piv: let user specify pin policy instead of using attestation cert

go-piv / piv-go

Keys and certificates for YubiKeys, written in Go

Apache License 2.0

368 stars 65 forks source link

piv: let user specify pin policy instead of using attestation cert #65

Closed ericchiang closed 4 years ago

ericchiang commented 4 years ago

I'm still seeing issues with my older YubiKey, but it looks like it's not respecting the pin policy on the generated key. For example, settings PINPolicyNone results in a "security condition not satisfied" error.

Updates https://github.com/go-piv/piv-go/issues/60