yubico-piv-tool-1.5.0-lp150.2.3.1<>,9(\u/=„1AB}AdpE8KPw"<}c8}ǦHzxhԳ-!t k Hj>(?(pd $ D$(;DQ j     Dd!(X8`9: UF#G#(H#HI#hX#pY#x\#]#^$b$c%cd%e&f&l&u&v&8w'x'y'z(( ($(*(lCyubico-piv-tool1.5.0lp150.2.3.1Yubico YubiKey NEO CCID ManagerThis is a command line tool to interact with the PIV applet on a YubiKey NEO. Among other functions it supports, generating keys on device, importing keys and certificates and creating certificate requests.\ucloud127AopenSUSE Leap 15.0openSUSEBSD-2-Clausehttp://bugs.opensuse.orgProductivity/Networking/Securityhttps://developers.yubico.com/linuxx86_646xЬA큤A큤\u\uZZ{jZzv\uZzvZ38a51c6c00d808873ad28278a8c391d6c36d603cd3d26ed2b616aefb4a3fdf60ae6285c6d4c07d8493527477cf4b8ac75103a57904e5ef23f3837437591c86b83fc8e8406c55ffbb636423074c04035b888cb2a2fa473f43f1dfc8ec3f5c1508b6ae6b94077792ba959d1de57968b3b8b8a9bd267ec67b59f868ef7293cdb7ad7a5b302a88aedeb0830ef95a47c1c4de4414c09e26391895b6a229cc55cf3e0257fa53ba9d63d65e974a681f2f1c2242e9e405143f72127e6a227391c96ab6f8rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootyubico-piv-tool-1.5.0-lp150.2.3.1.src.rpmyubico-piv-toolyubico-piv-tool(x86-64)@@@@@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libykcs11-1libykpiv.so.1()(64bit)libykpiv.so.1(YKPIV_0.1.0)(64bit)libykpiv.so.1(YKPIV_0.2.0)(64bit)libykpiv.so.1(YKPIV_1.1.0)(64bit)libykpiv.so.1(YKPIV_1.2.0)(64bit)libykpiv.so.1(YKPIV_1.3.0)(64bit)libykpiv.so.1(YKPIV_1.5.0)(64bit)libykpiv1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.5.01.5.03.0.4-14.6.0-14.0-15.2-14.14.1[9@ZZ ,@Y, @WQW;WVjVLh@VD@V<@V@V @U@U@UU>$UTء@Tи@T7kbabioch@suse.comt.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.decdenicolo@suse.comt.gruner@katodev.det.gruner@katodev.det.gruner@katodev.det.gruner@katodev.de- Added CVE-2018-14779.patch: Fixed an buffer overflow and an out of bounds memory read in ykpiv_transfer_data(), which could be triggered by a malicious token. (CVE-2018-14779, bsc#1104809, YSA-2018-03) - Added CVE-2018-14780.patch: Fixed an buffer overflow and an out of bounds memory read in _ykpiv_fetch_object(), which could be triggered by a malicious token. (CVE-2018-14780, bsc#1104811, YSA-2018-03) - Used %license macro for COPYING (rather than %doc) - Applied spec-cleaner- Version 1.5.0 (released 2017-11-29) - API additions: Higher-level "util" API added to libykpiv. - Added ykpiv_attest(), ykpiv_get_pin_retries(), ykpiv_set_pin_retries() - Added functions for using existing PCSC card handle. - Support using custom memory allocator. - Documentation updates. make doxygen for HTML format. - Expanded automated tests for hardware devices, moved to make hwcheck. - OpenSSL 1.1 support - Moderate internal refactoring. Many small bugs fixed.- Version 1.4.4 (released 2017-10-17) - Documentation updates. - Add pin caching to work around disconnect problems. - Disable RSA key generation on YubiKey 4 before 4.3.5. See https://yubi.co/ysa201701/ for details.- Version 1.4.3 (released 2017-04-18) - Encode RSA x509 certificates correctly. - Documentation updates. - In ykcs11 return CKA_MODULUS correctly for private keys. - In ykcs11 fix for signature size approximation. - Fix PSS signatures in ykcs11. - Add a CLI flag --stdin-input to make batch execution easier.- Version 1.4.2 (released 2016-08-12) - Clarify license headers and clean up YKCS11 licensing. Now uses pkcs11.h from the Scute project. - Don’t install ykcs11-version.h. - No cflags in ykcs11.pc. - Unimplemented YKCS11 functions now return CKR_FUNCTION_FAILED. - Version 1.4.1 (released 2016-08-11) - Documentation updates - Add possibility to export certificates in SSH format. - Make certificate serial number random by default.- Version 1.4.0 (released 2016-05-03) - Add attest action When used on a slot with a generated key, outputs a signed x509 certificate for that slot showing that the key was generated in hardware. Available in firmware 4.3.0 and newer. - Add cached parameter for touch-policy With cached, the touch is valid for an additional 15s. Available in firmware 4.3.0 and newer. - Enforce a minimum PIN length of 6 characters. - Fix a bug with list-readers action where it fell through processing into write-object.- Version 1.3.1 (released 2016-04-19) - Fix a bug where unblock pin would instead change puk, introduced in 1.3.0. - Clarifications with help texts. - Version 1.3.0 (released 2016-02-19) - Fixed extraction of RSA modulus and exponent for pkcs11. - Implemented C_SetPIN for pkcs11. - Add generic write and read object actions for the tool. Supports hex/binary/base64 formats - Add ykpiv_change_pin(), ykpiv_change_puk() and ykpiv_unblock_pin() - Print CCC with status action. - Address bugs with pkcs11 on windows. - Add --valid-days and --serial to tool for selfsign-certificate action. - Ask for password for pkcs12 if none is given.- Version 1.2.2 (released 2015-12-08) - Fix old buffer overflow in change-pin functionality. - Version 1.2.1 (released 2015-12-08) - Fix issue with big certificates and status. - Version 1.2.0 (released 2015-12-07) - On OSX use @loader_path instead of @executable_path for ykcs11. - Add ykpiv_import_private_key to libykpiv. - Raise buffer sizes to support bigger objects. - Change behavior of action status, only list populated slots. - Add retired keys to ykcs11. - In ykcs11 support login with non null terminated pin. - Add a new action set-ccc to yubico-piv-tool to set the CCC.- Version 1.1.2 (released 2015-11-13) - Properly handle DER encoding in ECDSA signatures.- Version 1.1.1 (released 2015-11-11) - Make sure SCardContext is properly acquired and released.- Version 1.1.0 (released 2015-11-06) - Add support for new YubiKey 4. - Add ykcs11.- Add dependencive in .spec file- Version 1.0.3 (released 2015-10-01) - Correct wording on unblock-pin action. - Show pin retries correctly. - Use a bigger buffer for receiving data.- Version 1.0.2 (released 2015-09-04) - Query for different passwords/pins on stdin if they’re not supplied. - If a reader fails continue trying matching readers. - Authentication failed is supposed to be 0x63cX not 0x630X.- Version 1.0.1 (released 2015-07-10) - Project relicensed to 2-clause BSD license - Minor fixes found with clang scan-build- Version 1.0.0 (released 2015-06-23) - Add a test-decipher action. - Check that e is 0x10001 on importing rsa keys - Use PCSC transactions when sending and receiving data- license update: GPL-3.0+ COPYING files says package is under GPL-3.0+.- Version 0.1.6 (released 2015-03-23) Add a read-certificate action to the tool. Add a status action to the tool. Fix a library bug so NULL can be passed to ykpiv_verify() Add a test-signature action to the tool.- Version 0.1.5 (released 2015-02-04) Revert the check for parity and just set parity before the weak check.- Version 0.1.4 (released 2015-02-02) Prompt for input if input is stdin. Mark all bits of the signature as used is certs and requests. Correct error for unblock-pin. Fix hex decode to decode capital letters and return error. Check parity of new management keys.- Version 0.1.3 (released 2014-12-18) Add format DER for importing certificates. Make sure diagnostic feedback ends up on stderr. Add positive feedback for a couple of actions. - Version 0.1.2 (released 2014-11-14) Fix an issue where shorter component of RSA keys where not packed correctly. - Version 0.1.1 (released 2014-11-10) Correct broken CHUID that made windows work inconsistently. Add support for compressed certificates. Fix broken unblock-pin action. Don’t try to accept to short keys for mgm key. Only do applet authentication if needed. Add --hash for selecting what hash to use for signatures. Add hidden --sign command. Should probably not be used. Fix for signature algorithm in selfsigned cert. - Version 0.1.0 (released 2014-08-25) Break out functionality into a library. More testing. - Version 0.0.3 (released 2014-05-26) Add delete-certificate action. Fix minor bugs. - Version 0.0.2 (released 2014-02-19) Fix an offset bug with CHUID. Do full mutual auth with the applet. - Version 0.0.1 (released 2014-02-11) Initial release.cloud127 15566412651.5.0-lp150.2.3.11.5.0-lp150.2.3.1yubico-piv-toolyubico-piv-toolChangeLogNEWSREADMEyubico-piv-toolCOPYINGyubico-piv-tool.1.gz/usr/bin//usr/share/doc/packages//usr/share/doc/packages/yubico-piv-tool//usr/share/licenses//usr/share/licenses/yubico-piv-tool//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10139/openSUSE_Leap_15.0_Update/91e41b38aeb9a7eece08a2f9a4e1fb28-yubico-piv-tool.openSUSE_Leap_15.0_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=82096c0cea19c4511c676fd0d8c4944642b40988, strippeddirectoryNon-ISO extended-ASCII text, with very long linesASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRRRR R R RR RRR RR~qսWutf-832ff4fa3321ac8c78a44ff066429645bbd022ac6469559426a36bd00651a4232? 7zXZ !t/ _]"k%\?W*ƧA;PEyMVLkjʟDf"(xxqʸ=4/ 2lP ;p.dG\&Jc|jhቚ "]` t+-Z틆KŁ]"PM͛p"Xvnlt$%ia~FΜ۞nm9cNMA0,'?軡jn'6$k}Xd$-C gYw۟﻾ %D^P@FVn.>6YAIM+?_QזrRm|oy،  m=.eX@~q&¤N>9 Y@|D,fW\bf TW`;wa[]@ASz<ǍlXG%{|H3K0,ΝB\ O;8+V(=zm\J< iv2ow6Hӗ'H UC2PBdPZgI([-&1#x!*V"Sd|C.U 豔vDB-*!yj,}f7wT󗅖l\SBx㎠~úkCt4uW\}XQP HHm!5߱39|j'zC7I<"okNP"f+w/XpNskC&9HM =/ wM躯('!2 |ة˓`WjNWpJ@nV{qloȟ`NRؤnL[gƀ&` ̻fZh!\xMP)D'Mؒk#%2lY )E߿q@#C0g }K $sybd73a1V`Oa̍Ʉ V}pJ0;k SUqRRw/[shhrR]u*خ)Y=ҷQ?q{Y-j (JBr^Bq>86h%Ͼ޿) ;8I o myHLYLrԺ$ܟ0 :`5 i SwWM!4 4Y,ysÏF;y C{X`rsNW`Sl4(q% ݽꇓ9*H*QP=ݬ*h|_ќv ⩪0щ('/jGݧm֧+ZG*uT.]|r> raNh&\+VsbK;}ݍ7_eQ;_'QErɤ՘W1FFYϊ#VBU_>1jƣ]&X2OX>&-NpS81?t^ Ҡ15.gzUa':~}ը?(<E`{.|rʌ*旳J1BbfY3uMY*7YI^ ERff: v^0R!ylۄ@dzTXWEPʓy6[z$8 qVP2j·jSlABs ]e31SF[e:{j?dji~\a}rJoB;yIF53Rb_~4>P41cX!ey8'Pw灍ޙ?nl@xWZ J6ҿybĥu=iͱO%Bd L5 ۄ,V-j.WBwHYmSR!]HȺʟCCU"I3m$ V jLN&vpX_܊*r#R*a[dȩ#\ǭWg[h7{ޓ̹"z:\pt a! k'X\DenM젘~'k e"r8g_R|< lb\[ظ]gʦK`8`1BJ:EUP#n, \IgY ~a V:<+K=fN*!=eV T!GkB).=5 z8OᮕR+H_816& $l߻ Bc˛;r3z@D1K Yl;TvvSΐh%4{/2AYi 4 HR=:0p"v=w|Km47V{e_i[[ajBҺ(z'UYEFS_)ꮥ*P!<>PA]8 J.IvmX@ȿVznx64,JUzfp0_P ǘEnq@&Y-7nH693**&[U`<10TT h&;юfS/< /U3+ɒqPͣQDnN'XT|XcXhBО4E¨s%nEM ;)-\& #򾕾٪?ipQ+U6OB=h-†K9d9 M"[LfTdu(͙{B S^p I`,~i6? Inܟ%f 9( tҪ@'`p&^79'B .Okǚ|{< תsTCA-L2jT.ɠ %Aζ YZ