7 Commits

Author	SHA1	Message	Date
djm@openbsd.org	43ce96427b	upstream: translate and return error codes; retry on bad PIN ... Define some well-known error codes in the SK API and pass them back via ssh-sk-helper. Use the new "wrong PIN" error code to retry PIN prompting during ssh-keygen of resident keys. feedback and ok markus@ OpenBSD-Commit-ID: 9663c6a2bb7a0bc8deaccc6c30d9a2983b481620	2019-12-30 21:01:51 +11:00
djm@openbsd.org	c54cd1892c	upstream: SK API and sk-helper error/PIN passing ... Allow passing a PIN via the SK API (API major crank) and let the ssh-sk-helper API follow. Also enhance the ssh-sk-helper API to support passing back an error code instead of a complete reply. Will be used to signal "wrong PIN", etc. feedback and ok markus@ OpenBSD-Commit-ID: a1bd6b0a2421646919a0c139b8183ad76d28fb71	2019-12-30 20:59:33 +11:00
djm@openbsd.org	14cea36df3	upstream: resident keys support in SK API ... Adds a sk_load_resident_keys() function to the security key API that accepts a security key provider and a PIN and returns a list of keys. Implement support for this in the usbhid middleware. feedback and ok markus@ OpenBSD-Commit-ID: 67e984e4e87f4999ce447a6178c4249a9174eff0	2019-12-30 20:58:19 +11:00
djm@openbsd.org	4532bd01d5	upstream: basic support for generating FIDO2 resident keys ... "ssh-keygen -t ecdsa-sk|ed25519-sk -x resident" will generate a device-resident key. feedback and ok markus@ OpenBSD-Commit-ID: 8e1b3c56a4b11d85047bd6c6c705b7eef4d58431	2019-12-30 20:57:58 +11:00
markus@openbsd.org	fd1a3b5e38	upstream: update sk-api to version 2 for ed25519 support; ok djm ... OpenBSD-Commit-ID: 77aa4d5b6ab17987d8a600907b49573940a0044a	2019-11-13 08:49:59 +11:00
Darren Tucker	03ffc0951c	Put stdint.h inside ifdef HAVE_STDINT_H.	2019-11-02 23:25:01 +11:00
djm@openbsd.org	ed3467c1e1	upstream: U2F/FIDO middleware interface ... Supports enrolling (generating) keys and signatures. feedback & ok markus@ OpenBSD-Commit-ID: 73d1dd5939454f9c7bd840f48236cba41e8ad592	2019-11-01 09:46:09 +11:00