From 7c880699bb9a49037c09b1be990e677a1857af7a Mon Sep 17 00:00:00 2001 From: Daniel Mueller Date: Sat, 1 Jun 2019 11:19:08 -0700 Subject: Clear cached PIN entry as part of pin set command When a PIN is changed using the pin set command, the last action is to confirm the operation with the previously used PIN. This step will cause this PIN, which is now stale and no longer valid, to be cached, which in turn can cause follow up command using the same PIN type to use this wrong cached entry for authentication. To fix this problem, this change explicitly clear the PIN entry from the cache after the PIN has been changed. --- nitrocli/CHANGELOG.md | 2 ++ 1 file changed, 2 insertions(+) (limited to 'nitrocli/CHANGELOG.md') diff --git a/nitrocli/CHANGELOG.md b/nitrocli/CHANGELOG.md index fe3ac74..71a54df 100644 --- a/nitrocli/CHANGELOG.md +++ b/nitrocli/CHANGELOG.md @@ -5,6 +5,8 @@ Unreleased - Check the status of a PWS slot before accessing it in `pws get` - Added `NITROCLI_NO_CACHE` environment variable to bypass caching of secrets +- Clear cached PIN entry as part of `pin set` command to prevent + spurious authentication failures - Bumped `libc` dependency to `0.2.55` - Bumped `cc` dependency to `1.0.37` -- cgit v1.2.1