-
Notifications
You must be signed in to change notification settings - Fork 66
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
b47e87f
commit 0a24402
Showing
2 changed files
with
29 additions
and
11 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,5 +1,18 @@ | ||
== Release Notes | ||
|
||
=== 2024.09b | ||
|
||
==== Content: | ||
|
||
* yubihsm-shell 2.6.0 | ||
* yubihsm-connector 3.0.5 | ||
* yubihsm-setup 2.3.2 | ||
* yubihsm-ksp 2.6.0 | ||
|
||
==== Improvements: | ||
|
||
* Repackaging of yubihsm-setup MSI installer | ||
|
||
=== 2024.09 | ||
|
||
==== Content: | ||
|
@@ -42,7 +55,8 @@ | |
|
||
==== Improvements: | ||
|
||
* Rename yubihsm-shell installer file in the Windows release package. No binaries are effected. | ||
* Rename yubihsm-shell installer file in the Windows release package. | ||
No binaries are effected. | ||
|
||
=== 2023.11 | ||
|
||
|
@@ -107,7 +121,8 @@ | |
* PKCS11: Improve handling of attributes | ||
* PKCS11: Improve debug output | ||
* PKCS11: Improve error handling | ||
* PKCS11: Change in firmware/hardware version representation. The version as reported by C_GetSlotInfo and C_GetTokenInfo will now show minor*10+patch, instead of minor*100+patch | ||
* PKCS11: Change in firmware/hardware version representation. | ||
The version as reported by C_GetSlotInfo and C_GetTokenInfo will now show minor*10+patch, instead of minor*100+patch | ||
* Build: Dependency updates | ||
* Connector: Add changelog | ||
* Connector: Minor code improvements | ||
|
@@ -249,18 +264,15 @@ | |
* Shell: Honor the PEM format when returning a certificate | ||
* Shell: Add support for special (national) characters | ||
* Test: Improve testing | ||
* Deployment Guides: Change in YubiHSM2 Windows Deployment Guide to set the YubiHSM connector service (yhconsrv) as a | ||
dependency for the ADCS service (certsvc) to prevent it from starting before the YubiHSM connector service and thus | ||
causing the ADCS service to fail. See https://developers.yubico.com/YubiHSM2/Usage_Guides/YubiHSM_2_Windows_Deployment_Guide--Configure_YubiHSM_2_Key_Storage_Provider_for_Microsoft_Windows_Server/Install_the_YubiHSM_Tools_and_Software.html[YubiHSM2 Windows Deployment Guide]. | ||
* Deployment Guides: Change in YubiHSM2 Windows Deployment Guide to set the YubiHSM connector service (yhconsrv) as a dependency for the ADCS service (certsvc) to prevent it from starting before the YubiHSM connector service and thus causing the ADCS service to fail. | ||
See https://developers.yubico.com/YubiHSM2/Usage_Guides/YubiHSM_2_Windows_Deployment_Guide--Configure_YubiHSM_2_Key_Storage_Provider_for_Microsoft_Windows_Server/Install_the_YubiHSM_Tools_and_Software.html[YubiHSM2 Windows Deployment Guide]. | ||
|
||
=== 2019.12 | ||
|
||
==== Bugs Fixed: | ||
|
||
* Shell: Fix Wrapping and public key PEM formatting of ED25519 keys | ||
* Shell: Add filtering of non-printable characters to prevent terminal control characters embedded in a label from | ||
being used to compromise a user using a vulnerable terminal as in CVE-2019-9535. Reported by | ||
Julian Biehl <[email protected]> of the CISPA Helmholtz Center for Information Security. | ||
* Shell: Add filtering of non-printable characters to prevent terminal control characters embedded in a label from being used to compromise a user using a vulnerable terminal as in CVE-2019-9535. Reported by Julian Biehl <[email protected]> of the CISPA Helmholtz Center for Information Security. | ||
|
||
==== Other Improvements: | ||
|
||
|
@@ -274,7 +286,8 @@ Julian Biehl <[email protected]> of the CISPA Helmholtz Center for Informatio | |
* Library: Allow disabling link time optimization. | ||
* Library: Fixes and improvements to build, work and test on FreeBSD. | ||
* Library: Ensure closing the USB connection before destroying it | ||
* Connector: Drop gb dependency manager and move to Go modules and google/gousb. The minimum required version of golang is 1.11.x | ||
* Connector: Drop gb dependency manager and move to Go modules and google/gousb. | ||
The minimum required version of golang is 1.11.x | ||
* Connector: Update dependencies | ||
|
||
=== 2019.03 | ||
|
@@ -312,7 +325,7 @@ Julian Biehl <[email protected]> of the CISPA Helmholtz Center for Informatio | |
* Library: Add a feature to derive an authentication key from a password | ||
* Library: Add a feature to change an authentication key | ||
* Pkcs11: Added support for C_DeriveKey() | ||
* Shell: Change keepalive command to a toggle (on/off) | ||
* Shell: Change keepalive command to a toggle (on/off) | ||
* Tests: Add support for running tests using direct USB connection | ||
* Documentation: Drop documentation from the code base and moved the content to Yubico's developers website (https://developers.yubico.com/YubiHSM2/) | ||
* All: Re-organization of file structure | ||
|
@@ -361,7 +374,8 @@ Julian Biehl <[email protected]> of the CISPA Helmholtz Center for Informatio | |
* Pkcs11: Accept C_SetAttributeValue() for CKA_ID and CKA_LABEL if unchanged | ||
* Shell: Implement decrypt-ecdh in non-interactive mode | ||
* Connector: On Windows use internal USB libraries instead of libusb | ||
* Connector: Implement Host header allow listing (Use to prevent DNS rebinding attacks in applicable environments, e.g., if there is an absolute need to use a web browser on the host where the Yubihsm2 is installed to connect to untrusted web sites on the Internet. This is not a recommended practice.) | ||
* Connector: Implement Host header allow listing (Use to prevent DNS rebinding attacks in applicable environments, e.g., if there is an absolute need to use a web browser on the host where the Yubihsm2 is installed to connect to untrusted web sites on the Internet. | ||
This is not a recommended practice.) | ||
|
||
=== 1.0.1 | ||
|
||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters