Nitrokey App Versions Save

This is a quick release with minor bugs fixed:

• Fixed Unencrypted Volume handling on Storage v0.52.
• Updated translations. Also added Italian language file.
• Now builds correctly on Qt 5.11.

AppImage rebuilt according to the tips from #351 - it should work now on broader Linux variety.

Snapcraft package released as well. Ubuntu's PPA not updated yet.

This release features mostly GUI improvements:

• All images are replaced with SVG counterparts for high-res desktops.
• Settings tab is now available and it is possible to change application's language there.
• Main window added to counter lack of system tray issue.
• Added buttons for common operations in the main window Overview tab.

This release requires new Qt modules:

• Qt Svg
• Qt Concurrent (CMake is not checking this one)

and libnitrokey 3.3 to compile and run (it won't compile with 3.2, though CMake will not warn due to missing check).

Binary details: AppImage was built on Ubuntu 14.04, though running it there makes application's images invisible. Once fixed, the binary will be replaced by a working one. Follow #340 for details. Windows and macOS binaries are code-signed. Windows, AppImage and Snapcraft binaries were built using nitrokey-app.build's Docker containers. Sha256 sums file is signed with [email protected] GPG key, ID: 868184069239FF65DE0BCD7D D9BAE35991DE5B22. ID can be compared with the one on the download site.

Full changelog should be uploaded later.

Update for the maintainers: There might be some issues with the CMake build - see #346.

Test release of latest changes.

--

Update: added AppImage build done on Ubuntu 14.04.

For MacOS and Linux operating systems please use binaries from v1.2 release.

This release contains only the changes for Windows due to issues with detecting the devices by the App. It contains merged hidapi patch presented in v1.2. Binary is compiled from sources marked v1.2.1.

v1.2.1 (2018-01-17)

Full Changelog

Fixed bugs:

• v.1.2-beta.4 not cooperating with VM/Virtualbox (Windows'es 7/10 do not detect the device) #300

Closed issues:

• Windows 10 - device is disconnecting after 30-60 seconds #252

Brief summary of key changes in v1.2 release:

• Support OTP with special characters,
• Faster communication speed with the device,
• Better communication stability.

Binaries for MacOS and Windows are code-signed. Minimal MacOS version is 10.10. Available also on Snap (Snapcraft). Linux binaries are built on Ubuntu 16.04. Builds on Launchpad's PPA (Ubuntu) should be available after the holidays.

-- Known issues: Binary for Windows (nitrokey-app-v1.2.exe) is not detecting devices on both Windows 7 and 10. Fix is released as v1.2.1 - please use binary from there. Issue is only Windows-related and does not affect MacOS or Linux.

Full Changelog history

v1.2 (2017-12-20)

Full Changelog

Closed issues:

• Wrong disconnection message on real disconnection #258
• macOS 10.12.5 - wrong information in the About Box - encrypted volume #248
• Setting TOTP secret with Paypal is not working #239

v1.2-beta.4 (2017-12-01)

Full Changelog

Fixed bugs:

• OTP generation always asks for User PIN #250

Closed issues:

• Application icon looks poor #297
• Warning for MacOS and Storage v0.48 #287
• OTP with Tutanota Mail (codec expects padded input string) #280
• nitrokey-app doesn't compile with latest libnitrokey #279
• About-Box confusing with NK Pro #272
• Crash on invalid base32 OTP secret #240

This release contains:

• re-added Storage v0.45 workaround for unlocking encrypted volume (active only for v0.45, not needed for later versions)
• fix for accepting OTP secrets with different formats and paddings
• high DPI fixes for some forms/windows (may not work)
• French translation
• high-resolution icon for Windows executable

Known issues:

• DPI fix may not work or might make the App look worse
• wrong version set: v1.2-beta.3 instead of proper v1.2-beta.4

Linux packages (deb and rpm) created using CPack, compiled under Ubuntu 17.10 with GCC 7.2.0.

Edit: added .deb and .rpm packages built on Ubuntu 16.04 LTS with removed activating high-dpi attribute (which needed Qt 5.6 while Qt 5.5 is provided).

Tag created specifically for packaging purposes. No new bugfixes or enhancements are added since v1.2-beta.2. Please download binaries from there.

This is a test release with fixes to communication issues occurring on MacOS system. Also contains fixes for:

• Issue with windows not gaining focus on Mac #247
• Allows to be compiled with QtCreator (both Nitrokey-App and libnitrokey, without CMake proxy)
• Tray menu not working correctly when SD clearing starts
• Configuration of Passwordsafe - wrong language shown #265
• Removed communication workarounds for Storage v0.45

Communication speed with device is doubled (-s 40) and the log is printed to console by default (--dl 4).

Release was tested with:

• Storage v0.47 (all is working) and v0.48 on MacOS (https://github.com/Nitrokey/nitrokey-storage-firmware/issues/44 - sometimes unlocking encrypted volume returns WRONG_PASSWORD error code from the device)
• Storage v0.48 on Ubuntu 16.10 and Windows 8.1 (all seems OK)
• Storage v0.45 - on all tested OSes (Windows 8.1, Ubuntu 16.10, MacOS 10.12.6) it was possible to enable firmware update. Unlocking PWS and encrypted volume sometimes worked (that is there was a need to retry the action after device reinsertion).

This is a candidate for the next release. Binaries for MacOS and Windows are signed. RPM and DEB packages were created by CMake's CPack.

Test release with:

• workaround for freezing Storage during the Application start-up (Windows)
• proper first time initialization handling - SD card secure overwrite (macOS)

Known issues:

• invalid menu in tray during initialization

For binaries verification please follow instructions from previous release.

Edit (20170901): Added code-signed binary for macOS, compiled on Qt5.9. Verification:

$ codesign --verify nitrokey-app-v1.2-beta.1-qt5.9-signed.dmg -v
nitrokey-app-v1.2-beta.1-qt5.9-signed.dmg: valid on disk                          
nitrokey-app-v1.2-beta.1-qt5.9-signed.dmg: satisfies its Designated Requirement   
$ spctl -vvvvvv -a nitrokey-app-v1.2-beta.1-qt5.9-signed.dmg                                    
nitrokey-app-v1.2-beta.1-qt5.9-signed.dmg: rejected (the code is valid but does not seem to be an app)  
origin=Developer ID Application: Nitrokey UG (haftungsbeschränkt) (3EP5S3J3HH)                      

After installation (here for v1.1; similarly for other versions):

$ codesign --verify /Applications/Nitrokey\ App\ v1.1/ -v                                                                                                                                                                             /Applications/Nitrokey App v1.1/: valid on disk                                                                                                                                                                                               
/Applications/Nitrokey App v1.1/: satisfies its Designated Requirement                                                                                     
$ spctl -vvvv -a /Applications/Nitrokey\ App\ v1.1/                                                                                                                                                                  
Nitrokey App v1.1/: accepted                                                                                                                                                                                                                  
source=Developer ID                                                                                                                                                                                                                           
origin=Developer ID Application: Nitrokey UG (haftungsbeschränkt) (3EP5S3J3HH) 

v1.1 (2017-05-15)

Full Changelog

Implemented enhancements:

• Sign using Apple's Binary Signing #16

Fixed bugs:

• Log level set too verbose by default #244
• No device is detected on Windows #243
• Cannot get PIN-protected OTP code on NK Pro 0.8 #242

Closed issues:

• Improper temporary password #245
• Update translations #241
• Hidden volume is volatile - check on Mac #37
• Vector Icon #20

Notes

Binary for Windows is code-signed and it contains logging functionality by default, however with secrets cut out. More binaries will be provided here incrementally. Ubuntu and snapcraft binaries are provided in proper channells. If you have any issues with code-signed OSX binary please use the unsigned one.

Verifying under Windows (8.1)

1. Right click on the binary
2. Select Properties
3. Select Digital Signatures tab
4. Select details of the Nitrokey signature
5. There should be a message: This digital signature is OK. If the file was changed during the transit there will be message: This digital signature is not valid..

Verifying under Linux

# validating rpm file
gpg --import szczepan_at_nitrokey.gpg 
sha512sum --check nitrokey-app-1.1-Linux.rpm.sha512 
gpg --verify nitrokey-app-1.1-Linux.rpm.asc 

Verifying under OSX

gpg --import szczepan_at_nitrokey.gpg 
gpg --verify nitrokey-app-v1.1.dmg.asc
gsha512sum --check nitrokey-app-v1.1.dmg.sha512

Edit (20170901): Added code-signed binary for macOS, compiled on Qt5.9.