nitrokey-rs, branch v0.3.4

Merge branch 'hotfix-0.3.4'

2019-01-20T14:04:29Z

Release v0.3.4

2019-01-20T14:00:53Z

Pass temporary password as *const c_char

2019-01-20T13:58:11Z

The random number generator used for the temporary password produces a Vec. The libnitrokey functions using the temporary password require a pointer to a c_char. Previously, we cast the u8 pointer to the Vec to a i8 pointer (unsigned to signed). This leads to a type mismatch if the char type is not signed. Therefore we now cast to c_char instead of i8.

Release v0.3.3

2019-01-16T20:36:49Z

Add build with USE_SYSTEM_LIBNITROKEY=1

2019-01-16T20:32:11Z

The archlinux build compiles libnitrokey from source. Now we also verify that we can use the system libnitrokey version.

Document and test empty Git versions

2019-01-16T20:29:38Z

If libnitrokey has not been built from a clone of the Git repository, the Git version string may be empty.

Add delay between factory reset and building AES key in tests

2019-01-16T20:22:48Z

There seems to be a bug in libnitrokey or the Nitrokey Storage firmware that causes problems when chaining factory reset and build_AES_keys without delay (upstream issue [0]). [0] https://github.com/Nitrokey/nitrokey-storage-firmware/issues/80

Build AES key after factory reset in tests

2019-01-16T20:22:41Z

The device::clear_new_sd_card_warning used to perform a factory reset without building an AES key. This led to errors in tests that assume that an AES key is present.

Make device::factory_reset test more robust

2019-01-16T20:22:31Z

The device::factory_reset test used to first change the PINs and then access the PWS and the OTP data. If for example the PWS access failed due to an problem with the AES key, the PINs were not reset. Now we perform the PWS and OTP access with the old PINs – which is okay as we do not want to test the PIN change but the factory reset. If these preparations fail, the tests is cancelled before the PINs are changed.

pws: Interpret empty strings as unprogrammed slots

2019-01-16T19:17:16Z

Until the last commit, all empty strings returned by the library were interepreted as errors. As the PWS functions return empty strings for unprogrammed slots, the methods to access the PWS data returned an error when querying a slot that is not programmed. Since the last commit, they return an empty string instead. This patch restores the old behavior by returning an error instead of an empty string. Yet we change the error variant: SlotNotProgrammed instead of Undefined.