5 Commits

Author	SHA1	Message	Date
djm@openbsd.org	c54cd1892c	upstream: SK API and sk-helper error/PIN passing ... Allow passing a PIN via the SK API (API major crank) and let the ssh-sk-helper API follow. Also enhance the ssh-sk-helper API to support passing back an error code instead of a complete reply. Will be used to signal "wrong PIN", etc. feedback and ok markus@ OpenBSD-Commit-ID: a1bd6b0a2421646919a0c139b8183ad76d28fb71	2019-12-30 20:59:33 +11:00
djm@openbsd.org	27753a8e21	upstream: implement loading of resident keys in ssh-sk-helper ... feedback and ok markus@ OpenBSD-Commit-ID: b273c23769ea182c55c4a7b8f9cbd9181722011a	2019-12-30 20:58:19 +11:00
Damien Miller	9244990ecd	remove a bunch of ENABLE_SK #ifdefs ... The ssh-sk-helper client API gives us a nice place to disable security key support when it is wasn't enabled at compile time, so we don't need to check everywere. Also, verification of security key signatures can remain enabled all the time - it has no additional dependencies. So sshd can accept security key pubkeys in authorized_keys, etc regardless of the host's support for dlopen, etc.	2019-12-14 09:21:46 +11:00
Damien Miller	a33ab1688b	ssh-sk-client.c needs includes.h	2019-12-14 09:15:06 +11:00
djm@openbsd.org	d214347667	upstream: actually commit the ssh-sk-helper client code; ok markus ... OpenBSD-Commit-ID: fd2ea776a5bbbf4d452989d3c3054cf25a5e0589	2019-12-14 07:21:27 +11:00