Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up debug | 2019-01-21 | 1 | -5/+10 | |
| | | | | | | | | | | verbosity. Make ssh-agent turn on ssh-pkcs11-helper's verbosity when it is run in debug mode ("ssh-agent -d"), so we get to see errors from the PKCS#11 code. ok markus@ | ||||
* | cleanup pkcs#11 client code: use sshkey_new in instead of stack- | 2019-01-20 | 1 | -23/+42 | |
| | | | | | | allocating a sshkey work by markus@, ok djm@ | ||||
* | allow override of the pkcs#11 helper binary via $SSH_PKCS11_HELPER; | 2019-01-20 | 1 | -5/+7 | |
| | | | | | | needed for regress tests. work by markus@, ok me | ||||
* | add support for ECDSA keys in PKCS#11 tokens | 2019-01-20 | 1 | -11/+92 | |
| | | | | Work by markus@ and Pedro Martelletto, feedback and ok me@ | ||||
* | hold our collective noses and use the openssl-1.1.x API in OpenSSH; | 2018-09-13 | 1 | -6/+8 | |
| | | | | feedback and ok tb@ jsing@ markus@ | ||||
* | replace cast with call to sshbuf_mutable_ptr(); ok djm@ | 2018-07-09 | 1 | -2/+2 | |
| | |||||
* | pkcs11: switch to sshbuf API; ok djm@ | 2018-07-09 | 1 | -57/+79 | |
| | |||||
* | Add a couple of non-negativity checks to avoid close(-1). | 2018-02-05 | 1 | -2/+3 | |
| | | | | ok djm | ||||
* | switch from Key typedef with struct sshkey; ok djm@ | 2017-05-30 | 1 | -3/+3 | |
| | |||||
* | Pass (char *)NULL rather than (char *)0 to execl and execlp. | 2015-12-11 | 1 | -2/+2 | |
| | | | | ok dtucker@ | ||||
* | New key API: refactor key-related functions to be more library-like, | 2014-06-24 | 1 | -1/+3 | |
| | | | | | | | | | existing API is offered as a set of wrappers. with and ok markus@ Thanks also to Ben Hawkes, David Tomaschik, Ivan Fratric, Matthew Dempsky and Ron Bowes for a detailed review a few months ago. | ||||
* | bye, bye xfree(); ok markus@ | 2013-05-17 | 1 | -5/+5 | |
| | |||||
* | Fix a memory leak in pkcs11_rsa_private_encrypt(), reported by Jan Klemkow. | 2012-01-16 | 1 | -1/+3 | |
| | | | | | While there, be sure to buffer_clear() between send_msg() and recv_msg(). ok markus@ | ||||
* | Add $OpenBSD$ tags in comments, our portable-syncing scripts use these | 2010-02-24 | 1 | -0/+1 | |
| | |||||
* | replace our obsolete smartcard code with PKCS#11. | 2010-02-08 | 1 | -0/+229 | |
ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev |