yubico-piv-tool - Yubico YubiKey NEO CCID Manager

Property Value
Distribution openSUSE Tumbleweed
Repository Security all
Package filename yubico-piv-tool-1.6.2-26.6.x86_64.rpm
Package name yubico-piv-tool
Package version 1.6.2
Package release 26.6
Package architecture x86_64
Package type rpm
Category Productivity/Networking/Security
Homepage https://developers.yubico.com/
License BSD-2-Clause
Maintainer -
Download size 71.76 KB
Installed size 220.15 KB
This is a command line tool to interact with the PIV applet on a YubiKey NEO.
Among other functions it supports, generating keys on device, importing keys
and certificates and creating certificate requests.


Package Version Architecture Repository
yubico-piv-tool-1.6.2-26.6.i586.rpm 1.6.2 i586 Security
yubico-piv-tool-1.6.2-1.2.x86_64.rpm 1.6.2 x86_64 openSUSE Oss
yubico-piv-tool-1.6.2-1.2.i586.rpm 1.6.2 i586 openSUSE Oss
yubico-piv-tool - - -


Name Value
libc.so.6(GLIBC_2.14)(64bit) -
libcrypto.so.1.1()(64bit) -
libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) -
libykcs11-1 = 1.6.2
libykpiv.so.1()(64bit) -
libykpiv.so.1(YKPIV_0.1.0)(64bit) -
libykpiv.so.1(YKPIV_0.2.0)(64bit) -
libykpiv.so.1(YKPIV_1.1.0)(64bit) -
libykpiv.so.1(YKPIV_1.2.0)(64bit) -
libykpiv.so.1(YKPIV_1.3.0)(64bit) -
libykpiv.so.1(YKPIV_1.5.0)(64bit) -
libykpiv1 = 1.6.2


Name Value
yubico-piv-tool = 1.6.2-26.6
yubico-piv-tool(x86-64) = 1.6.2-26.6


Type URL
Mirror widehat.opensuse.org
Binary Package yubico-piv-tool-1.6.2-26.6.x86_64.rpm
Source Package yubico-piv-tool-1.6.2-26.6.src.rpm

Install Howto

  1. Add the Security repository:
    # zypper addrepo http://widehat.opensuse.org/opensuse/repositories/security/openSUSE_Tumbleweed/ security
  2. Install yubico-piv-tool rpm package:
    # zypper install yubico-piv-tool




2018-09-28 - Jan Engelhardt <jengelh@inai.de>
- Rename %soname to %sover to better reflect its use.
- Fix RPM groups.
2018-09-27 - Karol Babioch <kbabioch@suse.com>
- Version 1.6.2 (released 2018-09-14)
- Compare reader names case insensitive
- Fix certificate and certificate request signatures with OpenSSL 1.1
2018-08-28 - kbabioch@suse.com
- Version 1.6.1 (released 2018-08-17)
- Compilation warning fixes for OpenSSL 1.1 builds
- Fix length when encoding exactly 0xff bytes
- Check length of objects correctly before storing in buffer
- Check length of certificate correctly when storing
- Version 1.6.0 (released 2018-08-08)
- Security release to mitigate YSA-2018-03 (YSA-2018-03, CVE-2018-14779,
CVE-2018-14780, bsc#1104809, bsc#1104811)
- Allow building against LibreSSL
- Bugfixes in OpenSSL 1.1 code
- Fix compilation warnings
- Fix ykcs11 key generation to work with OpenSSL 1.1
- Ykcs11 compatibility fixes
- Make use of %license macro instead of %doc for COPYING
- Applied spec-cleaner
2017-11-30 - t.gruner@katodev.de
- Version 1.5.0 (released 2017-11-29)
- API additions: Higher-level "util" API added to libykpiv.
- Added ykpiv_attest(), ykpiv_get_pin_retries(), ykpiv_set_pin_retries()
- Added functions for using existing PCSC card handle.
- Support using custom memory allocator.
- Documentation updates. make doxygen for HTML format.
- Expanded automated tests for hardware devices, moved to make hwcheck.
- OpenSSL 1.1 support
- Moderate internal refactoring. Many small bugs fixed.
2017-11-15 - t.gruner@katodev.de
- Version 1.4.4 (released 2017-10-17)
- Documentation updates.
- Add pin caching to work around disconnect problems.
- Disable RSA key generation on YubiKey 4 before 4.3.5. See https://yubi.co/ysa201701/ for details.
2017-05-29 - t.gruner@katodev.de
- Version 1.4.3 (released 2017-04-18)
- Encode RSA x509 certificates correctly.
- Documentation updates.
- In ykcs11 return CKA_MODULUS correctly for private keys.
- In ykcs11 fix for signature size approximation.
- Fix PSS signatures in ykcs11.
- Add a CLI flag --stdin-input to make batch execution easier.
2016-08-17 - t.gruner@katodev.de
- Version 1.4.2 (released 2016-08-12)
- Clarify license headers and clean up YKCS11 licensing. Now uses pkcs11.h from the Scute project.
- Don?t install ykcs11-version.h.
- No cflags in ykcs11.pc.
- Unimplemented YKCS11 functions now return CKR_FUNCTION_FAILED.
- Version 1.4.1 (released 2016-08-11)
- Documentation updates
- Add possibility to export certificates in SSH format.
- Make certificate serial number random by default.
2016-05-17 - t.gruner@katodev.de
- Version 1.4.0 (released 2016-05-03)
- Add attest action When used on a slot with a generated key,
outputs a signed x509 certificate for that slot showing that
the key was generated in hardware. Available in firmware 4.3.0 and newer.
- Add cached parameter for touch-policy With cached, the touch is valid
for an additional 15s. Available in firmware 4.3.0 and newer.
- Enforce a minimum PIN length of 6 characters.
- Fix a bug with list-readers action where it fell through processing into write-object.
2016-04-25 - t.gruner@katodev.de
- Version 1.3.1 (released 2016-04-19)
- Fix a bug where unblock pin would instead change puk, introduced in 1.3.0.
- Clarifications with help texts.
- Version 1.3.0 (released 2016-02-19)
- Fixed extraction of RSA modulus and exponent for pkcs11.
- Implemented C_SetPIN for pkcs11.
- Add generic write and read object actions for the tool. Supports hex/binary/base64 formats
- Add ykpiv_change_pin(), ykpiv_change_puk() and ykpiv_unblock_pin()
- Print CCC with status action.
- Address bugs with pkcs11 on windows.
- Add --valid-days and --serial to tool for selfsign-certificate action.
- Ask for password for pkcs12 if none is given.

See Also

Package Description
yubikey-manager-2.1.0-23.1.noarch.rpm Python 3 library and command line tool for configuring a YubiKey
yubikey-manager-qt-1.1.1-34.3.i586.rpm Graphical application for configuring a YubiKey
yubikey-manager-qt-1.1.1-34.3.x86_64.rpm Graphical application for configuring a YubiKey
yubikey-personalization-gui-3.1.25-11.20.i586.rpm GUI for Yubikey personalization
yubikey-personalization-gui-3.1.25-11.20.x86_64.rpm GUI for Yubikey personalization
yubioath-desktop-4.3.4-9.14.i586.rpm Graphical interface for displaying OATH codes with a Yubikey
yubioath-desktop-4.3.4-9.14.x86_64.rpm Graphical interface for displaying OATH codes with a Yubikey