<feed xmlns='http://www.w3.org/2005/Atom'>
<title>wireguard-openbsd/lib/libfido2, branch jd/queueboosts</title>
<subtitle>WireGuard implementation for the OpenBSD kernel</subtitle>
<id>https://git.zx2c4.com/wireguard-openbsd/atom/lib/libfido2?h=jd%2Fqueueboosts</id>
<link rel='self' href='https://git.zx2c4.com/wireguard-openbsd/atom/lib/libfido2?h=jd%2Fqueueboosts'/>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/'/>
<updated>2020-02-07T06:24:08Z</updated>
<entry>
<title>It appears we have come full-circle, where source code starts to use</title>
<updated>2020-02-07T06:24:08Z</updated>
<author>
<name>deraadt</name>
<email>deraadt@openbsd.org</email>
</author>
<published>2020-02-07T06:24:08Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=fb4bfcc27556e683088a1041869f4ba19e42a1df'/>
<id>urn:sha1:fb4bfcc27556e683088a1041869f4ba19e42a1df</id>
<content type='text'>
clang / "super new gcc" ism's, in particular ones which are totally
pointless as far as language goes.
Delete them.
</content>
</entry>
<entry>
<title>update to upstream libfido2 780ad3c25 (20120123)</title>
<updated>2020-02-07T00:57:49Z</updated>
<author>
<name>djm</name>
<email>djm@openbsd.org</email>
</author>
<published>2020-02-07T00:57:49Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=32a20e26b20487bf19bb6208590b368c9fa99453'/>
<id>urn:sha1:32a20e26b20487bf19bb6208590b368c9fa99453</id>
<content type='text'>
install manual pages

crank major

feedback &amp; ok jmc@ and naddy@
</content>
</entry>
<entry>
<title>Add fido(4), a HID driver for FIDO/U2F security keys</title>
<updated>2019-12-17T13:08:54Z</updated>
<author>
<name>reyk</name>
<email>reyk@openbsd.org</email>
</author>
<published>2019-12-17T13:08:54Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=1ba9f8e24a930839b47e1417a70ad7b6ffac57d7'/>
<id>urn:sha1:1ba9f8e24a930839b47e1417a70ad7b6ffac57d7</id>
<content type='text'>
While FIDO/U2F keys were already supported by the generic uhid(4)
driver, this driver adds the first step to tighten the security of
FIDO/U2F access.  Specifically, users don't need read/write access to
all USB/HID devices anymore and the driver also improves integration
with pledge(2) and unveil(2): It is pledge-friendly because it doesn't
require any ioctls to discover the device and unveil-friendly because
it uses a single /dev/fido/* directory for its device nodes.

It also allows to support FIDO/U2F in firefox without further
weakening the "sandbox" of the browser.  Firefox does not have a
proper privsep design and many operations, such as U2F access, are
handled directly by the main process.  This means that the browser's
"fat" main process needs direct read/write access to all USB HID
devices, at least on other operating systems.  With fido(4) we can
support security keys in Firefox under OpenBSD without such a
compromise.

With this change, libfido2 stops using the ioctl to query the device
vendor/product and just assumes "OpenBSD" "fido(4)" instead.  The
ioctl is still supported but there was no benefit in obtaining the
vendor product or name; it also allows to use libfido2 under pledge.

With feedback from deraadt@ and many others
OK kettenis@ djm@ and jmc@ for the manpage bits
</content>
</entry>
<entry>
<title>sync upstream commit with manpage fixes from jmc@</title>
<updated>2019-11-27T05:07:21Z</updated>
<author>
<name>djm</name>
<email>djm@openbsd.org</email>
</author>
<published>2019-11-27T05:07:21Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=d69e40a200165f17da76d46da5e21cae93ed1693'/>
<id>urn:sha1:d69e40a200165f17da76d46da5e21cae93ed1693</id>
<content type='text'>
&gt; commit 437896dcafc67d9596774c3bb9f97bfdb4810bb1
&gt; Author: pedro martelletto &lt;pedro@yubico.com&gt;
&gt; Date:   Wed Nov 20 09:38:22 2019 +0100
&gt;
&gt;     man: mop up dangling .Xr's; Jason McIntyre &lt;jmc@openbsd.org&gt;
</content>
</entry>
<entry>
<title>Sync documentation fixes from upstream:</title>
<updated>2019-11-19T23:32:09Z</updated>
<author>
<name>djm</name>
<email>djm@openbsd.org</email>
</author>
<published>2019-11-19T23:32:09Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=0da349e5daa599b65dd8246af2a9b27ea7531560'/>
<id>urn:sha1:0da349e5daa599b65dd8246af2a9b27ea7531560</id>
<content type='text'>
commit 99c4cb00b50b846e4ba2492f67d44171de8c7066
Author: pedro martelletto &lt;pedro@yubico.com&gt;
Date:   Mon Nov 18 16:55:37 2019 +0100

    documentation fixes

    ensure man pages are named after existing functions; pointed out
    by Jason McIntyre &lt;jmc@openbsd.org&gt;; thanks!
</content>
</entry>
<entry>
<title>our older gcc requires forced -std=c99</title>
<updated>2019-11-15T03:19:39Z</updated>
<author>
<name>deraadt</name>
<email>deraadt@openbsd.org</email>
</author>
<published>2019-11-15T03:19:39Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=72a2ad3f0abc02e5b8e9df2aa5dd9305ad92ce4a'/>
<id>urn:sha1:72a2ad3f0abc02e5b8e9df2aa5dd9305ad92ce4a</id>
<content type='text'>
</content>
</entry>
<entry>
<title>LDADD for libcbor and libusbhid</title>
<updated>2019-11-14T22:23:31Z</updated>
<author>
<name>djm</name>
<email>djm@openbsd.org</email>
</author>
<published>2019-11-14T22:23:31Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=dbec183d50e745874f577ee1d6da93f5488ff6b7'/>
<id>urn:sha1:dbec183d50e745874f577ee1d6da93f5488ff6b7</id>
<content type='text'>
</content>
</entry>
<entry>
<title>extra whitespace</title>
<updated>2019-11-14T21:31:31Z</updated>
<author>
<name>deraadt</name>
<email>deraadt@openbsd.org</email>
</author>
<published>2019-11-14T21:31:31Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=8f5f6d8fac31fe3e4a08f24556fcd07bbdf4512d'/>
<id>urn:sha1:8f5f6d8fac31fe3e4a08f24556fcd07bbdf4512d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>import libfido2 (git HEAD). This library allows communication with</title>
<updated>2019-11-14T21:14:10Z</updated>
<author>
<name>djm</name>
<email>djm@openbsd.org</email>
</author>
<published>2019-11-14T21:14:10Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=d75efeb73338e77fafc7850eff396e820d2d7935'/>
<id>urn:sha1:d75efeb73338e77fafc7850eff396e820d2d7935</id>
<content type='text'>
U2F/FIDO2 devices over USB.

feedback and "start the churn" deraadt@
</content>
</entry>
</feed>
