Updates for the Apex and flexSecure applets

Its been some time, but I finally got around to do a large refactor of GitHub - DangerousThings/flexsecure-applets: Collection of JavaCard applets for the FlexSecure, as well as build and testing scripts, and documentation. · GitHub .

In general, I pulled in all new updates from the authors of the various applets. I also wrote automated tests, and made sure the applets run well on our platform.

  • Update the Seedkeeper applet to version 2 - major overhaul, and now again compatible with the Seedkeeper apps.
  • Update the Status Keycard applet - a big update as well with many improvements.
  • Update the FIDO2 applet with some nice fixes for some edge-cases by @BryanJacobs .
  • Update the PGP applet, brings some efficiency improvements.
  • The CI is now based on a more recent Ubuntu version! This came with a whole rat’s tail of issues, but ultimately the CI tests and build are very stable now. You can look at the testing report for the most recent release at Drone | Continuous Integration .
  • The CI has gained automated tests for Satochip, Seedkeeper, and Keycard
  • Builds for the flexSecure are released at Release v0.20.1 · DangerousThings/flexsecure-applets · GitHub , for the Apex the updates have been already deployed to Fidesmo.

In addition, I have improved the docs at flexsecure-applets/docs/applets at master · DangerousThings/flexsecure-applets · GitHub quite a bit. Still, I call out to everyone reading this - more documentation help is needed and appreciated! Did you build something cool with an applet? Write it down! Did you setup some esoteric Linux encryption? Write it down! PRs welcome.

If you have any issues with the new releases, just post here and let me know, or open an issue in the repository.

Important: You do not need to update the applets you already have on your Apex or flexSecure if the current versions work for you. These updates are maintenance updates meant for new installs. Also, keep in mind that uninstalling and installing an applet again will delete all its associated keys.

11 Likes

Awesome, I’ll look over the changes in a bit. in the meantime, I’ve written up a guide on using gpg with an apex/flexsecure for ssh and git commit signing and submitted it as a PR. I’m not 100% certain on some of the formatting of it though so feel free to suggest changes to it.

2 Likes

Looked over the changes, I’m not familiar enough with the CI or testing tools to comment on that front, but the documentation looks great!

1 Like