Skip to content
Fetching contributors…
Cannot retrieve contributors at this time
195 lines (114 sloc) 5.73 KB
Yubikey-c-client NEWS -- History of user-visible changes. -*- outline -*-
* Version 2.16 (unreleased)
* Version 2.15 (released 2015-11-12)
** Add ykclient_get_server_response() to the library.
** Show more information from the commandline on debug.
** Add proxy support via Curl.
* Version 2.14 (released 2015-03-05)
** Switch default templates to https.
** Fixup call to curl_easy_escape() to use a easy handle.
* Version 2.13 (released 2014-09-12)
** libykclient: Skip responses where the curl status isn't CURLE_OK.
** libykclient: Add forgotten prototype for ykclient_set_ca_info.
* Version 2.12 (released 2013-10-18)
** Use pkg-config to find curl, instead of libcurl.m4.
** ykclient: Added --cai parameter to specify GnuTLS-compatible CA Info.
** libykclient: Added ykclient_set_ca_info function.
Used when curl is linked with GnuTLS, used to set CA Info.
** libykclient: Added ykclient_set_url_bases function.
Uses a more reasonable/extensible URL string syntax. The old
ykclient_set_url_templates is hereby deprecated.
** Added shared library versioning script.
** Valgrind is used for selftests.
* Version 2.11 (released 2013-07-24)
** Fix breakage with latest automake.
* Version 2.10 (released 2013-05-15)
** Add ykclient_global_init and ykclient_global_done.
** Add ykclient_version.h header file with versioning information.
New symbols are YKCLIENT_VERSION_STRING, YKCLIENT_VERSION_NUMBER,
YKCLIENT_VERSION_MAJOR, YKCLIENT_VERSION_MINOR,
YKCLIENT_VERSION_PATCH. New function ykclient_check_version.
** Modified API to use 'ykclient_rc' enum as return type instead of 'int'.
** Enum also moved to separate new header file ykclient_errors.h.
This should be backwards compatible. It makes the return type
clearer. From Arran Cudbard-Bell <a.cudbardb@freeradius.org>.
** Improve curl multi usage.
From Arran Cudbard-Bell <a.cudbardb@freeradius.org>.
** ykclient: Cleanup command line tool a bit to make it more useful.
Added --help, --version and --debug. Defaults to silent output. Exit
codes are documented and more useful. Added manpage.
* Version 2.9 (released 2012-08-07)
** Compability with curl versions before 7.20.
** Fix signature checking on ARM (at least).
* Version 2.8 (released 2012-06-15)
** ykclient: Add C++ namespace protection.
** Add multi-server support with curl_multi.
Enabled by default for YubiCloud servers.
Settable with the new library function set_template_urls() or
the urls parameter to ykclient_verify_otp_v2().
** Remove extra % in ykclient help.
** Add ca path option to ykclient, --ca.
Patch from Jay Kline <jay.kline.ctr@hpcmo.hpc.mil>.
** Make the nonce unique for consecutive calls to the same ykclient handle.
** Do url encoding of OTP before sending.
** Fix segfault on curl error.
Patch from Lee Hinman <lee.hinman.ctr@hpc.mil>
* Version 2.7 (released 2011-11-23)
** Verify server signatures per default when a key is provided. The old
behavior can be restored with ykclient_set_verify_signature (ykc, 0);
Reported by Dominic Rutherford <dominic@rutherfordfamily.co.uk>.
** Return YKCLIENT_BAD_SERVER_SIGNATURE on missing signature.
* Version 2.6 (released 2011-06-06)
** Use fprintf+exit instead of glibc-ism errx.
Reported by Jussi Sallinen <jussi@jus.si>.
** Indent code and replace // comments with /* */ comments (for C89).
** Fix dates of releases for 2.4 and 2.5 below (2011 not 2010).
* Version 2.5 (released 2011-05-31)
** Implement almost all of Validation protocol 2.0.
The part still known to be missing is parallell querys to all validation
servers using curl-multi. Includes significant patches by
Sebastien Martini <seb@dbzteam.org> and qistoph@gmail.com.
* Version 2.4 (released 2011-03-02)
** Add possibility to supply validation service URL.
Patch by Remi Mollon <remi.mollon@cern.ch>.
** Make Validation protocol 2.0 servers not reject our requests.
They would reject our requests because they did not have a nonce
parameter. Patch by Remi Mollon <remi.mollon@cern.ch>.
** Add new API ykclient_set_ca_path to set a trusted CA certificates path.
** Fix issue with insecure rpath in the ykclient executable.
** Documentation converted to asciidoc after move to Github.
* Version 2.3 (released 2009-05-11)
** Add new API ykclient_set_client_b64 to set client key in b64 format.
** Fix memory leaks.
** Fix usage when sending multiple requests.
* Version 2.2 (released 2009-03-31)
** Add new API ykclient_set_client_hex to set client key in hex format.
** Change API ykclient_verify_otp to take a hex key rather than a binary one.
** Improved instructions in README on how to build the package.
* Version 2.1 (released 2009-03-25)
** Add new API ykclient_get_last_url, mostly for debugging purposes.
** Create signatures on requests.
* Version 2.0 (released 2009-03-25)
** Major rewrite of library.
The library changed name from libyubikey-client.* to libykclient.* and
the header file changed from libykclient.h to ykclient.h. All
interfaces were also renamed, see ykclient.h.
* Version 1.5 (released 2009-01-13)
** Add libtool -export-symbols-regex to restrict exported symbols.
** Avoid use of asprintf, to make it work under Solaris too.
** Fix memory leaks.
* Version 1.4 (released 2008-09-15)
** Added include paths to make aclocal find libcurl.m4.
Thanks to Oden Eriksson <oeriksson@mandriva.com>.
* Version 1.3 (released 2008-09-15)
** ykclient: Add new API yubikey_client_set_url_template.
Allows setting a private server to query.
* Version 1.2 (released 2008-07-24)
** ykclient: Set exit code as per OTP verification result.
Inspired by discussion in
<http://forum.yubico.com/viewtopic.php?f=3&t=89>.
** Install libykclient.h.
* Version 1.1 (released 2008-06-25)
** Install libykclient.h in $prefix.
* Version 1.0 (released 2008-06-17)
** Initial release, code from yubico-pam.
Something went wrong with that request. Please try again.