Pol Henarejos
331f4f1c4e
Relicense project under the GNU Affero General Public License v3 (AGPLv3)
...
and add the Enterprise / Commercial licensing option.
Main changes:
- Replace GPLv3 headers with AGPLv3 headers in source files.
- Update LICENSE file to the full AGPLv3 text.
- Add ENTERPRISE.md describing the dual-licensing model:
* Community Edition: AGPLv3 (strong copyleft, including network use).
* Enterprise / Commercial Edition: proprietary license for production /
multi-user / OEM use without the obligation to disclose derivative code.
- Update README with a new "License and Commercial Use" section pointing to
ENTERPRISE.md and clarifying how companies can obtain a commercial license.
Why this change:
- AGPLv3 ensures that modified versions offered as a service or deployed
in production environments must provide corresponding source code.
- The Enterprise / Commercial edition provides organizations with an
alternative proprietary license that allows internal, large-scale, or OEM
use (bulk provisioning, policy enforcement, inventory / revocation,
custom attestation, signed builds) without AGPL disclosure obligations.
This commit formally marks the first release that is dual-licensed:
AGPLv3 for the Community Edition and a proprietary commercial license
for Enterprise customers.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2025-10-26 20:24:47 +01:00
Pol Henarejos
9c878cc5b6
Fix PIV default keys indication.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2025-07-08 14:13:23 +02:00
Pol Henarejos
31ac28c7de
Fix touch policy on mgmt key change.
...
Fixes #38 .
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2025-07-08 13:51:24 +02:00
Pol Henarejos
95a4f7201b
Move cmd functions to separate files.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2025-01-08 11:46:49 +01:00
Pol Henarejos
eaa8851719
Move Pico Keys SDK pointer.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-12-27 02:54:07 +01:00
Pol Henarejos
2747083672
Upgrade pico keys sdk.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-11-09 00:36:21 +01:00
Pol Henarejos
0322967865
Free x509 cert on finish.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-08-25 21:17:15 +02:00
Pol Henarejos
6780eb3935
Fix select aid to new callback.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-08-25 20:57:56 +02:00
Pol Henarejos
1051690b79
Add support to ESP32.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-08-20 00:23:22 +02:00
Pol Henarejos
8a5c734c41
Fix TLV when returning the public key in get metadata.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-08-13 17:16:57 +02:00
Pol Henarejos
c09f96e956
Fix return error when missing metadata.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-08-13 17:06:58 +02:00
Pol Henarejos
c28852d0ea
Fix return metadata for PIN/PUK.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-08-13 17:05:35 +02:00
Pol Henarejos
209cd389e5
Fix returning error code when no object is found on GET DATA.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-08-13 16:49:39 +02:00
Pol Henarejos
10c3389c51
Fix GET METADATA when ref is CARDMGM.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-08-13 16:48:14 +02:00
Pol Henarejos
197bf3c056
Add management support for YKMAN.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-08-13 16:34:10 +02:00
Pol Henarejos
20387c955e
Use latest version of Pico Keys SDK.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-05-23 18:40:24 +02:00
Pol Henarejos
a9797ae1ba
Added x509 extensions to attesting certificates.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-27 19:12:14 +01:00
Pol Henarejos
877e5c0a5c
Fix attestation verification.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-27 18:50:55 +01:00
Pol Henarejos
b1e09b7047
Fix fetching some certs.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-27 18:10:04 +01:00
Pol Henarejos
e8ad4baa70
Fix operation with slot 93.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-27 15:24:11 +01:00
Pol Henarejos
42f9402f8b
Fix key deletion.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-27 15:18:01 +01:00
Pol Henarejos
c609050b3c
Fix keygen in slot 93.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-27 15:11:29 +01:00
Pol Henarejos
1e22908de1
Fix PIN POLICY
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-26 20:58:38 +01:00
Pol Henarejos
f8974ff183
Add PIN policy check on AUTHENTICATE.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-26 19:52:47 +01:00
Pol Henarejos
a49aab43d7
Added support for RSA 3072 and RSA 4096 import and fixed RSA signature/decryption.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-26 19:41:06 +01:00
Pol Henarejos
85b6c90d39
Added support for key import.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-26 13:00:42 +01:00
Pol Henarejos
9fe59a551a
Added support for ATTESTATION.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-26 12:13:51 +01:00
Pol Henarejos
ad5e98ce89
Fix PUK change.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-25 13:32:57 +01:00
Pol Henarejos
a5bb1cd721
Add 3DES support.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-25 13:25:40 +01:00
Pol Henarejos
e2bbe927af
Only mark MGM if challenge is the same. Otherwise, send OK silently.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-25 12:43:16 +01:00
Pol Henarejos
c35beb5b0e
Reset PIN status on select.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-25 11:43:10 +01:00
Pol Henarejos
beabcdd8a6
Add RESET command.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-25 11:42:24 +01:00
Pol Henarejos
d45a0bfc20
Fix verify on change pin.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-24 02:19:55 +01:00
Pol Henarejos
61261aa1d6
Add meta data when generatin keypair and returning public key on get metadata.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-24 02:19:39 +01:00
Pol Henarejos
1c10b0186e
Added support for SET RETRIES.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-22 20:38:01 +01:00
Pol Henarejos
e3112d5cdf
Added support for RESET RETRY.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-22 20:14:03 +01:00
Pol Henarejos
13f848dafb
Added CHANGE PIN command.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-22 20:07:59 +01:00
Pol Henarejos
36420ef098
Added support for move-key.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-21 23:12:58 +01:00
Pol Henarejos
2e70af60db
Add support for SET_MGM_KEY.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-21 22:01:09 +01:00
Pol Henarejos
62743bbb3c
Fix ECDSA signature encoding.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-20 10:12:16 +01:00
Pol Henarejos
1197389e02
Fix response length encoding.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-20 10:11:03 +01:00
Pol Henarejos
ec08c06196
Added support for PUT DATA.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-20 00:06:42 +01:00
Pol Henarejos
2f24c3d9a8
Added support for PIV signature.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-19 17:56:36 +01:00
Pol Henarejos
ebec1b1022
Add PIV asymmetric keygen.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-14 23:22:01 +01:00
Pol Henarejos
4cfa2a16bf
Added AUTHENTICATE support.
...
Note that CARD MGM key is NOT encrypted with DEK, since it has to be accessed even without PIN.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-12 22:04:19 +01:00
Pol Henarejos
817d8b39ec
Added first commit of Pico OpenPGP with PIV support.
...
It shares the PIN of OpenPGP.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es >
2024-03-06 18:54:30 +01:00