wireguard-openbsd/lib/libfido2/src, branch jd/queueboostsWireGuard implementation for the OpenBSD kernelhttps://git.zx2c4.com/wireguard-openbsd/atom/lib/libfido2/src?h=jd%2Fqueueboosts2020-02-07T06:24:08ZIt appears we have come full-circle, where source code starts to use2020-02-07T06:24:08Zderaadtderaadt@openbsd.org2020-02-07T06:24:08Zurn:sha1:fb4bfcc27556e683088a1041869f4ba19e42a1df
clang / "super new gcc" ism's, in particular ones which are totally
pointless as far as language goes.
Delete them.
update to upstream libfido2 780ad3c25 (20120123)2020-02-07T00:57:49Zdjmdjm@openbsd.org2020-02-07T00:57:49Zurn:sha1:32a20e26b20487bf19bb6208590b368c9fa99453
install manual pages
crank major
feedback & ok jmc@ and naddy@
Add fido(4), a HID driver for FIDO/U2F security keys2019-12-17T13:08:54Zreykreyk@openbsd.org2019-12-17T13:08:54Zurn:sha1:1ba9f8e24a930839b47e1417a70ad7b6ffac57d7
While FIDO/U2F keys were already supported by the generic uhid(4)
driver, this driver adds the first step to tighten the security of
FIDO/U2F access. Specifically, users don't need read/write access to
all USB/HID devices anymore and the driver also improves integration
with pledge(2) and unveil(2): It is pledge-friendly because it doesn't
require any ioctls to discover the device and unveil-friendly because
it uses a single /dev/fido/* directory for its device nodes.
It also allows to support FIDO/U2F in firefox without further
weakening the "sandbox" of the browser. Firefox does not have a
proper privsep design and many operations, such as U2F access, are
handled directly by the main process. This means that the browser's
"fat" main process needs direct read/write access to all USB HID
devices, at least on other operating systems. With fido(4) we can
support security keys in Firefox under OpenBSD without such a
compromise.
With this change, libfido2 stops using the ioctl to query the device
vendor/product and just assumes "OpenBSD" "fido(4)" instead. The
ioctl is still supported but there was no benefit in obtaining the
vendor product or name; it also allows to use libfido2 under pledge.
With feedback from deraadt@ and many others
OK kettenis@ djm@ and jmc@ for the manpage bits
import libfido2 (git HEAD). This library allows communication with2019-11-14T21:14:10Zdjmdjm@openbsd.org2019-11-14T21:14:10Zurn:sha1:d75efeb73338e77fafc7850eff396e820d2d7935
U2F/FIDO2 devices over USB.
feedback and "start the churn" deraadt@