summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2019-11-18add the missing WITH_OPENSSL ifdefs after the ED25519-SK addition; ok djm@Christian Weisgerber
2019-11-18Remove typedef and check sk_push return value in openssl(1) cmsKinichiro Inoguchi
- Remove typedef and use 'struct cms_key_param' instead - Check return value of sk_X509_push and sk_OPENSSL_STRING_push - Add a blank line to separate variable declarations from code comments from jsing@
2019-11-18Add -keyopt opiton to openssl(1) cms subcommandKinichiro Inoguchi
This provides rsa_padding_mode:oaep for cms -encrypt, and rsa_padding_mode:pss for cms -sign. ok jsing@
2019-11-18Add -f for full size to join-pane (like split-window), from Theo Buehler.Nicholas Marriott
2019-11-18Keep modifiers on backspace when translating it.Nicholas Marriott
2019-11-18fix a bug that prevented serialisation of ed25519-sk keysDamien Miller
2019-11-18Fix incorrect error message when key certification failsDamien Miller
2019-11-18fix bug that prevented certification of ed25519-sk keysDamien Miller
2019-11-18allow *-sk key types to be turned into certificatesDamien Miller
2019-11-18mention ed25519-sk key/cert types here too; prompted by jmc@Damien Miller
2019-11-18mention ed25519-sk in places where it is accepted; prompted by jmc@Damien Miller
2019-11-18various knf and whitespace; ok jcaTheo de Raadt
2019-11-18document ed25519-sk pubkey, private key and certificate formatsDamien Miller
2019-11-18correct order or ecdsa-sk private key fieldsDamien Miller
2019-11-18correct description of fields in pub/private keys (was missing curveDamien Miller
name); spotted by Sebastian Kinne
2019-11-18missing break in getopt switch; spotted by Sebastian KinneDamien Miller
2019-11-17fail to usage if extra argv are presentTheo de Raadt
noticed by jsing and beck, ok tedu
2019-11-16tweak debug messageDamien Miller
2019-11-16a little debug() in the security key interfaceDamien Miller
2019-11-16always use ssh-sk-helper, even for the internal USB HID support.Damien Miller
This avoid the need for a wpath pledge in ssh-agent. reported by jmc@
2019-11-15fix typos in sk_enrollMarkus Friedl
2019-11-15Do not add path if it is NULL, duh.Nicholas Marriott
2019-11-15Handle OSC 7 (a VTE extension) and put the result in a new format (pane_path).Nicholas Marriott
2019-11-15double word;Jason McIntyre
2019-11-15remove most uses of BN_CTXDamien Miller
We weren't following the rules re BN_CTX_start/BN_CTX_end and the places we were using it didn't benefit from its use anyway. ok dtucker@
2019-11-15unshield security key privkey before attempting signature inDamien Miller
agent. spotted by dtucker@
2019-11-15rewrite c99-ismTheo de Raadt
2019-11-15only clang understands those new -W optionsTheo de Raadt
2019-11-15don't consult dlopen whitelist for internal security key provider;Damien Miller
spotted by dtucker@
2019-11-15U2F tokens may return FIDO_ERR_USER_PRESENCE_REQUIRED when probed toDamien Miller
see if they own a key handle. Handle this case so the find_device() look can work for them. Reported by Michael Forney
2019-11-15show the "please touch your security key" notifier when using theDamien Miller
(default) build-in security key support.
2019-11-15close the "touch your security key" notifier on the error path tooDamien Miller
2019-11-15correct function name in debug messageDamien Miller
2019-11-15follow existing askpass logic for security key notifier: fall backDamien Miller
to _PATH_SSH_ASKPASS_DEFAULT if no $SSH_ASKPASS environment variable is set.
2019-11-15libusb was renamed to libusbhid in 2001 but the old DPADD var name wasJonathan Gray
kept. Rename LIBUSB to LIBUSBHID as there is only one LIBUSB use and many more attempts to refer to LIBUSBHID.
2019-11-14HTTP/1.1 for ftp(1)Jeremie Courreges-Anglas
Some sites in ports start to reject HTTP/1.0 requests. Let's move on and implement HTTP/1.1. Should fit in ramdisks. ok sthen@ tb@
2019-11-14remove debugging goop that snuck in to last commitDamien Miller
2019-11-14directly support U2F/FIDO2 security keys in OpenSSH by linkingDamien Miller
against the (previously external) USB HID middleware. The dlopen() capability still exists for alternate middlewares, e.g. for Bluetooth, NFC and test/debugging.
2019-11-14Change window-size default from smallest to latest.Nicholas Marriott
2019-11-14Fix parsing of DA with only one argument in the response and add 65 for VT520.Nicholas Marriott
2019-11-14Change new-session -A without a session name (that is, no -s optionNicholas Marriott
also) to attach to the best existing session like attach-session rather than creating a new one.
2019-11-14CUB and CUF are also limited by the margins so use CUP instead whenNicholas Marriott
margins are enabled (we already do this for linefeed).
2019-11-14Add an option to set the key sent by backspace for those whose systemNicholas Marriott
uses ^H rather than ^?. GitHub issue 1969.
2019-11-13in order to be able to figure out the number of signatures left onMarkus Friedl
a shielded key, we need to transfer the number of signatures left from the private to the public key. ok djm@
2019-11-13fix check for sig_s; noted by qsa at qualys.comMarkus Friedl
2019-11-13When clients get denied by MaxStartups, send a noification prior toDarren Tucker
the SSH2 protocol banner according to RFC4253 section 4.2. ok djm@ deraadt@ markus@
2019-11-13fix shield/unshield for xmss keys:Markus Friedl
- in ssh-agent we need to delay the call to shield until we have received key specific options. - when serializing xmss keys for shield we need to deal with all optional components (e.g. state might not be loaded). ok djm@
2019-11-13remove size_t gl_pathc < 0 test, it is invalid. the return value fromTheo de Raadt
glob() is sufficient. discussed with djm
2019-11-13stdarg.h required more broadly; ok djmTheo de Raadt
2019-11-13refactor the nc pool loop to not shut down the socket early, andBob Beck
to handle tls_shutdown correctly if using TLS, doing tls_shutdown correctly if we are using the -N flag ok sthen@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-24 03:12:32 +0000