
	results

2014-10-07  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: Fix.

2014-10-07  Simon Josefsson <simon@josefsson.org>

	* : commit b16dce294d6f8624228c61af0480b2d276418b6a Author: Klas
	Lindfors <klas@yubico.com> Date:   Thu Oct 2 13:28:02 2014 +0200

2014-10-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: give errors when sign fails

2014-10-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: a bit of verbosity for authentication
	needs

2014-10-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: don't change the action_arg pointer, add
	to it in place instead this effectively reverses 931d224485ad197ba4ef85b76777ea96cf3471e2

2014-10-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor to let request-cert and
	selfsign-cert use different hashes namely sha1 and sha512 as well with sha256 as default

2014-10-02  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use temporary args_info for parsing if
	auth is needed

2014-10-02  Klas Lindfors <klas@yubico.com>

	* .gitignore, tool/Makefile.am, tool/cmdline-signer.ggo,
	tool/cmdline.ggo, tool/yubico-piv-signer.c, tool/yubico-piv-tool.c: 
	move the signer into the standard tool as a hidden option to discourage use

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: mark basic constraints as
	critical

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: key usages

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* : commit 675839362a62319a8ab226917a1416271cd54b3f Author: Simon
	Josefsson <simon@josefsson.org> Date:   Wed Oct 1 14:45:00 2014
	+0200

2014-10-01  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: only authenticate with the applet if
	needed

2014-09-30  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.h2m: drop \n in man file, gives warnings

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: Fix.

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: Typo.

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/CertificateAuthorityWithNEO.txt: Add.

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/YubiKey-NEO-PIV-Introduction.txt: Fix.

2014-10-01  Simon Josefsson <simon@josefsson.org>

	* doc/YubiKey-NEO-PIV-Introduction.txt: Add.

2014-09-29  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: add the length of the padding when checking RSA
	length

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-signer.c: better error message

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-signer.c: add a success message for signer

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-signer.c: check the return value of the signing
	operation

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/cmdline-signer.ggo, tool/yubico-piv-signer.c: add SHA512 for
	signing

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: add cmdline-signer to sources properly

2014-09-29  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-signer.c: for rsa let it sign a correct DigestInfo
	structure which has to have the digest OID, with a NULL parameter and then the
	hash.

2014-09-26  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-signer.c: let the signer sign

2014-09-26  Klas Lindfors <klas@yubico.com>

	* tool/cmdline-signer.ggo, tool/util.c, tool/util.h,
	tool/yubico-piv-signer.c, tool/yubico-piv-tool.c: start implementing
	signer

2014-09-26  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore

2014-09-26  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am, tool/cmdline-signer.ggo,
	tool/yubico-piv-signer.c: start on yubico-piv-signer

2014-09-26  Klas Lindfors <klas@yubico.com>

	* tool/util.h: make util.h header more self-contained

2014-09-11  Klas Lindfors <klas@yubico.com>

	* mac.mk: fix mac build

2014-08-26  Klas Lindfors <klas@yubico.com>

	* tool/tests/Makefile.am: use PACKAGE_VERSION to obtain version
	instead seems to work more reliably?

2014-08-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: set the signature algorithm again in the
	cert

2014-08-25  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions after release

2014-08-25  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS for 0.1.0 release

2014-08-25  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl version and add -static-libgcc for
	openssl compile

2014-06-27  Klas Lindfors <klas@yubico.com>

	* lib/tests/parse_key.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/yubico-piv-tool.c: replace ykpiv_parse_key() with
	ykpiv_hex_decode()

2014-06-27  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: temp fix for ykpiv_parse_key() it should be removed and replaced by a real hex encoder.

2014-06-26  Klas Lindfors <klas@yubico.com>

	* Makefile.am: fix EXTRA_DIST

2014-06-26  Klas Lindfors <klas@yubico.com>

	* : commit c5c06c3c036b69eab8d60f7aa667075efeb5a557 Author: Klas
	Lindfors <klas@yubico.com> Date:   Wed Jun 18 10:29:22 2014 +0200

2014-06-26  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: let set_object set tag as well, not only lv

2014-06-26  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, tool/yubico-piv-tool.c: refactor delete action to use
	ykpiv_save_object()

2014-06-26  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor set_chuid() to use
	ykpiv_save_object()

2014-06-26  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, tool/yubico-piv-tool.c: 
	refactor writing object to it's own library function ykpiv_save_object(), use that for writing certs

2014-06-26  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: refactor to let send_data take an APDU* for data

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: let set_length take a size_t

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: add openssl/rsa.h for ykpiv.c

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: rename ykpiv_send_data() to send_data() since it's
	local

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/util.h: drop apdu structure from tool

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop unused code from delete_cert

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: refactor so
	ykpiv_sign_data() takes size_t input

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map: stop exporting
	ykpiv_send_data()

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor change_pin() to use
	ykpiv_transfer_data()

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor to ykpiv_transfer_data() for
	chuid setting

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor pin-retries to use
	ykpiv_transfer_data()

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: refactor reset to use
	ykpiv_transfer_data() instead

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: refactor transfer data so it can send 0 bytes

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, tool/util.c, tool/util.h: make get_length() take a
	const buffer

2014-06-25  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: set version on the selfsigned cert

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/error.c: add error messages

2014-06-25  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: change around
	and let ykpiv_sign_data() pad

2014-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: 3f ff for object

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/tests/parse_name.c: some negative tests of parse_name()

2014-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c: only return the actual data in ykpiv_fetch_data()

2014-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: rework some
	stuff to size_t

2014-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map: add ykpiv_fetch_object()
	to library

2014-06-24  Simon Josefsson <simon@josefsson.org>

	* doc/YubiKey-NEO-PIV-Introduction.txt: Fix.

2014-06-24  Simon Josefsson <simon@josefsson.org>

	* doc/YubiKey-NEO-PIV-Introduction.txt: Add.

2014-06-24  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/util.c: add macros for piv objects

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: fix indentation

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h, tool/yubico-piv-tool.c: let util.h
	include cmdline.h since it's using declarations from it..

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: link the util lib with openssl

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/tests/parse_name.c: constify

2014-06-24  Klas Lindfors <klas@yubico.com>

	* .gitignore, tool/tests/Makefile.am, tool/tests/parse_name.c: test
	for parse_name()

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/util.c, tool/util.h: let parse_name() take a const char*
	instead

2014-06-24  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am, tool/util.c, tool/{internal.h => util.h},
	tool/yubico-piv-tool.c: change internal.h to util.h

2014-06-24  Klas Lindfors <klas@yubico.com>

	* .gitignore, Makefile.am, configure.ac, lib/Makefile.am, {tests =>
	lib/tests}/Makefile.am, {tests => lib/tests}/basic.c, {tests =>
	lib/tests}/parse_key.c: move lib tests under lib

2014-06-24  Klas Lindfors <klas@yubico.com>

	* .gitignore, configure.ac, tests/Makefile.am, tool/Makefile.am,
	tool/tests/Makefile.am, {tests => tool/tests}/basic.sh: move
	basic.sh test to subdir of tool

2014-06-24  Klas Lindfors <klas@yubico.com>

	* .gitignore, tool/Makefile.am, tool/internal.h, tool/util.c,
	tool/yubico-piv-tool.c: split out util functions from
	yubico-piv-tool.c

2014-06-23  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, tool/yubico-piv-tool.c: 
	add ykpiv_verify to the library

2014-06-18  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h, tool/yubico-piv-tool.c: make constants for more
	instructions

2014-06-18  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: use constants for algorithm ids

2014-06-18  Klas Lindfors <klas@yubico.com>

	* NEWS: set version correctly in NEWS

2014-06-18  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl version for windows

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map, tool/yubico-piv-tool.c: 
	add ykpiv_get_version()  function

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/Makefile.am, lib/error.c, lib/ykpiv.c, lib/ykpiv.h,
	lib/ykpiv.map, tool/yubico-piv-tool.c: move sign_data() function to
	library

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: include windows.h on windows

2014-06-17  Klas Lindfors <klas@yubico.com>

	* .gitignore, tool/Makefile.am: make a small temp library to avoid
	warnings on ggo file

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: no EXTRA_DIST in tool

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map: add ykpiv_disconnect()

2014-06-17  Klas Lindfors <klas@yubico.com>

	* .gitignore, tests/Makefile.am, tests/basic.c, tests/parse_key.c: 
	some tests for the library

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.h: include ykpiv-version.h in ykpiv.h

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/yubico-piv-tool.c: add ykpiv_parse_key()

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/yubico-piv-tool.c: add ykpiv_set_mgmkey()

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: make constants for algorithms, keys and
	instructions

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h: more constness

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/internal.h, lib/ykpiv.c: move apdu structure to internal.h

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/yubico-piv-tool.c: move authenticate to library as
	ykpiv_authenticate()

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: let
	the ykpiv_connect() function select as well

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am, tool/yubico-piv-tool.c: drop direct PCSC
	dependency for the tool

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: call ykpiv_done() before exiting

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop verbose parameter to alot of
	functions since it's stored in state now

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tool/yubico-piv-tool.c: drop the connect_reader() function

2014-06-17  Klas Lindfors <klas@yubico.com>

	* lib/ykpiv.c, lib/ykpiv.h, tool/yubico-piv-tool.c: get rid of the
	YKPIV_APDU_* macros transport the starting 4 bytes as an array instead

2014-06-17  Klas Lindfors <klas@yubico.com>

	* tests/basic.sh: fix the test with new directory structure

2014-06-16  Klas Lindfors <klas@yubico.com>

	* lib/error.c, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	tool/yubico-piv-tool.c: break out connect and send data to the
	library exporting ykpiv_connect() ykpiv_send_data() ykpiv_transfer_data()

2014-06-16  Klas Lindfors <klas@yubico.com>

	* .gitignore, configure.ac, lib/Makefile.am, lib/error.c,
	lib/internal.h, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map: start
	moving code to the library, and add error codes

2014-06-16  Klas Lindfors <klas@yubico.com>

	* lib/Makefile.am, lib/internal.h, lib/ykpiv.c, lib/ykpiv.h,
	lib/ykpiv.map: start library structure

2014-06-16  Klas Lindfors <klas@yubico.com>

	* configure.ac: bump version properly with librarisation

2014-06-16  Klas Lindfors <klas@yubico.com>

	* configure.ac, tool/Makefile.am: let configure.ac try to find
	gengetopt

2014-06-16  Klas Lindfors <klas@yubico.com>

	* tool/Makefile.am: let the tool link with the library

2014-06-16  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore more

2014-06-16  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac, lib/Makefile.am, lib/version.c,
	lib/ykpiv-version.h.in, lib/ykpiv.c, lib/ykpiv.h, lib/ykpiv.map,
	lib/ykpiv.pc.in, m4/ld-version-script.m4: start of the ykpiv library

2014-06-16  Klas Lindfors <klas@yubico.com>

	* .gitignore, Makefile.am, configure.ac, tool/Makefile.am,
	cmdline.ggo => tool/cmdline.ggo, yubico-piv-tool.c =>
	tool/yubico-piv-tool.c, yubico-piv-tool.h2m =>
	tool/yubico-piv-tool.h2m: move the cli stuff to subdir tool

2014-05-28  Klas Lindfors <klas@yubico.com>

	* README, yubico-piv-tool.h2m: add an example of using
	delete-certificate

2014-05-26  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump version after release to 0.0.4

2014-05-26  Klas Lindfors <klas@yubico.com>

	* windows.mk: bump openssl to 1.0.1g

2014-05-26  Klas Lindfors <klas@yubico.com>

	* README: fix typo

2014-05-26  Klas Lindfors <klas@yubico.com>

	* NEWS: news for 0.0.3

2014-05-16  Klas Lindfors <klas@yubico.com>

	* README, yubico-piv-tool.h2m: add note about just
	import-certificate to help texts

2014-05-16  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add a delete-certificate action resolves #2

2014-04-07  Klas Lindfors <klas@yubico.com>

	* tools/fasc.pl: drop unused, commented code

2014-04-02  Klas Lindfors <klas@yubico.com>

	* doc/Windows-Certificate.asciidoc: break line in right place

2014-04-02  Klas Lindfors <klas@yubico.com>

	* doc/Windows-Certificate.asciidoc: short documentation on how to
	request a cert from a Windows CA

2014-04-01  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: don't continue processing if we failed an
	action

2014-03-11  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: change functions around to have failure as
	default mode

2014-03-11  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: fix null dereferences reported by coverity's free scanner

2014-02-19  Klas Lindfors <klas@yubico.com>

	* Makefile.am: fixup release target

2014-02-19  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2014-02-14  Klas Lindfors <klas@yubico.com>

	* BLURB: add Travis link to BLURB

2014-02-14  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: actually do the full mutual auth with a
	challenge from the host

2014-02-13  Klas Lindfors <klas@yubico.com>

	* Makefile.am, yubico-piv-tool.h2m: add examples to the manpage and will remove from the README when we figure out how to publish
	manpages like these properly.

2014-02-13  Klas Lindfors <klas@yubico.com>

	* README: spelling: publick -> public

2014-02-13  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: correct GUID offset GUID was set one byte off resulting in invalid message

2014-02-12  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: return at the end of main() and call
	EVP_cleanup() before

2014-02-11  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: make sure to initialize num_readers before
	using.

2014-02-11  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: simplify selfsign and request, some stuff is
	already allocated.

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: gnulib shouldn't be needed explicitly

2014-02-11  Klas Lindfors <klas@yubico.com>

	* windows.mk: try to specify CC for windows build

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: change around to try to get windows-build to work

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: and in precise the package is namned mingw-w64-dev

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: try to add mingw-dev package

2014-02-11  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: rework build-and-test for windows cheat with tar instead of running make dist

2014-02-11  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: cheat by touching the man-page before make dist since the binary doesn't exist yet.

2014-02-11  Klas Lindfors <klas@yubico.com>

	* build-and-test.sh: check for arch instead

2014-02-11  Klas Lindfors <klas@yubico.com>

	* tests/Makefile.am: use TESTS_ENVIRONMENT instead of
	AM_TESTS_ENVIRONMENT since automake 1.11 (shipped with precise) doesn't support
	AM_TESTS_ENVIRONMENT

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: more packages required

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml: libpcslite -> libpcsclite

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .travis.yml, build-and-test.sh: add travis stuff

2014-02-11  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore more release artifacts

2014-02-11  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: upload target for mac and windows

2014-02-11  Klas Lindfors <klas@yubico.com>

	* NEWS, configure.ac: bump versions

2014-02-11  Klas Lindfors <klas@yubico.com>

	* Makefile.am: fix release target

2014-02-11  Klas Lindfors <klas@yubico.com>

	* NEWS: NEWS file (marked as 0.0.1 release)

2014-02-10  Klas Lindfors <klas@yubico.com>

	* BLURB: add BLURB

2014-02-10  Klas Lindfors <klas@yubico.com>

	* Makefile.am: add tests/basic.sh to EXTRA_DIST

2014-02-10  Klas Lindfors <klas@yubico.com>

	* mac.mk, windows.mk: CHECK=check for windows and mac

2014-02-10  Klas Lindfors <klas@yubico.com>

	* tests/Makefile.am, tests/basic.sh, windows.mk: windows fixes for
	selftest

2014-02-10  Klas Lindfors <klas@yubico.com>

	* .gitignore, Makefile.am, configure.ac, tests/Makefile.am,
	tests/basic.sh: add a very simple selftest

2014-02-10  Klas Lindfors <klas@yubico.com>

	* Makefile.am, cmdline.ggo: remove details and put them as text

2014-02-10  Klas Lindfors <klas@yubico.com>

	* configure.ac: print more build options

2014-02-10  Klas Lindfors <klas@yubico.com>

	* README: example for selfsigned cert

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: use sign_data() from request_certificate()

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: break out signing from selfsign to it's own
	function

2014-02-10  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add a selfsign-certificate action

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: move opening files to it's own function

2014-02-10  Klas Lindfors <klas@yubico.com>

	* README: README text

2014-02-10  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo: more text on key slots

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: text

2014-02-10  Klas Lindfors <klas@yubico.com>

	* Makefile.am, mac.mk: add mac.mk for binary mac builds

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: properly dereference pointer before assigning

2014-02-10  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: re-encode fasc

2014-02-10  Klas Lindfors <klas@yubico.com>

	* tools/fasc.pl: explaining comments and small change-around

2014-02-09  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: make sure to zero-out apdu before use

2014-02-09  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: more text about pin-retries

2014-02-09  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: refactor import_key() to use transfer_data()
	instead of own chaining.

2014-02-09  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: let import_cert() use transfer_data() instead
	of own chaining

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: better error messages for verify pin

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: successfull -> successful

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: drop verbose print of digest

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: setup the ec pub key properly when doing
	generate key

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: switch to sha256 for cert requests and fix for
	ec csr

2014-02-08  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add unblock-pin action and more
	text and checks to change-

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: make sure to set ret to false before goto

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: properly initialize memory to 0

2014-02-08  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: check the new key before setting it

2014-02-07  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo: more help on actions

2014-02-07  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement change-pin

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: let generate use chaining with transfer_data()

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: break out looped sending from request-cert to
	own function

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: fix bug with continued data in request cert

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: drop debug prints

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: correct certificate length text

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: remove usage of strtok_r so it builds on
	windows again

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: reorder includes so openssl includes fix
	X509_NAME on windows

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: some support for ecc key import

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: refactor send_len to calculate the send_len
	internally

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: fix warnings and variable names

2014-02-07  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: add some code for ecc CSR

2014-02-07  Klas Lindfors <klas@yubico.com>

	* Makefile.am, cmdline.ggo: more help for subject, and generate man
	page from detailed-help

2014-02-07  Klas Lindfors <klas@yubico.com>

	* : commit 4b64a5c800d6e3c01a6202831db2d7bd0bf55b24 Author: Klas
	Lindfors <klas@yubico.com> Date:   Fri Feb 7 10:52:56 2014 +0100

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: more work on request, try to sign digest

2014-02-06  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add a verify-pin action (needed
	for signing request)

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: refactor so we get algorithm from a function.

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: open output for writing..

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: more work on request

2014-02-06  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: start on request certificate
	action

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: print verbose information about found key

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: print sizes in a more stable fashion

2014-02-06  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: don't print password instead remind the user the password might be wrong.

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: remove debug prints.

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: rework get_length() and fix bug(s)

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: more text

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: use sizeof(aid) instead of constant

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: chuid comments..

2014-02-05  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add code for setting CHUID

2014-02-05  Klas Lindfors <klas@yubico.com>

	* tools/fasc.pl: small tool to build the fasc

2014-02-05  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: change around and let send_data() take a
	pointer to APDU

2014-02-05  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore more

2014-02-05  Klas Lindfors <klas@yubico.com>

	* .gitignore, build-aux/config.rpath: add a config.rpath

2014-02-05  Klas Lindfors <klas@yubico.com>

	* windows.mk: add a windows.mk

2014-02-04  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac, yubico-piv-tool.c: pcsc for platforms
	fixes

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add password for private keys

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add certificate import

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: use switch-case for action args

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo: fix help

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo: set default reader to Yubikey

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: drop ec.h

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: handle generation of ecc keys

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: correct C style comment

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: more error info

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: proper output of public key after generate

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: TODO

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: a bit more messages

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: make action a multi-val

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: PKCS12 support for import

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement import-key action

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement set pin retries

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement reset instruction

2014-02-04  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: rework verbose prints

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: make -v take a numeric value

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add action to set management key

2014-02-04  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo: 9b is not available as a slot generally

2014-02-03  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement algorithms for generate

2014-02-03  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: multiple fetch for public key.

2014-02-03  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: implement generate

2014-02-03  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: add action for what to do

2014-02-03  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: get rid of openssl warnings

2014-02-03  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: print version

2014-02-03  Klas Lindfors <klas@yubico.com>

	* Makefile.am, configure.ac, yubico-piv-tool.c: implement
	authenticate

2014-02-03  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: parse authentication key

2014-02-03  Klas Lindfors <klas@yubico.com>

	* cmdline.ggo, yubico-piv-tool.c: some working code for selecting
	applet

2014-02-03  Klas Lindfors <klas@yubico.com>

	* Makefile.am, yubico-piv-tool.c: drop indent rule and re-indent

2014-02-03  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore more

2014-02-03  Klas Lindfors <klas@yubico.com>

	* yubico-piv-tool.c: various stuff

2014-02-03  Klas Lindfors <klas@yubico.com>

	* .gitignore: ignore

2014-02-03  Klas Lindfors <klas@yubico.com>

	* COPYING, Makefile.am, cmdline.ggo, configure.ac,
	m4/manywarnings.m4, m4/pkg.m4, m4/warnings.m4, yubico-piv-tool.c: 
	basic structure

2014-02-03  Klas Lindfors <klas@yubico.com>

	* Initial commit

