wireguard-openbsd - WireGuard implementation for the OpenBSD kernel

	Commit message (Collapse)	Author	Age	Files	Lines
*	pass the log-on-stderr flag and log level through to ssh-sk-helper,	djm	2020-01-10	1	-2/+2
\| \| \| \|	making debugging a bit easier. ok markus@
*	Extends the SK API to accept a set of key/value options for all	djm	2020-01-06	1	-6/+8
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	operations. These are intended to future-proof the API a little by making it easier to specify additional fields for without having to change the API version for each. At present, only two options are defined: one to explicitly specify the device for an operation (rather than accepting the middleware's autoselection) and another to specify the FIDO2 username that may be used when generating a resident key. These new options may be invoked at key generation time via ssh-keygen -O This also implements a suggestion from Markus to avoid "int" in favour of uint32_t for the algorithm argument in the API, to make implementation of ssh-sk-client/helper a little easier. feedback, fixes and ok markus@
*	SK API and sk-helper error/PIN passing	djm	2019-12-30	1	-4/+13
\| \| \| \| \| \| \| \| \| \| \|	Allow passing a PIN via the SK API (API major crank) and let the ssh-sk-helper API follow. Also enhance the ssh-sk-helper API to support passing back an error code instead of a complete reply. Will be used to signal "wrong PIN", etc. feedback and ok markus@
*	resident keys support in SK API	djm	2019-12-30	1	-1/+10
\| \| \| \| \| \| \| \| \| \|	Adds a sk_load_resident_keys() function to the security key API that accepts a security key provider and a PIN and returns a list of keys. Implement support for this in the usbhid middleware. feedback and ok markus@
*	use ssh-sk-helper for all security key signing operations	djm	2019-12-13	1	-5/+2
\| \| \| \| \| \| \| \| \|	This extracts and refactors the client interface for ssh-sk-helper from ssh-agent and generalises it for use by the other programs. This means that most OpenSSH tools no longer need to link against libfido2 or directly interact with /dev/uhid* requested by, feedback and ok markus@
*	implement sshsk_ed25519_assemble(); ok djm	markus	2019-11-12	1	-4/+4
\|
*	implement sshsk_ed25519_inner_sig(); ok djm	markus	2019-11-12	1	-2/+2
\|
*	rename sshsk_ecdsa_sign() to sshsk_sign(); ok djm	markus	2019-11-12	1	-4/+4
\|
*	ssh-agent support for U2F/FIDO keys	djm	2019-10-31	1	-1/+4
\| \| \| \|	feedback & ok markus@
*	U2F/FIDO middleware interface	djm	2019-10-31	1	-0/+49
	Supports enrolling (generating) keys and signatures. feedback & ok markus@