card-jpki: Use sc_file_free() to release virtual MF

.clang-format

@@ -0,0 +1,47 @@
+---
+BasedOnStyle: LLVM
+# defaults from LLVM
+# BreakBeforeBraces: Attach
+# AllowShortIfStatementsOnASingleLine: Never
+# IndentCaseLabels: false
+# AlignAfterOpenBracket: Align
+# AlignTrailingComments: true
+# MaxEmptyLinesToKeep: 1
+# ReflowComments: falsedefault
+# SortIncludes: true
+# BreakBeforeBinaryOperators: None
+# BraceWrapping:
+#   AfterClass:      false
+#   AfterControlStatement: false
+#   AfterFunction:   false
+#   AfterNamespace:  false
+#   BeforeCatch:     false
+#   BeforeElse:      false
+#   IndentBraces:    false
+
+# OpenSC modifications
+TabWidth: 8
+IndentWidth: 8
+ContinuationIndentWidth: 16
+AlignAfterOpenBracket: DontAlign
+UseTab: Always
+AlignConsecutiveMacros: true
+AlignEscapedNewlines: DontAlign
+AllowShortFunctionsOnASingleLine: None
+AlwaysBreakAfterReturnType: AllDefinitions
+## This prevents reflowing intentionally short lines but
+##  it can be allowed only after we will have some baseline
+ColumnLimit: 0
+#ColumnLimit: 110
+IndentCaseBlocks: false
+AlignArrayOfStructures: Left
+
+BreakBeforeBraces: Custom
+BraceWrapping:
+  AfterObjCDeclaration: true
+  AfterUnion:      true
+  AfterFunction:   true
+
+---
+Language: Json
+DisableFormat: true

.editorconfig

@@ -0,0 +1,20 @@
+root = true
+
+[*]
+charset = utf-8
+max_line_length = 110
+end_of_line = lf
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.{c,h,sh}]
+indent_style = tab
+tab_width = 8
+
+[{Makefile.am,configure.ac}]
+indent_style = tab
+tab_width = 8
+
+[*.{yml,yaml}]
+indent_style = space
+indent_size = 2

.github/.codeql.yml

@@ -0,0 +1,7 @@
+name: "CodeQL configuration file"
+
+query-filters:
+  - exclude:
+      # This reports all the uses of the DES, but this is needed for
+      # interoperability with cards not supporting AES
+      id: cpp/weak-cryptographic-algorithm

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,103 @@
+name: Bug report
+description: Report a problem or unexpected behavior in OpenSC
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for reporting a bug in OpenSC!
+        Please fill out the sections below to help us diagnose the issue.
+        See https://github.com/OpenSC/OpenSC/wiki/How-to-write-a-good-bug-report on what to include here.
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Describe the bug
+      description: A clear and concise description of what the bug is.
+      placeholder: What went wrong?
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      description: How can we reproduce the issue?
+      placeholder: |
+        1.
+        2.
+        3.
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      description: What you expected to happen.
+    validations:
+      required: true
+
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+      description: What actually happened.
+    validations:
+      required: true
+
+  - type: input
+    id: opensc_version
+    attributes:
+      label: OpenSC version
+      placeholder: e.g. 0.25.1
+      description: Only the latest release and development versions are supported.
+    validations:
+      required: true
+
+  - type: input
+    id: os
+    attributes:
+      label: Operating system
+      placeholder: e.g. Ubuntu 22.04, Windows 11, macOS 14
+    validations:
+      required: true
+
+  - type: input
+    id: card
+    attributes:
+      label: Smart card model or security token
+      placeholder: Try `opensc-tool -n` if unkown
+
+  - type: input
+    id: application
+    attributes:
+      label: Application used with smart card
+      placeholder: e.g. Firefox, Windows Logon, Apple Mail, ssh, ...
+
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs and debug output
+      description: |
+        Please include relevant logs or debug output.
+        You can enable verbose output setting the environment variable `OPENSC_DEBUG` to `3`.
+        - `set OPENSC_DEBUG="3"` (Windows CMD)
+        - `export OPENSC_DEBUG="3"` (Unix shell)
+
+        Useful commands for getting debug information are:
+        - `opensc-tool --atr --name -vvv`
+        - `pkcs11-tool --test --login`
+        - `certutil -scinfo` (Windows only)
+        - `sc_auth identities` (macOS only)
+      render: shell
+
+  - type: checkboxes
+    id: checklist
+    attributes:
+      label: Checklist
+      options:
+        - label: I am using a supported OpenSC version
+          required: true
+        - label: I have searched existing issues to avoid duplicates
+          required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+
+contact_links:
+  - name: Start a discussion
+    url: https://github.com/OpenSC/OpenSC/discussions/new/choose
+    about: |
+      Ask questions, start discussions, or propose ideas that don't belong in an issue.
+
+  - name: Use the mailing lists
+    url: https://github.com/OpenSC/OpenSC/wiki/Mailing-lists
+    about: Write us an email or read the archive.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,38 @@
+name: Feature request
+description: Suggest an enhancement or new feature for OpenSC
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Have an idea to improve OpenSC? We'd love to hear it.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem statement
+      description: What problem does this feature solve?
+    validations:
+      required: true
+
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed solution
+      description: Describe the solution you'd like to see.
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Any alternative solutions or workarounds you've considered.
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: |
+        Related standards, card types, use cases, or references.
+        For new smart cards, include the output of `opensc-tool --atr --name -vvv`

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,17 @@
+<!--
+Thank you for your pull request.
+
+If this fixes a GitHub issue, make sure to have a line saying 'Fixes #XXXX'
+(without quotes) in the commit message.
+
+Mention which card(s) are used during testing. To get the name of your card,
+run this command: `opensc-tool -n`
+-->
+
+##### Checklist
+<!-- Remove items that do not apply. For completed items, change [ ] to [x]. -->
+- [ ] Documentation is added or updated
+- [ ] New files have a LGPL 2.1 license statement
+- [ ] PKCS#11 module is tested
+- [ ] Windows minidriver is tested
+- [ ] macOS token is tested

.github/add_signing_key.sh

@@ -0,0 +1,33 @@
+#!/bin/sh
+
+set -ex -o xtrace
+
+pushd .github/
+KEY_CHAIN=mac-build.keychain
+
+# Create the keychain with a password
+security create-keychain -p travis $KEY_CHAIN
+
+# Make the custom keychain default, so xcodebuild will use it for signing
+security default-keychain -s $KEY_CHAIN
+
+# Unlock the keychain for one hour
+security unlock-keychain -p travis $KEY_CHAIN
+security set-keychain-settings -t 3600 -u $KEY_CHAIN
+
+# Add certificates to keychain and allow codesign to access them
+curl -L https://developer.apple.com/certificationauthority/AppleWWDRCA.cer > AppleWWDRCA.cer
+security import AppleWWDRCA.cer \
+    -k ~/Library/Keychains/$KEY_CHAIN \
+    -T /usr/bin/codesign -T /usr/bin/productsign
+security import DeveloperIDApplication.p12 \
+    -k ~/Library/Keychains/$KEY_CHAIN -P $KEY_PASSWORD \
+    -T /usr/bin/codesign -T /usr/bin/productsign
+security import DeveloperIDInstaller.p12 \
+    -k ~/Library/Keychains/$KEY_CHAIN -P $KEY_PASSWORD \
+    -T /usr/bin/codesign -T /usr/bin/productsign
+security unlock-keychain -p travis $KEY_CHAIN
+
+# https://docs.travis-ci.com/user/common-build-problems/#mac-macos-sierra-1012-code-signing-errors
+security set-key-partition-list -S apple-tool:,apple: -s -k travis $KEY_CHAIN
+popd