Released 0.3.0

OpenSC · Apr 24, 2019 · 6e81968 · 6e81968
1 parent 991b480
commit 6e81968
Show file tree

Hide file tree

Showing 6 changed files with 92 additions and 73 deletions.
diff --git a/NEWS b/NEWS
@@ -1,6 +1,13 @@
 NEWS for Pam_p11 -- History of user visible changes
 
-New in 0.2.0; 2018-05-16 Frank Morgner
+New in 0.3.0; 2019-04-24; Frank Morgner
+* Add Italian translation
+* Add support for matching the PIN-input with a regular expression
+* Add support for macOS
+* Add support for building with OpenSSL 1.1.1
+* Add support for nistp256/384/521 keys in authorized_keys file
+
+New in 0.2.0; 2018-05-16; Frank Morgner
 * Add user documentation in Readme.md
 * Add support for PIN pad readers
 * Add support for changing/unblocking PIN (use with passwd)
@@ -12,7 +19,7 @@ New in 0.2.0; 2018-05-16 Frank Morgner
 * Fixed memory leaks, coverity issues, compiler warnings
 * Created `test-passwd` and `test-login` for testing standard use cases
 
-New in 0.1.6; 2017-03-06 Alon Bar-Lev
+New in 0.1.6; 2017-03-06; Alon Bar-Lev
 * Build system rewritten (NOTICE: configure options was modified). 
 
 New in 0.1.5; 2008-08-27; Andreas Jellinghaus

diff --git a/README.md b/README.md
@@ -9,7 +9,7 @@ Pam_p11 implements two authentication methods:
 - verify a token using a known public key found in OpenSSH's `~/.ssh/authorized_keys`.
 - verify a token using a known certificate found in `~/.eid/authorized_certificates`.
 
-Pam_p11 is very simple, it has no config file, no options other than the PKCS#11 module file, does not know about certificate chains, certificate authorities, revocation lists or OCSP. Perfect for the small installation with no frills.
+Pam_p11 is very simple, it has no config file, does not know about certificate chains, certificate authorities, revocation lists or OCSP. Perfect for the small installation with no frills.
 
 Pam_p11 was written by an international team and is licensed as Open Source software under the LGPL license.
 
@@ -37,7 +37,7 @@ Pam_p11 depends on pkg-config, openssl, libp11 and pam.  If you don't have pkg-c
 To use pam_p11 with some application like `sudo`, edit `/etc/pam.d/sudo` and add something like the following at the beginning of the file:
 
 ```
-auth      sufficient  /usr/local/lib/security/pam_p11.so  /usr/local/lib/opensc-pkcs11.so
+auth  sufficient  /usr/local/lib/security/pam_p11.so  /usr/local/lib/opensc-pkcs11.so
 ```
 
 Replace `/usr/local/lib/opensc-pkcs11.so` with your PKCS#11 implementation. Using an absolute path to `pam_p11.so` avoids the need to write to a system directory, which is especially useful for macOS with system integrity protection (SIP) enabled.

diff --git a/configure.ac b/configure.ac
@@ -1,9 +1,9 @@
 AC_PREREQ(2.60)
 
 define([PACKAGE_VERSION_MAJOR], [0])
-define([PACKAGE_VERSION_MINOR], [2])
+define([PACKAGE_VERSION_MINOR], [3])
 define([PACKAGE_VERSION_FIX], [0])
-define([PACKAGE_SUFFIX], [_git])
+define([PACKAGE_SUFFIX], [])
 define([PRODUCT_BUGREPORT], [https://github.com/OpenSC/pam_p11/issues])
 
 AC_INIT([pam_p11],[PACKAGE_VERSION_MAJOR.PACKAGE_VERSION_MINOR.PACKAGE_VERSION_FIX[]PACKAGE_SUFFIX],[PRODUCT_BUGREPORT])

diff --git a/po/de.po b/po/de.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam_p11 0.1.7_git\n"
 "Report-Msgid-Bugs-To: https://github.com/OpenSC/pam_p11/issues\n"
-"POT-Creation-Date: 2018-05-16 18:56+0200\n"
+"POT-Creation-Date: 2019-04-24 23:27+0200\n"
 "PO-Revision-Date: 2018-04-05 11:14+0200\n"
 "Last-Translator: Frank Morgner <frankmorgner@gmail.com>\n"
 "Language-Team: German\n"
@@ -17,94 +17,98 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/pam_p11.c:177
+#: src/pam_p11.c:204
 msgid "Error loading PKCS#11 module"
 msgstr "Fehler beim Laden des PKCS#11-Moduls"
 
-#: src/pam_p11.c:185 src/pam_p11.c:236
+#: src/pam_p11.c:212 src/pam_p11.c:264
 msgid "Error initializing PKCS#11 module"
 msgstr "Fehler beim Initialisieren des PKCS#11-Moduls"
 
-#: src/pam_p11.c:290
+#: src/pam_p11.c:332
 msgid " (last try)"
 msgstr " (letzter Versuch)"
 
-#: src/pam_p11.c:297
+#: src/pam_p11.c:339
 #, c-format
 msgid "Login on PIN pad with %s%s"
 msgstr "Login auf dem PIN-Pad mit %s%s"
 
-#: src/pam_p11.c:303
+#: src/pam_p11.c:345
 #, c-format
 msgid "Login with %s%s: "
 msgstr "Login mit %s%s: "
 
-#: src/pam_p11.c:312
+#: src/pam_p11.c:369
+msgid "Invalid PIN"
+msgstr ""
+
+#: src/pam_p11.c:377
 msgid "PIN not verified; PIN locked"
 msgstr "PIN nicht verifiziert; PIN gesperrt"
 
-#: src/pam_p11.c:314
+#: src/pam_p11.c:379
 msgid "PIN not verified; one try remaining"
 msgstr "PIN nicht verifiziert; ein Versuch verbleibend"
 
-#: src/pam_p11.c:316
+#: src/pam_p11.c:381
 msgid "PIN not verified"
 msgstr "PIN nicht verifiziert"
 
-#: src/pam_p11.c:358
+#: src/pam_p11.c:423
 #, c-format
 msgid "Change PIN with PUK on PIN pad for %s"
 msgstr "Ändere PIN mit PUK auf dem PIN-Pad für %s"
 
-#: src/pam_p11.c:362
+#: src/pam_p11.c:427
 #, c-format
 msgid "Change PIN on PIN pad for %s"
 msgstr "Ändere PIN auf dem PIN-Pad für %s"
 
-#: src/pam_p11.c:369
+#: src/pam_p11.c:434
 #, c-format
 msgid "PUK for %s: "
 msgstr "PUK für %s: "
 
-#: src/pam_p11.c:380
+#: src/pam_p11.c:445
 msgid "Current PIN: "
 msgstr "Aktuelle PIN: "
 
-#: src/pam_p11.c:398
+#: src/pam_p11.c:463
 msgid "Enter new PIN: "
 msgstr "Neue PIN eingeben: "
 
-#: src/pam_p11.c:401
+#: src/pam_p11.c:466
 msgid "Retype new PIN: "
 msgstr "Neue PIN wiederholen: "
 
-#: src/pam_p11.c:405
+#: src/pam_p11.c:470
 msgid "PINs don't match"
 msgstr "PINs verschieden"
 
-#: src/pam_p11.c:412
+#: src/pam_p11.c:477
 #, fuzzy
 msgid "PIN not changed; PIN locked"
 msgstr "PIN nicht verifiziert; PIN gesperrt"
 
-#: src/pam_p11.c:414
+#: src/pam_p11.c:479
 #, fuzzy
 msgid "PIN not changed; one try remaining"
 msgstr "PIN nicht verifiziert; ein Versuch verbleibend"
 
-#: src/pam_p11.c:416
+#: src/pam_p11.c:481
 #, fuzzy
 msgid "PIN not changed"
 msgstr "PIN nicht verifiziert"
 
-#: src/pam_p11.c:544
+#: src/pam_p11.c:609
 msgid "No token found"
 msgstr "Kein Token gefunden"
 
-#: src/pam_p11.c:546
+#: src/pam_p11.c:611
 msgid "No authorized keys on token"
 msgstr "Keine autorisierten Schlüssel auf dem Token"
 
-#: src/pam_p11.c:599
+#: src/pam_p11.c:664
 msgid "Error verifying key"
 msgstr "Fehler beim Verifizieren des Schlüssels"
diff --git a/po/it.po b/po/it.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam-p11\n"
 "Report-Msgid-Bugs-To: https://github.com/OpenSC/pam_p11/issues\n"
-"POT-Creation-Date: 2018-05-16 18:56+0200\n"
+"POT-Creation-Date: 2019-04-24 23:27+0200\n"
 "PO-Revision-Date: 2019-02-28 14:03+0000\n"
 "Last-Translator: Milo Casagrande <milo@milo.name>\n"
 "Language-Team: Italian <tp@lists.linux.it>\n"
@@ -16,91 +16,95 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 
-#: src/pam_p11.c:177
+#: src/pam_p11.c:204
 msgid "Error loading PKCS#11 module"
 msgstr "Errore nel caricare il modulo PKCS#11"
 
-#: src/pam_p11.c:185 src/pam_p11.c:236
+#: src/pam_p11.c:212 src/pam_p11.c:264
 msgid "Error initializing PKCS#11 module"
 msgstr "Errore nell'inizializzare il modulo PKCS#11"
 
-#: src/pam_p11.c:290
+#: src/pam_p11.c:332
 msgid " (last try)"
 msgstr " (ultimo tentativo)"
 
-#: src/pam_p11.c:297
+#: src/pam_p11.c:339
 #, c-format
 msgid "Login on PIN pad with %s%s"
 msgstr "Accesso su dispositivo inserimento PIN con %s%s"
 
-#: src/pam_p11.c:303
+#: src/pam_p11.c:345
 #, c-format
 msgid "Login with %s%s: "
 msgstr "Accesso con %s%s: "
 
-#: src/pam_p11.c:312
+#: src/pam_p11.c:369
+msgid "Invalid PIN"
+msgstr ""
+
+#: src/pam_p11.c:377
 msgid "PIN not verified; PIN locked"
 msgstr "PIN non verificato; PIN bloccato"
 
-#: src/pam_p11.c:314
+#: src/pam_p11.c:379
 msgid "PIN not verified; one try remaining"
 msgstr "PIN non verificato; un tentativo rimasto"
 
-#: src/pam_p11.c:316
+#: src/pam_p11.c:381
 msgid "PIN not verified"
 msgstr "PIN non verificato"
 
-#: src/pam_p11.c:358
+#: src/pam_p11.c:423
 #, c-format
 msgid "Change PIN with PUK on PIN pad for %s"
 msgstr "Modifica del PIN con PUK su dispositivo inserimento PIN per %s"
 
-#: src/pam_p11.c:362
+#: src/pam_p11.c:427
 #, c-format
 msgid "Change PIN on PIN pad for %s"
 msgstr "Modifica del PIN su dispositivo inserimento PIN per %s"
 
-#: src/pam_p11.c:369
+#: src/pam_p11.c:434
 #, c-format
 msgid "PUK for %s: "
 msgstr "PUK per %s: "
 
-#: src/pam_p11.c:380
+#: src/pam_p11.c:445
 msgid "Current PIN: "
 msgstr "PIN attuale: "
 
-#: src/pam_p11.c:398
+#: src/pam_p11.c:463
 msgid "Enter new PIN: "
 msgstr "Inserire nuovo PIN: "
 
-#: src/pam_p11.c:401
+#: src/pam_p11.c:466
 msgid "Retype new PIN: "
 msgstr "Ripetere nuovo PIN: "
 
-#: src/pam_p11.c:405
+#: src/pam_p11.c:470
 msgid "PINs don't match"
 msgstr "I PIN non sono uguali"
 
-#: src/pam_p11.c:412
+#: src/pam_p11.c:477
 msgid "PIN not changed; PIN locked"
 msgstr "PIN non modificato; PIN bloccato"
 
-#: src/pam_p11.c:414
+#: src/pam_p11.c:479
 msgid "PIN not changed; one try remaining"
 msgstr "PIN non modificato; un tentativo rimasto"
 
-#: src/pam_p11.c:416
+#: src/pam_p11.c:481
 msgid "PIN not changed"
 msgstr "PIN non modificato"
 
-#: src/pam_p11.c:544
+#: src/pam_p11.c:609
 msgid "No token found"
 msgstr "Nessun token trovato"
 
-#: src/pam_p11.c:546
+#: src/pam_p11.c:611
 msgid "No authorized keys on token"
 msgstr "Nessuna chiave autorizzata sul token"
 
-#: src/pam_p11.c:599
+#: src/pam_p11.c:664
 msgid "Error verifying key"
 msgstr "Errore nel verificare la chiave"