Skip to content

v0.9.0
Compare
Choose a tag to compare
@arekinath arekinath released this 06 Sep 01:02
· 152 commits to main since this release
v0.9.0
eeb985f

New features:

  • Support for building with LibreSSL 3.5.2 / OpenSSL 3.x
  • pivy-tool can parse and display the PIV Printed Info object, as well as new info from the CHUID file (FASC-N etc)
  • pivy-tool req-cert and pivy-tool write-cert commands
  • Finer control over the certificates generated by pivy-tool using -D and -T, and support for KRB5 PKINIT SANs

Bugs fixed:

  • pivy-agent is now strict about device disconnection time before it drops a cached PIN
  • pivy-zfs rekey is now panic-safe
  • Incorrectly generated length tags (used longer encoding than necessary) in some PIV objects are now correct
  • pivy-box now strips off --Begin-- and --End-- noise on challenges when pasted on stdin

Also note that the -src tarball on the Releases page now contains LibreSSL and OpenSSH already downloaded and extracted, so you can do self-contained builds from it.

Assets 8
Loading