![[BACK]](/icons/back.gif){kind=icon}
Up to [local] / src / usr.bin / ssh
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.14 / (download) - annotate - [select for diffs], Sun Dec 4 11:03:11 2022 UTC (17 months, 1 week ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE,
OPENBSD_7_5,
OPENBSD_7_4_BASE,
OPENBSD_7_4,
OPENBSD_7_3_BASE,
OPENBSD_7_3,
HEAD
Changes since 1.13: +1 -2 lines
Diff to previous 1.13 (colored)
Remove duplicate includes. Patch from AtariDreams via github PR#364.
Revision 1.13 / (download) - annotate - [select for diffs], Fri Apr 29 03:16:48 2022 UTC (2 years ago) by dtucker
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE,
OPENBSD_7_2
Changes since 1.12: +2 -1 lines
Diff to previous 1.12 (colored)
Don't leak SK device. Patch from Pedro Martelletto via github PR#316. ok djm@
Revision 1.12 / (download) - annotate - [select for diffs], Thu Oct 28 02:54:18 2021 UTC (2 years, 6 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE,
OPENBSD_7_1
Changes since 1.11: +18 -15 lines
Diff to previous 1.11 (colored)
When downloading resident keys from a FIDO token, pass back the user ID that was used when the key was created and append it to the filename the key is written to (if it is not the default). Avoids keys being clobbered if the user created multiple resident keys with the same application string but different user IDs. feedback Pedro Martelletto; ok markus NB. increments SSH_SK_VERSION_MAJOR
Revision 1.11 / (download) - annotate - [select for diffs], Sun Oct 18 11:32:02 2020 UTC (3 years, 6 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE,
OPENBSD_7_0,
OPENBSD_6_9_BASE,
OPENBSD_6_9
Changes since 1.10: +24 -23 lines
Diff to previous 1.10 (colored)
use the new variant log macros instead of prepending __func__ and appending ssh_err(r) manually; ok markus@
Revision 1.10 / (download) - annotate - [select for diffs], Tue May 26 01:59:46 2020 UTC (3 years, 11 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE,
OPENBSD_6_8
Changes since 1.9: +8 -5 lines
Diff to previous 1.9 (colored)
fix memleak of signature; from Pedro Martelletto
Revision 1.9 / (download) - annotate - [select for diffs], Sat Jan 25 23:13:09 2020 UTC (4 years, 3 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE,
OPENBSD_6_7
Changes since 1.8: +2 -2 lines
Diff to previous 1.8 (colored)
improve the error message for u2f enrollment errors by making ssh-keygen be solely responsible for printing the error message and convertint some more common error responses from the middleware to a useful ssherr.h status code. more detail remains visible via -v of course. also remove indepedent copy of sk-api.h declarations in sk-usbhid.c and just include it. feedback & ok markus@
Revision 1.8 / (download) - annotate - [select for diffs], Fri Jan 10 23:43:26 2020 UTC (4 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.7: +12 -7 lines
Diff to previous 1.7 (colored)
pass the log-on-stderr flag and log level through to ssh-sk-helper, making debugging a bit easier. ok markus@
Revision 1.7 / (download) - annotate - [select for diffs], Mon Jan 6 02:00:46 2020 UTC (4 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.6: +27 -18 lines
Diff to previous 1.6 (colored)
Extends the SK API to accept a set of key/value options for all operations. These are intended to future-proof the API a little by making it easier to specify additional fields for without having to change the API version for each. At present, only two options are defined: one to explicitly specify the device for an operation (rather than accepting the middleware's autoselection) and another to specify the FIDO2 username that may be used when generating a resident key. These new options may be invoked at key generation time via ssh-keygen -O This also implements a suggestion from Markus to avoid "int" in favour of uint32_t for the algorithm argument in the API, to make implementation of ssh-sk-client/helper a little easier. feedback, fixes and ok markus@
Revision 1.6 / (download) - annotate - [select for diffs], Mon Dec 30 09:23:28 2019 UTC (4 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.5: +84 -22 lines
Diff to previous 1.5 (colored)
SK API and sk-helper error/PIN passing Allow passing a PIN via the SK API (API major crank) and let the ssh-sk-helper API follow. Also enhance the ssh-sk-helper API to support passing back an error code instead of a complete reply. Will be used to signal "wrong PIN", etc. feedback and ok markus@
Revision 1.5 / (download) - annotate - [select for diffs], Mon Dec 30 09:21:59 2019 UTC (4 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.4: +48 -1 lines
Diff to previous 1.4 (colored)
implement loading of resident keys in ssh-sk-helper feedback and ok markus@
Revision 1.4 / (download) - annotate - [select for diffs], Fri Dec 13 19:11:14 2019 UTC (4 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.3: +121 -38 lines
Diff to previous 1.3 (colored)
perform security key enrollment via ssh-sk-helper too. This means that ssh-keygen no longer needs to link against ssh-sk-helper, and only ssh-sk-helper needs libfido2 and /dev/uhid* access; feedback & ok markus@
Revision 1.3 / (download) - annotate - [select for diffs], Tue Nov 12 19:33:08 2019 UTC (4 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.2: +2 -2 lines
Diff to previous 1.2 (colored)
enable ed25519 support; ok djm
Revision 1.2 / (download) - annotate - [select for diffs], Tue Nov 12 19:30:50 2019 UTC (4 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.1: +2 -2 lines
Diff to previous 1.1 (colored)
rename sshsk_ecdsa_sign() to sshsk_sign(); ok djm
Revision 1.1 / (download) - annotate - [select for diffs], Thu Oct 31 21:22:01 2019 UTC (4 years, 6 months ago) by djm
Branch: MAIN
ssh-agent support for U2F/FIDO keys feedback & ok markus@