summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/ssh-pkcs11.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* sync ssh-keysign, ssh-keygen and some dependencies to the newdjm2015-01-151-13/+13
| | | | buffer/key API; mostly mechanical, ok markus@
* New key API: refactor key-related functions to be more library-like,djm2014-06-241-2/+2
| | | | | | | | | existing API is offered as a set of wrappers. with and ok markus@ Thanks also to Ben Hawkes, David Tomaschik, Ivan Fratric, Matthew Dempsky and Ron Bowes for a detailed review a few months ago.
* revert __bounded change; it causes way more problems for portable thandjm2014-05-021-2/+2
| | | | it solves; pointed out by dtucker@
* use __bounded(...) attribute recently added to sys/cdefs.h instead ofdjm2014-03-261-2/+2
| | | | | | longform __attribute__(__bounded(...)); for brevity and a warning free compilation with llvm/clan
* add missing braces found by pedromarkus2013-11-131-2/+2
|
* from portable: s/true/true_val/ to avoid name collisions on dump platformsdjm2013-11-061-3/+3
|
* support pkcs#11 tokes that only provide x509 zerts instead of raw pubkeys;markus2013-11-021-28/+98
| | | | fixes bz#1908; based on patch from Laurent Barbe; ok djm
* fix pointer-signedness warnings from clang/llvm-3.3; "seems nice" deraadt@djm2013-07-121-6/+6
|
* bye, bye xfree(); ok markus@djm2013-05-171-15/+12
|
* check length of value returned C_GetAttributValue for != 0markus2010-06-081-2/+8
| | | | from mdrtbugzilla@codefive.co.uk; bugzilla #1773; ok dtucker@
* retry lookup for private key if there's no matching key with CKA_SIGNmarkus2010-04-151-11/+34
| | | | | attribute enabled; this fixes fixes MuscleCard support (bugzilla #1736) ok djm@
* Add $OpenBSD$ tags in comments, our portable-syncing scripts use thesedjm2010-02-241-0/+1
|
* dlclose() call should also be #ifdef HAVE_DLOPENderaadt2010-02-211-0/+2
|
* unbreak build for NOPIC systems; noticed, help and ok deraadt@markus2010-02-201-0/+9
|
* replace our obsolete smartcard code with PKCS#11.markus2010-02-081-0/+544
ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev