summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2019-12-16strdup may return NULL if memory allocation fails. Use the safer xstrduptobhe
2019-12-16sort sk-* methods behind their plain key methods cousins for nowDamien Miller
2019-12-15don't treat HostKeyAgent=none as a path either; avoids spuriousDamien Miller
2019-12-15do not attempt to find an absolute path for sshd_configDamien Miller
2019-12-15allow ssh-keyscan to find security key hostkeysDamien Miller
2019-12-15allow security keys to act as host keys as well as user keys.Damien Miller
2019-12-13actually commit the ssh-sk-helper client code; ok markusDamien Miller
2019-12-13perform security key enrollment via ssh-sk-helper too. This meansDamien Miller
2019-12-13allow sshbuf_put_stringb(buf, NULL); ok markus@Damien Miller
2019-12-13use ssh-sk-helper for all security key signing operationsDamien Miller
2019-12-11add a note about the 'extensions' field in the signed objectDamien Miller
2019-12-10some more corrections for documentation problems spotted by Ron FrederickDamien Miller
2019-12-10loading security keys into ssh-agent used the extension constraintDamien Miller
2019-12-10add security key types to list of keys allowed to act as CAs;Damien Miller
2019-12-10when acting as a CA and using a security key as the CA key, remind theDamien Miller
2019-12-10chop some unnecessary and confusing verbiage from the security keyDamien Miller
2019-12-06fix setting of $SSH_ASKPASS_PROMPT - it shouldn't be set when askingDamien Miller
2019-12-06bring the __func__Damien Miller
2019-11-30tweak the Nd lines for a bit of consistency;Jason McIntyre
2019-11-29perform hashing directly in crypto_hash_sha512() using libcrypto orDamien Miller
2019-11-28improve the text for -A a little;Jason McIntyre
2019-11-28reshuffle the text to read better;Jason McIntyre
2019-11-28tweak wordingDamien Miller
2019-11-27remove stray semicolon after closing brace of function;Damien Miller
2019-11-27Revert previous commit. The channels code still uses int in many placesDarren Tucker
2019-11-27use error()+_exit() instead of fatal() to avoid running cleanupDamien Miller
2019-11-27Make channel_id u_int32_t and remove unnecessary check and cast that wereDarren Tucker
2019-11-26tweak previous;Jason McIntyre
2019-11-26more debugging; behind DEBUG_SKDamien Miller
2019-11-25redundant testDamien Miller
2019-11-25document the "no-touch-required" certificate extension;Damien Miller
2019-11-25Print a key touch reminder when generating a security key. Most keysDamien Miller
2019-11-25allow "ssh-keygen -x no-touch-required" when generating a security keyDamien Miller
2019-11-25add a "no-touch-required" option for authorized_keys and a similarDamien Miller
2019-11-25Add a sshd_config PubkeyAuthOptions directiveDamien Miller
2019-11-25Add new structure for signature optionsDamien Miller
2019-11-25memleak in error pathDamien Miller
2019-11-22Wait for FD to be readable or writeable during a nonblocking connect,Darren Tucker
2019-11-19adjust on-wire signature encoding for ecdsa-sk keys to better matchDamien Miller
2019-11-19a little more information from the monitor when signatureDamien Miller
2019-11-19revert previous: naddy pointed out what's meant to happen. rethink needed...Jason McIntyre
2019-11-19-c and -s do not make sense with -k; reshuffle -k into the main synopsis/usage;Jason McIntyre
2019-11-18document '$' environment variable expansion for SecurityKeyProvider; ok djm@Christian Weisgerber
2019-11-18more missing mentions of ed25519-sk; ok djm@Christian Weisgerber
2019-11-18additional missing stdarg.h includes when built without WITH_OPENSSL; ok djm@Christian Weisgerber
2019-11-18add the missing WITH_OPENSSL ifdefs after the ED25519-SK addition; ok djm@Christian Weisgerber
2019-11-18fix a bug that prevented serialisation of ed25519-sk keysDamien Miller
2019-11-18Fix incorrect error message when key certification failsDamien Miller
2019-11-18fix bug that prevented certification of ed25519-sk keysDamien Miller
2019-11-18allow *-sk key types to be turned into certificatesDamien Miller