 Jeff Johnson
|
94068e17b6
Backport 473201783f732ca8b0ec528b56aa55fa0d8cf717
|
vor 3 Jahren |
|
Jeff Johnson
|
2759135243
multi: Port upstream patches: 2/17/21 -> 2/24/21
|
vor 3 Jahren |
 djm@openbsd.org
|
c767735241
upstream: when writing an attestation blob for a FIDO key, record all
|
vor 4 Jahren |
|
djm@openbsd.org
|
b649b3daa6
upstream: preserve verify-required for resident FIDO keys
|
vor 4 Jahren |
|
djm@openbsd.org
|
59d2de956e
upstream: when signing a challenge using a FIDO toke, perform the
|
vor 4 Jahren |
 markus@openbsd.org
|
1b378c0d98
upstream: return correct error in sshsk_ed25519_sig; ok djm
|
vor 4 Jahren |
|
djm@openbsd.org
|
dd992520be
upstream: better error message when trying to use a FIDO key
|
vor 4 Jahren |
 naddy@openbsd.org
|
a47f6a6c0e
upstream: Replace "security key" with "authenticator" in program
|
vor 4 Jahren |
|
djm@openbsd.org
|
24c0f752ad
upstream: changes to support FIDO attestation
|
vor 4 Jahren |
|
djm@openbsd.org
|
59d01f1d72
upstream: improve the error message for u2f enrollment errors by
|
vor 4 Jahren |
 Darren Tucker
|
429170f273
Wrap stdint.h inside HAVE_STDINT_H.
|
vor 5 Jahren |
|
djm@openbsd.org
|
c312ca077c
upstream: Extends the SK API to accept a set of key/value options
|
vor 5 Jahren |
|
djm@openbsd.org
|
43ce96427b
upstream: translate and return error codes; retry on bad PIN
|
vor 5 Jahren |
|
djm@openbsd.org
|
d433596736
upstream: improve some error messages; ok markus@
|
vor 5 Jahren |
|
djm@openbsd.org
|
c54cd1892c
upstream: SK API and sk-helper error/PIN passing
|
vor 5 Jahren |
|
djm@openbsd.org
|
14cea36df3
upstream: resident keys support in SK API
|
vor 5 Jahren |
|
djm@openbsd.org
|
2fe05fcb4a
upstream: Factor out parsing of struct sk_enroll_response
|
vor 5 Jahren |
|
djm@openbsd.org
|
b52ec0ba39
upstream: use ssh-sk-helper for all security key signing operations
|
vor 5 Jahren |
|
djm@openbsd.org
|
d8b2838c5d
upstream: remove stray semicolon after closing brace of function;
|
vor 5 Jahren |
|
djm@openbsd.org
|
a70d92f236
upstream: adjust on-wire signature encoding for ecdsa-sk keys to
|
vor 5 Jahren |
|
naddy@openbsd.org
|
723a536986
upstream: add the missing WITH_OPENSSL ifdefs after the ED25519-SK
|
vor 5 Jahren |
|
djm@openbsd.org
|
9a1225e8ca
upstream: tweak debug message
|
vor 5 Jahren |
|
djm@openbsd.org
|
4103a3ec7c
upstream: a little debug() in the security key interface
|
vor 5 Jahren |
|
djm@openbsd.org
|
6bff9521ab
upstream: directly support U2F/FIDO2 security keys in OpenSSH by
|
vor 5 Jahren |
|
markus@openbsd.org
|
dffd02e297
upstream: fix check for sig_s; noted by qsa at qualys.com
|
vor 5 Jahren |
|
djm@openbsd.org
|
fccff339ca
upstream: allow an empty attestation certificate returned by a
|
vor 5 Jahren |
|
markus@openbsd.org
|
b556cc3cbf
upstream: remove extra layer for ed25519 signature; ok djm@
|
vor 5 Jahren |
|
markus@openbsd.org
|
3fcf69ace1
upstream: check sig_r and sig_s for ssh-sk keys; ok djm
|
vor 5 Jahren |
|
markus@openbsd.org
|
fd1a3b5e38
upstream: update sk-api to version 2 for ed25519 support; ok djm
|
vor 5 Jahren |
|
markus@openbsd.org
|
7c32b51edb
upstream: implement sshsk_ed25519_assemble(); ok djm
|
vor 5 Jahren |
