- 141df48 upstream: Replace the term "security key" with "(FIDO) by naddy@openbsd.org · 4 years, 8 months ago
- fbd9729 upstream: unit tests for ForwardAgent=/path; from Eric Chiang by djm@openbsd.org · 4 years, 9 months ago
- e5b7cf8 upstream: test security key host keys in addition to user keys by djm@openbsd.org · 4 years, 9 months ago
- 40be78f upstream: Allow forwarding a different agent socket to the path by djm@openbsd.org · 4 years, 9 months ago
- 416f153 upstream: SSH U2F keys can now be used as host keys. Fix a garden by naddy@openbsd.org · 4 years, 9 months ago
- 68010ac upstream: Move always unsupported keywords to be grouped with the other by dtucker@openbsd.org · 4 years, 9 months ago
- 8784b02 upstream: Remove obsolete opcodes from the configuation enum. by dtucker@openbsd.org · 4 years, 9 months ago
- 345be60 upstream: Remove now-obsolete config options from example in by dtucker@openbsd.org · 4 years, 9 months ago
- ae024b2 upstream: Document that security key-hosted keys can act as host by naddy@openbsd.org · 4 years, 9 months ago
- bc2dc09 upstream: "Forward security" -> "Forward secrecy" since that's the by dtucker@openbsd.org · 4 years, 9 months ago
- e905f72 upstream: cut obsolete lists of crypto algorithms from outline of by naddy@openbsd.org · 4 years, 9 months ago
- f65cf11 upstream: strdup may return NULL if memory allocation fails. Use by tobhe@openbsd.org · 4 years, 9 months ago
- 57634bf upstream: sort sk-* methods behind their plain key methods cousins by djm@openbsd.org · 4 years, 9 months ago
- b8df8fe Mac OS X has PAM too. by Darren Tucker · 4 years, 9 months ago
- bf8de8b Show portable tarball pattern in example. by Darren Tucker · 4 years, 9 months ago
- a19ef61 OpenSSL is now optional. by Darren Tucker · 4 years, 9 months ago
- 1a7217a upstream: adapt to ssh-sk-client change by djm@openbsd.org · 4 years, 9 months ago
- a7fc1df upstream: it's no longer possible to disable privilege separation by djm@openbsd.org · 4 years, 9 months ago
- 3145d38 upstream: don't treat HostKeyAgent=none as a path either; avoids by djm@openbsd.org · 4 years, 9 months ago
- 747e251 upstream: do not attempt to find an absolute path for sshd_config by djm@openbsd.org · 4 years, 9 months ago
- 9b6e30b upstream: allow ssh-keyscan to find security key hostkeys by djm@openbsd.org · 4 years, 9 months ago
- 56584cc upstream: allow security keys to act as host keys as well as user by djm@openbsd.org · 4 years, 9 months ago
- 5af6fd5 Allow clock_nanosleep_time64 in seccomp sandbox. by Darren Tucker · 4 years, 9 months ago
- fff8ff6 Put SK ECDSA bits inside ifdef OPENSSL_HAS_ECC. by Darren Tucker · 4 years, 9 months ago
- 9244990 remove a bunch of ENABLE_SK #ifdefs by Damien Miller · 4 years, 9 months ago
- a33ab16 ssh-sk-client.c needs includes.h by Damien Miller · 4 years, 9 months ago
- 633778d only link ssh-sk-helper against libfido2 by Damien Miller · 4 years, 9 months ago
- 7b47b40 adapt Makefile to ssh-sk-client everywhere by Damien Miller · 4 years, 9 months ago
- f45f3a8 fixup by Damien Miller · 4 years, 9 months ago
- d214347 upstream: actually commit the ssh-sk-helper client code; ok markus by djm@openbsd.org · 4 years, 9 months ago
- 611073f upstream: perform security key enrollment via ssh-sk-helper too. by djm@openbsd.org · 4 years, 9 months ago
- 612b1dd upstream: allow sshbuf_put_stringb(buf, NULL); ok markus@ by djm@openbsd.org · 4 years, 9 months ago
- b52ec0b upstream: use ssh-sk-helper for all security key signing operations by djm@openbsd.org · 4 years, 9 months ago
- c33d468 upstream: add a note about the 'extensions' field in the signed by djm@openbsd.org · 4 years, 9 months ago
- a62f4e1 upstream: some more corrections for documentation problems spotted by djm@openbsd.org · 4 years, 9 months ago
- 22d4beb upstream: loading security keys into ssh-agent used the extension by djm@openbsd.org · 4 years, 9 months ago
- 75f7f22 upstream: add security key types to list of keys allowed to act as by djm@openbsd.org · 4 years, 9 months ago
- 516605f upstream: when acting as a CA and using a security key as the CA by djm@openbsd.org · 4 years, 9 months ago
- c4036fe upstream: chop some unnecessary and confusing verbiage from the by djm@openbsd.org · 4 years, 9 months ago
- 59175a3 upstream: fix setting of $SSH_ASKPASS_PROMPT - it shouldn't be set by djm@openbsd.org · 4 years, 9 months ago
- 36eaa35 upstream: bring the __func__ by djm@openbsd.org · 4 years, 9 months ago
- 483cc72 upstream: tweak the Nd lines for a bit of consistency; ok markus by jmc@openbsd.org · 4 years, 9 months ago
- afffd31 Check if memmem is declared in system headers. by Darren Tucker · 4 years, 9 months ago
- ad8cd42 Sort depends. by Darren Tucker · 4 years, 9 months ago
- 5e3abff Sort .depend when rebuilding. by Darren Tucker · 4 years, 9 months ago
- 5df9d1f Update depend to include sk files. by Darren Tucker · 4 years, 9 months ago
- 9a967c5 Describe how to build libcrypto as PIC. by Darren Tucker · 4 years, 9 months ago
- b66fa5d Recommend running LibreSSL or OpenSSL self-tests. by Darren Tucker · 4 years, 9 months ago
- fa79240 Wrap ECC specific bits in ifdef. by Darren Tucker · 4 years, 9 months ago
- 2ff822e Wrap sha2.h include in ifdef. by Darren Tucker · 4 years, 9 months ago
- 4438481 compile sk-dummy.so with no-PIE version of LDFLAGS by Damien Miller · 4 years, 9 months ago
- 37f5b53 includes.h for sk-dummy.c, dummy by Damien Miller · 4 years, 9 months ago
- b218055 (yet) another x-platform fix for sk-dummy.so by Damien Miller · 4 years, 9 months ago
- 0dedb70 needs includes.h for WITH_OPENSSL by Damien Miller · 4 years, 9 months ago
- ef3853b another attempt at sk-dummy.so working x-platform by Damien Miller · 4 years, 9 months ago
- d46ac56 upstream: lots of dependencies go away here with ed25519 no longer by djm@openbsd.org · 4 years, 9 months ago
- 7404b81 upstream: perform hashing directly in crypto_hash_sha512() using by djm@openbsd.org · 4 years, 9 months ago
- d39a865 upstream: improve the text for -A a little; input from naddy and by jmc@openbsd.org · 4 years, 9 months ago
- 9a0e01b upstream: reshuffle the text to read better; input from naddy, by jmc@openbsd.org · 4 years, 9 months ago
- 5ca52c0 $< doesn't work as` I thought; explicily list objs by Damien Miller · 4 years, 9 months ago
- 18e84bf upstream: tweak wording by djm@openbsd.org · 4 years, 9 months ago
- 8ef5bf9 missing .SUFFIXES line makes make sad by Damien Miller · 4 years, 9 months ago
- 323da82 (hopefully) fix out of tree builds of sk-dummy.so by Damien Miller · 4 years, 9 months ago
- d8b2838 upstream: remove stray semicolon after closing brace of function; by djm@openbsd.org · 4 years, 9 months ago
- 6e1d1bb upstream: Revert previous commit. The channels code still uses int by dtucker@openbsd.org · 4 years, 9 months ago
- 4898924 wire sk-dummy.so into test suite by Damien Miller · 4 years, 9 months ago
- f79364b upstream: use error()+_exit() instead of fatal() to avoid running by djm@openbsd.org · 4 years, 9 months ago
- 70ec5e5 upstream: Make channel_id u_int32_t and remove unnecessary check by dtucker@openbsd.org · 4 years, 9 months ago
- ad44ca8 upstream: test FIDO2/U2F key types; ok markus@ by djm@openbsd.org · 4 years, 9 months ago
- c6efa8a upstream: add dummy security key middleware based on work by by djm@openbsd.org · 4 years, 9 months ago
- 8635afa upstream: tweak previous; by jmc@openbsd.org · 4 years, 9 months ago
- e0d38ae upstream: more debugging; behind DEBUG_SK by djm@openbsd.org · 4 years, 9 months ago
- 9281d43 unbreak fuzzers for recent security key changes by Damien Miller · 4 years, 9 months ago
- c5f1cc9 upstream: unbreak tests for recent security key changes by djm@openbsd.org · 4 years, 9 months ago
- 6498826 upstream: unbreak after security key support landed by djm@openbsd.org · 4 years, 9 months ago
- e65e25c upstream: Remove workaround for broken 'openssl rsa -text' output by tb@openbsd.org · 4 years, 10 months ago
- 21377ec upstream: redundant test by djm@openbsd.org · 4 years, 9 months ago
- 664deef upstream: document the "no-touch-required" certificate extension; by djm@openbsd.org · 4 years, 9 months ago
- 26cb128 upstream: Print a key touch reminder when generating a security by djm@openbsd.org · 4 years, 9 months ago
- daeaf41 upstream: allow "ssh-keygen -x no-touch-required" when generating a by djm@openbsd.org · 4 years, 9 months ago
- 2e71263 upstream: add a "no-touch-required" option for authorized_keys and by djm@openbsd.org · 4 years, 9 months ago
- 0fddf29 upstream: Add a sshd_config PubkeyAuthOptions directive by djm@openbsd.org · 4 years, 9 months ago
- b7e74ea upstream: Add new structure for signature options by djm@openbsd.org · 4 years, 9 months ago
- d2b0f88 upstream: memleak in error path by djm@openbsd.org · 4 years, 9 months ago
- e2c0a21 upstream: Wait for FD to be readable or writeable during a nonblocking by dtucker@openbsd.org · 4 years, 9 months ago
- 2f95d43 Include openssl compat header. by Darren Tucker · 4 years, 10 months ago
- a70d92f upstream: adjust on-wire signature encoding for ecdsa-sk keys to by djm@openbsd.org · 4 years, 10 months ago
- 26369a5 upstream: a little more information from the monitor when signature by djm@openbsd.org · 4 years, 10 months ago
- 4402d6c upstream: revert previous: naddy pointed out what's meant to by jmc@openbsd.org · 4 years, 10 months ago
- 88056f8 upstream: -c and -s do not make sense with -k; reshuffle -k into by jmc@openbsd.org · 4 years, 10 months ago
- 2cf262c upstream: document '$' environment variable expansion for by naddy@openbsd.org · 4 years, 10 months ago
- f0edda8 upstream: more missing mentions of ed25519-sk; ok djm@ by naddy@openbsd.org · 4 years, 10 months ago
- 189550f upstream: additional missing stdarg.h includes when built without by naddy@openbsd.org · 4 years, 10 months ago
- 723a536 upstream: add the missing WITH_OPENSSL ifdefs after the ED25519-SK by naddy@openbsd.org · 4 years, 10 months ago
- 478f4f9 remove all EC algs from proposals, no just sk ones by Damien Miller · 4 years, 10 months ago
- 6a7ef31 filter PUBKEY_DEFAULT_PK_ALG for ECC algorithms by Damien Miller · 4 years, 10 months ago
- 64f56f1 upstream: LibreSSL change the format for openssl rsa -text output from by dtucker@openbsd.org · 4 years, 10 months ago
- 4bfc050 upstream: fix a bug that prevented serialisation of ed25519-sk keys by djm@openbsd.org · 4 years, 10 months ago
- d882054 upstream: Fix incorrect error message when key certification fails by djm@openbsd.org · 4 years, 10 months ago
- 740c4bc upstream: fix bug that prevented certification of ed25519-sk keys by djm@openbsd.org · 4 years, 10 months ago