NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above. NOTE: This is a Python port. Instead of py311-yubikey-manager listed in the above command, you can pick from the names under the Packages section.
In order to use `ykman otp` commands, you need to make sure the uhid(4)
driver attaches to the USB device:
# usbconfig -d ugenX.Y add_quirk UQ_KBD_IGNORE
# usbconfig -d ugenX.Y reset
The correct device to operate on (ugenX.Y) can be determined using
`usbconfig list`.
When using FreeBSD 13 or higher, you can switch to the more modern
hidraw(4) driver. This allows YubiKey Manager to access OTP HID in a
non-exclusive way, so that the key will still function as a USB keyboard:
# sysrc kld_list+="hidraw hkbd"
# cat >>/boot/loader.conf<<EOF
hw.usb.usbhid.enable="1"
hw.usb.quirk.0="0x1050 0x0010 0 0xffff UQ_KBD_IGNORE" # YKS_OTP
hw.usb.quirk.1="0x1050 0x0110 0 0xffff UQ_KBD_IGNORE" # NEO_OTP
hw.usb.quirk.2="0x1050 0x0111 0 0xffff UQ_KBD_IGNORE" # NEO_OTP_CCID
hw.usb.quirk.3="0x1050 0x0114 0 0xffff UQ_KBD_IGNORE" # NEO_OTP_FIDO
hw.usb.quirk.4="0x1050 0x0116 0 0xffff UQ_KBD_IGNORE" # NEO_OTP_FIDO_CCID
hw.usb.quirk.5="0x1050 0x0401 0 0xffff UQ_KBD_IGNORE" # YK4_OTP
hw.usb.quirk.6="0x1050 0x0403 0 0xffff UQ_KBD_IGNORE" # YK4_OTP_FIDO
hw.usb.quirk.7="0x1050 0x0405 0 0xffff UQ_KBD_IGNORE" # YK4_OTP_CCID
hw.usb.quirk.8="0x1050 0x0407 0 0xffff UQ_KBD_IGNORE" # YK4_OTP_FIDO_CCID
hw.usb.quirk.9="0x1050 0x0410 0 0xffff UQ_KBD_IGNORE" # YKP_OTP_FIDO
EOF
# reboot
security/py-yubikey-manager: remove unused dependency
And the deprecation that goes with it.
According to the the sources log, libu2f-host has not been needed since
version 0.6.1 back in 2018.
*: Replace USES=pycryptography* with USE_PYTHON=cryptography{,_build,_test}
- Introduce USE_PYTHON=cryptography{,_build,_test}
- Switch all 96 ports from USES=pycryptography to with
USE_PYTHON=cryptography{,_build,_test}
- Remove Mk/Uses/pycryptography.mk
PR: 273727
Approved by: tcberner (portmgr)
Exp-run by: antoine
security/py-yubikey-manager: update 4.0.9 to 5.2.0
While here,
* Add OTP HID support for FreeBSD (merged in upstream) [0];
* Move into pep517 (https://wiki.freebsd.org/Python/PEP-517);
* Start using USES=pycryptography as introduced by 7bb64b89d0e5ec8
Note that,
* should one does not with to set PYCRYPTOGRAHY_DEFAULT=legacy,
`ykman` (and other packages/ports depending on that) would require
CRYPTOGRAPHY_OPENSSL_NO_LEGACY= to be true.
[0]
https://github.com/Yubico/yubikey-manager/commit/ecd7897b3f020542f70581f77f47ba57c739b334
PR: 273505
Reported by: David Horn <dhorn2000 % gmail.com>
framework: convert tree to use USES=pycryptography
A future commit will update to security/py-cryptography will introduce a
rust dependency.
PR: 254853
all: remove explicit versions in USES=python for "3.x+"
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568>
security/py-yubikey-manager: unbreak build after py-cryptography revert (+)
securuty/py-cryptography got a PORTEPOCH bump after revert.
Adjust dependency package version check boundaries to meet new reality.
Approved by: portmgr blanket
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security/py-yubikey-manager: fix instructions in pkg-message
The usbconfig command requires a -d parameter prior to the device.
PR: 265901
Reported by: ehaupt@
security/py-yubikey-manager: Fix dependencies, undeprecate
Upstream stopped using py-pycrypto in 2016. It uses py-cryptography,
which is pulled in indirectly through the dependency on py-fido2.
Therefore:
- Remove dependency on py-pycrypto
- Add dependency on py-cryptography (same version range as py-fido2)
- Undeprecate
security/py-yubikey-manager: Add OTP HID support for FreeBSD
This makes yubikey-manager usable on FreeBSD again. FreeBSD
support was broken since reliance on libusb and libykpersonalize
was dropped upstream in 4.0.0.
This supports the classic uhid(4) driver and the more modern
hidraw(4) driver.
See: https://github.com/Yubico/yubikey-manager/pull/504
As I had to redo the patch after the update to 4.0.9, I took
the chance to add unit test support (`make test`).
A future change could remove the dependency on ykpersonalize.
PR: 263916
Approved by: egypcio (maintainer timeout, about 4 weeks)
security/py-yubikey-manager: update 4.0.2_1 to 4.0.5
* patch-ykman_hid_____init____.py now made to upstream (711b13a);
* github.com/Yubico/yubikey-manager/releases/tag/4.0.5
security/py-yubikey-manager: update 1.0.1_1 to 2.0.0
- add support to build against both Python flavors;
yubikey-manager-qt OK (depends on security/py-yubikey-manager);
tested both versions with real hardware.
- use RSA_SecurID_getpasswd:devel/libccid as RUN_DEPENDS instead of
lib/pcsc/drivers/ifd-ccid.bundle/Contents/${OPSYS}/libccid.so
- use ykpersonalize:security/ykpers instead of:
ykpers>=0:security/ykpers
https://raw.githubusercontent.com/Yubico/yubikey-manager/master/NEWS
Approved by: rene (mentor)
Sponsored by: cleverbridge AG
Differential Revision: https://reviews.freebsd.org/D18855
