Release Notes

Add ykclient_get_server_response() to the library.

Show more information from the commandline on debug.

Add proxy support via Curl.

Switch default templates to https.

Fixup call to curl_easy_escape() to use a easy handle.

libykclient: Skip responses where the curl status isn’t CURLE_OK.

libykclient: Add forgotten prototype for ykclient_set_ca_info.

Use pkg-config to find curl, instead of libcurl.m4.

ykclient: Added --cai parameter to specify GnuTLS-compatible CA Info.

libykclient: Added ykclient_set_ca_info function. Used when curl is linked with GnuTLS, used to set CA Info.

libykclient: Added ykclient_set_url_bases function. Uses a more reasonable/extensible URL string syntax. The old ykclient_set_url_templates is hereby deprecated.

Added shared library versioning script.

Valgrind is used for selftests.

Fix breakage with latest automake.

Add ykclient_global_init and ykclient_global_done.

Add ykclient_version.h header file with versioning information. New symbols are YKCLIENT_VERSION_STRING, YKCLIENT_VERSION_NUMBER, YKCLIENT_VERSION_MAJOR, YKCLIENT_VERSION_MINOR, YKCLIENT_VERSION_PATCH. New function ykclient_check_version.

Modified API to use ykclient_rc enum as return type instead of int.

Enum also moved to separate new header file ykclient_errors.h. This should be backwards compatible. It makes the return type clearer. From Arran Cudbard-Bell <a.cudbardb@freeradius.org>.

Improve curl multi usage. From Arran Cudbard-Bell <a.cudbardb@freeradius.org>.

ykclient: Cleanup command line tool a bit to make it more useful. Added --help, --version and --debug. Defaults to silent output. Exit codes are documented and more useful. Added manpage.

Compability with curl versions before 7.20.

Fix signature checking on ARM (at least).

ykclient: Add C++ namespace protection.

Add multi-server support with curl_multi. Enabled by default for YubiCloud servers. Settable with the new library function set_template_urls() or the urls parameter to ykclient_verify_otp_v2().

Remove extra % in ykclient help.

Add ca path option to ykclient, --ca. Patch from Jay Kline <jay.kline.ctr@hpcmo.hpc.mil>.

Make the nonce unique for consecutive calls to the same ykclient handle.

Do url encoding of OTP before sending.

Fix segfault on curl error. Patch from Lee Hinman <lee.hinman.ctr@hpc.mil>

Verify server signatures per default when a key is provided. The old behavior can be restored with ykclient_set_verify_signature (ykc, 0); Reported by Dominic Rutherford <dominic@rutherfordfamily.co.uk>.

Return YKCLIENT_BAD_SERVER_SIGNATURE on missing signature.

Use fprintf+exit instead of glibc-ism errx. Reported by Jussi Sallinen <jussi@jus.si>.

Indent code and replace // comments with /* */ comments (for C89).

Fix dates of releases for 2.4 and 2.5 below (2011 not 2010).

Implement almost all of Validation protocol 2.0. The part still known to be missing is parallell querys to all validation servers using curl-multi. Includes significant patches by Sebastien Martini <seb@dbzteam.org> and qistoph@gmail.com.

Add possibility to supply validation service URL. Patch by Remi Mollon <remi.mollon@cern.ch>.

Make Validation protocol 2.0 servers not reject our requests. They would reject our requests because they did not have a nonce parameter. Patch by Remi Mollon <remi.mollon@cern.ch>.

Add new API ykclient_set_ca_path to set a trusted CA certificates path.

Fix issue with insecure rpath in the ykclient executable.

Documentation converted to asciidoc after move to Github.

Add new API ykclient_set_client_b64 to set client key in b64 format.

Fix memory leaks.

Fix usage when sending multiple requests.

Add new API ykclient_set_client_hex to set client key in hex format.

Change API ykclient_verify_otp to take a hex key rather than a binary one.

Improved instructions in README on how to build the package.

Add new API ykclient_get_last_url, mostly for debugging purposes.

Create signatures on requests.

Major rewrite of library. The library changed name from libyubikey-client.* to libykclient.* and the header file changed from libykclient.h to ykclient.h. All interfaces were also renamed, see ykclient.h.

Add libtool -export-symbols-regex to restrict exported symbols.

Avoid use of asprintf, to make it work under Solaris too.

Fix memory leaks.

Added include paths to make aclocal find libcurl.m4. Thanks to Oden Eriksson <oeriksson@mandriva.com>.

ykclient: Add new API yubikey_client_set_url_template. Allows setting a private server to query.

ykclient: Set exit code as per OTP verification result. Inspired by discussion in http://forum.yubico.com/viewtopic.php?f=3&t=89.

Install libykclient.h.

Install libykclient.h in $prefix.

Initial release, code from yubico-pam.