![[BACK]](/icons/back.gif){kind=icon}
Up to [local] / src / usr.bin / ssh
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.11 / (download) - annotate - [select for diffs], Thu Oct 28 02:54:18 2021 UTC (2 years, 6 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE,
OPENBSD_7_5,
OPENBSD_7_4_BASE,
OPENBSD_7_4,
OPENBSD_7_3_BASE,
OPENBSD_7_3,
OPENBSD_7_2_BASE,
OPENBSD_7_2,
OPENBSD_7_1_BASE,
OPENBSD_7_1,
HEAD
Changes since 1.10: +12 -2 lines
Diff to previous 1.10 (colored)
When downloading resident keys from a FIDO token, pass back the user ID that was used when the key was created and append it to the filename the key is written to (if it is not the default). Avoids keys being clobbered if the user created multiple resident keys with the same application string but different user IDs. feedback Pedro Martelletto; ok markus NB. increments SSH_SK_VERSION_MAJOR
Revision 1.10 / (download) - annotate - [select for diffs], Fri Jan 10 23:43:26 2020 UTC (4 years, 4 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE,
OPENBSD_7_0,
OPENBSD_6_9_BASE,
OPENBSD_6_9,
OPENBSD_6_8_BASE,
OPENBSD_6_8,
OPENBSD_6_7_BASE,
OPENBSD_6_7
Changes since 1.9: +2 -2 lines
Diff to previous 1.9 (colored)
pass the log-on-stderr flag and log level through to ssh-sk-helper, making debugging a bit easier. ok markus@
Revision 1.9 / (download) - annotate - [select for diffs], Mon Jan 6 02:00:47 2020 UTC (4 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.8: +8 -6 lines
Diff to previous 1.8 (colored)
Extends the SK API to accept a set of key/value options for all operations. These are intended to future-proof the API a little by making it easier to specify additional fields for without having to change the API version for each. At present, only two options are defined: one to explicitly specify the device for an operation (rather than accepting the middleware's autoselection) and another to specify the FIDO2 username that may be used when generating a resident key. These new options may be invoked at key generation time via ssh-keygen -O This also implements a suggestion from Markus to avoid "int" in favour of uint32_t for the algorithm argument in the API, to make implementation of ssh-sk-client/helper a little easier. feedback, fixes and ok markus@
Revision 1.8 / (download) - annotate - [select for diffs], Mon Dec 30 09:23:28 2019 UTC (4 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.7: +13 -4 lines
Diff to previous 1.7 (colored)
SK API and sk-helper error/PIN passing Allow passing a PIN via the SK API (API major crank) and let the ssh-sk-helper API follow. Also enhance the ssh-sk-helper API to support passing back an error code instead of a complete reply. Will be used to signal "wrong PIN", etc. feedback and ok markus@
Revision 1.7 / (download) - annotate - [select for diffs], Mon Dec 30 09:21:16 2019 UTC (4 years, 4 months ago) by djm
Branch: MAIN
Changes since 1.6: +10 -1 lines
Diff to previous 1.6 (colored)
resident keys support in SK API Adds a sk_load_resident_keys() function to the security key API that accepts a security key provider and a PIN and returns a list of keys. Implement support for this in the usbhid middleware. feedback and ok markus@
Revision 1.6 / (download) - annotate - [select for diffs], Fri Dec 13 19:09:10 2019 UTC (4 years, 5 months ago) by djm
Branch: MAIN
Changes since 1.5: +2 -5 lines
Diff to previous 1.5 (colored)
use ssh-sk-helper for all security key signing operations This extracts and refactors the client interface for ssh-sk-helper from ssh-agent and generalises it for use by the other programs. This means that most OpenSSH tools no longer need to link against libfido2 or directly interact with /dev/uhid* requested by, feedback and ok markus@
Revision 1.5 / (download) - annotate - [select for diffs], Tue Nov 12 19:31:45 2019 UTC (4 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.4: +4 -4 lines
Diff to previous 1.4 (colored)
implement sshsk_ed25519_assemble(); ok djm
Revision 1.4 / (download) - annotate - [select for diffs], Tue Nov 12 19:31:18 2019 UTC (4 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored)
implement sshsk_ed25519_inner_sig(); ok djm
Revision 1.3 / (download) - annotate - [select for diffs], Tue Nov 12 19:30:50 2019 UTC (4 years, 6 months ago) by markus
Branch: MAIN
Changes since 1.2: +4 -4 lines
Diff to previous 1.2 (colored)
rename sshsk_ecdsa_sign() to sshsk_sign(); ok djm
Revision 1.2 / (download) - annotate - [select for diffs], Thu Oct 31 21:22:01 2019 UTC (4 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.1: +4 -1 lines
Diff to previous 1.1 (colored)
ssh-agent support for U2F/FIDO keys feedback & ok markus@
Revision 1.1 / (download) - annotate - [select for diffs], Thu Oct 31 21:16:20 2019 UTC (4 years, 6 months ago) by djm
Branch: MAIN
U2F/FIDO middleware interface Supports enrolling (generating) keys and signatures. feedback & ok markus@