File: NEWS

package info (click to toggle)
ykclient 2.15-2
  • links: PTS, VCS
  • area: main
  • in suites: bullseye, buster, sid
  • size: 1,768 kB
  • sloc: sh: 11,547; ansic: 3,702; makefile: 102
file content (192 lines) | stat: -rw-r--r-- 5,835 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
Yubikey-c-client NEWS -- History of user-visible changes.      -*- outline -*-

* Version 2.15 (released 2015-11-12)

** Add ykclient_get_server_response() to the library.

** Show more information from the commandline on debug.

** Add proxy support via Curl.

* Version 2.14 (released 2015-03-05)

** Switch default templates to https.

** Fixup call to curl_easy_escape() to use a easy handle.

* Version 2.13 (released 2014-09-12)

** libykclient: Skip responses where the curl status isn't CURLE_OK.

** libykclient: Add forgotten prototype for ykclient_set_ca_info.

* Version 2.12 (released 2013-10-18)

** Use pkg-config to find curl, instead of libcurl.m4.

** ykclient: Added --cai parameter to specify GnuTLS-compatible CA Info.

** libykclient: Added ykclient_set_ca_info function.
Used when curl is linked with GnuTLS, used to set CA Info.

** libykclient: Added ykclient_set_url_bases function.
Uses a more reasonable/extensible URL string syntax.  The old
ykclient_set_url_templates is hereby deprecated.

** Added shared library versioning script.

** Valgrind is used for selftests.

* Version 2.11 (released 2013-07-24)

** Fix breakage with latest automake.

* Version 2.10 (released 2013-05-15)

** Add ykclient_global_init and ykclient_global_done.

** Add ykclient_version.h header file with versioning information.
New symbols are YKCLIENT_VERSION_STRING, YKCLIENT_VERSION_NUMBER,
YKCLIENT_VERSION_MAJOR, YKCLIENT_VERSION_MINOR,
YKCLIENT_VERSION_PATCH.  New function ykclient_check_version.

** Modified API to use 'ykclient_rc' enum as return type instead of 'int'.
** Enum also moved to separate new header file ykclient_errors.h.
This should be backwards compatible.  It makes the return type
clearer.  From Arran Cudbard-Bell <a.cudbardb@freeradius.org>.

** Improve curl multi usage.
From Arran Cudbard-Bell <a.cudbardb@freeradius.org>.

** ykclient: Cleanup command line tool a bit to make it more useful.
Added --help, --version and --debug.  Defaults to silent output.  Exit
codes are documented and more useful.  Added manpage.

* Version 2.9 (released 2012-08-07)

** Compability with curl versions before 7.20.

** Fix signature checking on ARM (at least).

* Version 2.8 (released 2012-06-15)

** ykclient: Add C++ namespace protection.

** Add multi-server support with curl_multi.
   Enabled by default for YubiCloud servers.
   Settable with the new library function set_template_urls() or
   the urls parameter to ykclient_verify_otp_v2().

** Remove extra % in ykclient help.

** Add ca path option to ykclient, --ca.
   Patch from Jay Kline <jay.kline.ctr@hpcmo.hpc.mil>.

** Make the nonce unique for consecutive calls to the same ykclient handle.

** Do url encoding of OTP before sending.

** Fix segfault on curl error.
   Patch from Lee Hinman <lee.hinman.ctr@hpc.mil>

* Version 2.7 (released 2011-11-23)

** Verify server signatures per default when a key is provided. The old
behavior can be restored with ykclient_set_verify_signature (ykc, 0);
Reported by Dominic Rutherford <dominic@rutherfordfamily.co.uk>.

** Return YKCLIENT_BAD_SERVER_SIGNATURE on missing signature.

* Version 2.6 (released 2011-06-06)

** Use fprintf+exit instead of glibc-ism errx.
Reported by Jussi Sallinen <jussi@jus.si>.

** Indent code and replace // comments with /* */ comments (for C89).

** Fix dates of releases for 2.4 and 2.5 below (2011 not 2010).

* Version 2.5 (released 2011-05-31)

** Implement almost all of Validation protocol 2.0.
The part still known to be missing is parallell querys to all validation
servers using curl-multi. Includes significant patches by
Sebastien Martini <seb@dbzteam.org> and qistoph@gmail.com.

* Version 2.4 (released 2011-03-02)

** Add possibility to supply validation service URL.
Patch by Remi Mollon <remi.mollon@cern.ch>.

** Make Validation protocol 2.0 servers not reject our requests.
They would reject our requests because they did not have a nonce
parameter. Patch by Remi Mollon <remi.mollon@cern.ch>.

** Add new API ykclient_set_ca_path to set a trusted CA certificates path.

** Fix issue with insecure rpath in the ykclient executable.

** Documentation converted to asciidoc after move to Github.

* Version 2.3 (released 2009-05-11)

** Add new API ykclient_set_client_b64 to set client key in b64 format.

** Fix memory leaks.

** Fix usage when sending multiple requests.

* Version 2.2 (released 2009-03-31)

** Add new API ykclient_set_client_hex to set client key in hex format.

** Change API ykclient_verify_otp to take a hex key rather than a binary one.

** Improved instructions in README on how to build the package.

* Version 2.1 (released 2009-03-25)

** Add new API ykclient_get_last_url, mostly for debugging purposes.

** Create signatures on requests.

* Version 2.0 (released 2009-03-25)

** Major rewrite of library.
The library changed name from libyubikey-client.* to libykclient.* and
the header file changed from libykclient.h to ykclient.h.  All
interfaces were also renamed, see ykclient.h.

* Version 1.5 (released 2009-01-13)

** Add libtool -export-symbols-regex to restrict exported symbols.

** Avoid use of asprintf, to make it work under Solaris too.

** Fix memory leaks.

* Version 1.4 (released 2008-09-15)

** Added include paths to make aclocal find libcurl.m4.
Thanks to Oden Eriksson <oeriksson@mandriva.com>.

* Version 1.3 (released 2008-09-15)

** ykclient: Add new API yubikey_client_set_url_template.
Allows setting a private server to query.

* Version 1.2 (released 2008-07-24)

** ykclient: Set exit code as per OTP verification result.
Inspired by discussion in
<http://forum.yubico.com/viewtopic.php?f=3&t=89>.

** Install libykclient.h.

* Version 1.1 (released 2008-06-25)

** Install libykclient.h in $prefix.

* Version 1.0 (released 2008-06-17)

** Initial release, code from yubico-pam.