summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/ssh-pkcs11-helper (follow)
Commit message (Collapse)AuthorAgeFilesLines
* use ssh-sk-helper for all security key signing operationsdjm2019-12-131-5/+2
| | | | | | | | | This extracts and refactors the client interface for ssh-sk-helper from ssh-agent and generalises it for use by the other programs. This means that most OpenSSH tools no longer need to link against libfido2 or directly interact with /dev/uhid* requested by, feedback and ok markus@
* directly support U2F/FIDO2 security keys in OpenSSH by linkingdjm2019-11-141-1/+4
| | | | | | against the (previously external) USB HID middleware. The dlopen() capability still exists for alternate middlewares, e.g. for Bluetooth, NFC and test/debugging.
* avoid compiling certain files that deeply depend on libcrypto whendjm2019-09-061-2/+2
| | | | WITH_OPENSSL isn't set
* Don't redefine Makefile choices which come correct from bsd.*.mkderaadt2018-07-251-4/+1
| | | | ok markus
* remove legacy buffer API emulation layer; ok djm@markus2018-07-091-2/+2
|
* group shared source files (e.g. SRCS_KEX) and allow compilation w/o OPENSSLmarkus2018-01-081-8/+3
| | | | ok djm@
* switch ssh-pkcs11-helper to new API; ok djm@markus2018-01-081-3/+3
|
* Replace ED25519's private SHA-512 implementation with a call to thenaddy2017-12-141-2/+2
| | | | | regular digest code. This speeds up compilation considerably. ok markus@
* ssh/lib hasn't worked towards our code-sharing goals for a quit while,deraadt2017-12-101-5/+12
| | | | | | | | | perhaps it is too verbose? Change each */Makefile to specifying exactly what sources that program requires, compiling it seperate. Maybe we'll iterate by sorting those into seperatable chunks, splitting up files which contain common code + server/client specific code, or whatnot. But this isn't one step, or we'd have done it a long time ago.. ok dtucker markus djm
* add manpage; ok djm@markus2010-02-091-2/+2
|
* replace our obsolete smartcard code with PKCS#11.markus2010-02-081-0/+18
ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev