wireguard-openbsd - WireGuard implementation for the OpenBSD kernel

	Commit message (Collapse)	Author	Age	Files	Lines
*	use the new variant log macros instead of prepending __func__ and	djm	2020-10-18	1	-23/+24
\| \| \| \|	appending ssh_err(r) manually; ok markus@
*	fix memleak of signature; from Pedro Martelletto	djm	2020-05-26	1	-5/+8
\|
*	improve the error message for u2f enrollment errors by making	djm	2020-01-25	1	-2/+2
\| \| \| \| \| \| \| \| \| \| \| \|	ssh-keygen be solely responsible for printing the error message and convertint some more common error responses from the middleware to a useful ssherr.h status code. more detail remains visible via -v of course. also remove indepedent copy of sk-api.h declarations in sk-usbhid.c and just include it. feedback & ok markus@
*	pass the log-on-stderr flag and log level through to ssh-sk-helper,	djm	2020-01-10	1	-7/+12
\| \| \| \|	making debugging a bit easier. ok markus@
*	Extends the SK API to accept a set of key/value options for all	djm	2020-01-06	1	-18/+27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	operations. These are intended to future-proof the API a little by making it easier to specify additional fields for without having to change the API version for each. At present, only two options are defined: one to explicitly specify the device for an operation (rather than accepting the middleware's autoselection) and another to specify the FIDO2 username that may be used when generating a resident key. These new options may be invoked at key generation time via ssh-keygen -O This also implements a suggestion from Markus to avoid "int" in favour of uint32_t for the algorithm argument in the API, to make implementation of ssh-sk-client/helper a little easier. feedback, fixes and ok markus@
*	SK API and sk-helper error/PIN passing	djm	2019-12-30	1	-22/+84
\| \| \| \| \| \| \| \| \| \| \|	Allow passing a PIN via the SK API (API major crank) and let the ssh-sk-helper API follow. Also enhance the ssh-sk-helper API to support passing back an error code instead of a complete reply. Will be used to signal "wrong PIN", etc. feedback and ok markus@
*	implement loading of resident keys in ssh-sk-helper	djm	2019-12-30	1	-1/+48
\| \| \| \|	feedback and ok markus@
*	perform security key enrollment via ssh-sk-helper too. This means	djm	2019-12-13	1	-38/+121
\| \| \| \| \| \| \|	that ssh-keygen no longer needs to link against ssh-sk-helper, and only ssh-sk-helper needs libfido2 and /dev/uhid* access; feedback & ok markus@
*	enable ed25519 support; ok djm	markus	2019-11-12	1	-2/+2
\|
*	rename sshsk_ecdsa_sign() to sshsk_sign(); ok djm	markus	2019-11-12	1	-2/+2
\|
*	ssh-agent support for U2F/FIDO keys	djm	2019-10-31	1	-0/+141
	feedback & ok markus@