Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | sync ssh-keysign, ssh-keygen and some dependencies to the new | 2015-01-15 | 1 | -13/+13 | |
| | | | | buffer/key API; mostly mechanical, ok markus@ | ||||
* | New key API: refactor key-related functions to be more library-like, | 2014-06-24 | 1 | -2/+2 | |
| | | | | | | | | | existing API is offered as a set of wrappers. with and ok markus@ Thanks also to Ben Hawkes, David Tomaschik, Ivan Fratric, Matthew Dempsky and Ron Bowes for a detailed review a few months ago. | ||||
* | revert __bounded change; it causes way more problems for portable than | 2014-05-02 | 1 | -2/+2 | |
| | | | | it solves; pointed out by dtucker@ | ||||
* | use __bounded(...) attribute recently added to sys/cdefs.h instead of | 2014-03-26 | 1 | -2/+2 | |
| | | | | | | longform __attribute__(__bounded(...)); for brevity and a warning free compilation with llvm/clan | ||||
* | add missing braces found by pedro | 2013-11-13 | 1 | -2/+2 | |
| | |||||
* | from portable: s/true/true_val/ to avoid name collisions on dump platforms | 2013-11-06 | 1 | -3/+3 | |
| | |||||
* | support pkcs#11 tokes that only provide x509 zerts instead of raw pubkeys; | 2013-11-02 | 1 | -28/+98 | |
| | | | | fixes bz#1908; based on patch from Laurent Barbe; ok djm | ||||
* | fix pointer-signedness warnings from clang/llvm-3.3; "seems nice" deraadt@ | 2013-07-12 | 1 | -6/+6 | |
| | |||||
* | bye, bye xfree(); ok markus@ | 2013-05-17 | 1 | -15/+12 | |
| | |||||
* | check length of value returned C_GetAttributValue for != 0 | 2010-06-08 | 1 | -2/+8 | |
| | | | | from mdrtbugzilla@codefive.co.uk; bugzilla #1773; ok dtucker@ | ||||
* | retry lookup for private key if there's no matching key with CKA_SIGN | 2010-04-15 | 1 | -11/+34 | |
| | | | | | attribute enabled; this fixes fixes MuscleCard support (bugzilla #1736) ok djm@ | ||||
* | Add $OpenBSD$ tags in comments, our portable-syncing scripts use these | 2010-02-24 | 1 | -0/+1 | |
| | |||||
* | dlclose() call should also be #ifdef HAVE_DLOPEN | 2010-02-21 | 1 | -0/+2 | |
| | |||||
* | unbreak build for NOPIC systems; noticed, help and ok deraadt@ | 2010-02-20 | 1 | -0/+9 | |
| | |||||
* | replace our obsolete smartcard code with PKCS#11. | 2010-02-08 | 1 | -0/+544 | |
ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev |