summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/ssh-pkcs11-client.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* use the new variant log macros instead of prepending __func__ anddjm2020-10-181-27/+26
| | | | appending ssh_err(r) manually; ok markus@
* expose PKCS#11 key labels/X.509 subjects as commentsdjm2020-01-251-3/+11
| | | | | | | | | | | Extract the key label or X.509 subject string when PKCS#11 keys are retrieved from the token and plumb this through to places where it may be used as a comment. based on https://github.com/openssh/openssh-portable/pull/138 by Danielle Church feedback and ok markus@
* add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up debugdjm2019-01-211-5/+10
| | | | | | | | | | verbosity. Make ssh-agent turn on ssh-pkcs11-helper's verbosity when it is run in debug mode ("ssh-agent -d"), so we get to see errors from the PKCS#11 code. ok markus@
* cleanup pkcs#11 client code: use sshkey_new in instead of stack-djm2019-01-201-23/+42
| | | | | | allocating a sshkey work by markus@, ok djm@
* allow override of the pkcs#11 helper binary via $SSH_PKCS11_HELPER;djm2019-01-201-5/+7
| | | | | | needed for regress tests. work by markus@, ok me
* add support for ECDSA keys in PKCS#11 tokensdjm2019-01-201-11/+92
| | | | Work by markus@ and Pedro Martelletto, feedback and ok me@
* hold our collective noses and use the openssl-1.1.x API in OpenSSH;djm2018-09-131-6/+8
| | | | feedback and ok tb@ jsing@ markus@
* replace cast with call to sshbuf_mutable_ptr(); ok djm@markus2018-07-091-2/+2
|
* pkcs11: switch to sshbuf API; ok djm@markus2018-07-091-57/+79
|
* Add a couple of non-negativity checks to avoid close(-1).tb2018-02-051-2/+3
| | | | ok djm
* switch from Key typedef with struct sshkey; ok djm@markus2017-05-301-3/+3
|
* Pass (char *)NULL rather than (char *)0 to execl and execlp.mmcc2015-12-111-2/+2
| | | | ok dtucker@
* New key API: refactor key-related functions to be more library-like,djm2014-06-241-1/+3
| | | | | | | | | existing API is offered as a set of wrappers. with and ok markus@ Thanks also to Ben Hawkes, David Tomaschik, Ivan Fratric, Matthew Dempsky and Ron Bowes for a detailed review a few months ago.
* bye, bye xfree(); ok markus@djm2013-05-171-5/+5
|
* Fix a memory leak in pkcs11_rsa_private_encrypt(), reported by Jan Klemkow.miod2012-01-161-1/+3
| | | | | While there, be sure to buffer_clear() between send_msg() and recv_msg(). ok markus@
* Add $OpenBSD$ tags in comments, our portable-syncing scripts use thesedjm2010-02-241-0/+1
|
* replace our obsolete smartcard code with PKCS#11.markus2010-02-081-0/+229
ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev