1. 141df48 upstream: Replace the term "security key" with "(FIDO) by naddy@openbsd.org · 4 years, 8 months ago
  2. fbd9729 upstream: unit tests for ForwardAgent=/path; from Eric Chiang by djm@openbsd.org · 4 years, 9 months ago
  3. e5b7cf8 upstream: test security key host keys in addition to user keys by djm@openbsd.org · 4 years, 9 months ago
  4. 40be78f upstream: Allow forwarding a different agent socket to the path by djm@openbsd.org · 4 years, 9 months ago
  5. 416f153 upstream: SSH U2F keys can now be used as host keys. Fix a garden by naddy@openbsd.org · 4 years, 9 months ago
  6. 68010ac upstream: Move always unsupported keywords to be grouped with the other by dtucker@openbsd.org · 4 years, 9 months ago
  7. 8784b02 upstream: Remove obsolete opcodes from the configuation enum. by dtucker@openbsd.org · 4 years, 9 months ago
  8. 345be60 upstream: Remove now-obsolete config options from example in by dtucker@openbsd.org · 4 years, 9 months ago
  9. ae024b2 upstream: Document that security key-hosted keys can act as host by naddy@openbsd.org · 4 years, 9 months ago
  10. bc2dc09 upstream: "Forward security" -> "Forward secrecy" since that's the by dtucker@openbsd.org · 4 years, 9 months ago
  11. e905f72 upstream: cut obsolete lists of crypto algorithms from outline of by naddy@openbsd.org · 4 years, 9 months ago
  12. f65cf11 upstream: strdup may return NULL if memory allocation fails. Use by tobhe@openbsd.org · 4 years, 9 months ago
  13. 57634bf upstream: sort sk-* methods behind their plain key methods cousins by djm@openbsd.org · 4 years, 9 months ago
  14. b8df8fe Mac OS X has PAM too. by Darren Tucker · 4 years, 9 months ago
  15. bf8de8b Show portable tarball pattern in example. by Darren Tucker · 4 years, 9 months ago
  16. a19ef61 OpenSSL is now optional. by Darren Tucker · 4 years, 9 months ago
  17. 1a7217a upstream: adapt to ssh-sk-client change by djm@openbsd.org · 4 years, 9 months ago
  18. a7fc1df upstream: it's no longer possible to disable privilege separation by djm@openbsd.org · 4 years, 9 months ago
  19. 3145d38 upstream: don't treat HostKeyAgent=none as a path either; avoids by djm@openbsd.org · 4 years, 9 months ago
  20. 747e251 upstream: do not attempt to find an absolute path for sshd_config by djm@openbsd.org · 4 years, 9 months ago
  21. 9b6e30b upstream: allow ssh-keyscan to find security key hostkeys by djm@openbsd.org · 4 years, 9 months ago
  22. 56584cc upstream: allow security keys to act as host keys as well as user by djm@openbsd.org · 4 years, 9 months ago
  23. 5af6fd5 Allow clock_nanosleep_time64 in seccomp sandbox. by Darren Tucker · 4 years, 9 months ago
  24. fff8ff6 Put SK ECDSA bits inside ifdef OPENSSL_HAS_ECC. by Darren Tucker · 4 years, 9 months ago
  25. 9244990 remove a bunch of ENABLE_SK #ifdefs by Damien Miller · 4 years, 9 months ago
  26. a33ab16 ssh-sk-client.c needs includes.h by Damien Miller · 4 years, 9 months ago
  27. 633778d only link ssh-sk-helper against libfido2 by Damien Miller · 4 years, 9 months ago
  28. 7b47b40 adapt Makefile to ssh-sk-client everywhere by Damien Miller · 4 years, 9 months ago
  29. f45f3a8 fixup by Damien Miller · 4 years, 9 months ago
  30. d214347 upstream: actually commit the ssh-sk-helper client code; ok markus by djm@openbsd.org · 4 years, 9 months ago
  31. 611073f upstream: perform security key enrollment via ssh-sk-helper too. by djm@openbsd.org · 4 years, 9 months ago
  32. 612b1dd upstream: allow sshbuf_put_stringb(buf, NULL); ok markus@ by djm@openbsd.org · 4 years, 9 months ago
  33. b52ec0b upstream: use ssh-sk-helper for all security key signing operations by djm@openbsd.org · 4 years, 9 months ago
  34. c33d468 upstream: add a note about the 'extensions' field in the signed by djm@openbsd.org · 4 years, 9 months ago
  35. a62f4e1 upstream: some more corrections for documentation problems spotted by djm@openbsd.org · 4 years, 9 months ago
  36. 22d4beb upstream: loading security keys into ssh-agent used the extension by djm@openbsd.org · 4 years, 9 months ago
  37. 75f7f22 upstream: add security key types to list of keys allowed to act as by djm@openbsd.org · 4 years, 9 months ago
  38. 516605f upstream: when acting as a CA and using a security key as the CA by djm@openbsd.org · 4 years, 9 months ago
  39. c4036fe upstream: chop some unnecessary and confusing verbiage from the by djm@openbsd.org · 4 years, 9 months ago
  40. 59175a3 upstream: fix setting of $SSH_ASKPASS_PROMPT - it shouldn't be set by djm@openbsd.org · 4 years, 9 months ago
  41. 36eaa35 upstream: bring the __func__ by djm@openbsd.org · 4 years, 9 months ago
  42. 483cc72 upstream: tweak the Nd lines for a bit of consistency; ok markus by jmc@openbsd.org · 4 years, 9 months ago
  43. afffd31 Check if memmem is declared in system headers. by Darren Tucker · 4 years, 9 months ago
  44. ad8cd42 Sort depends. by Darren Tucker · 4 years, 9 months ago
  45. 5e3abff Sort .depend when rebuilding. by Darren Tucker · 4 years, 9 months ago
  46. 5df9d1f Update depend to include sk files. by Darren Tucker · 4 years, 9 months ago
  47. 9a967c5 Describe how to build libcrypto as PIC. by Darren Tucker · 4 years, 9 months ago
  48. b66fa5d Recommend running LibreSSL or OpenSSL self-tests. by Darren Tucker · 4 years, 9 months ago
  49. fa79240 Wrap ECC specific bits in ifdef. by Darren Tucker · 4 years, 9 months ago
  50. 2ff822e Wrap sha2.h include in ifdef. by Darren Tucker · 4 years, 9 months ago
  51. 4438481 compile sk-dummy.so with no-PIE version of LDFLAGS by Damien Miller · 4 years, 9 months ago
  52. 37f5b53 includes.h for sk-dummy.c, dummy by Damien Miller · 4 years, 9 months ago
  53. b218055 (yet) another x-platform fix for sk-dummy.so by Damien Miller · 4 years, 9 months ago
  54. 0dedb70 needs includes.h for WITH_OPENSSL by Damien Miller · 4 years, 9 months ago
  55. ef3853b another attempt at sk-dummy.so working x-platform by Damien Miller · 4 years, 9 months ago
  56. d46ac56 upstream: lots of dependencies go away here with ed25519 no longer by djm@openbsd.org · 4 years, 9 months ago
  57. 7404b81 upstream: perform hashing directly in crypto_hash_sha512() using by djm@openbsd.org · 4 years, 9 months ago
  58. d39a865 upstream: improve the text for -A a little; input from naddy and by jmc@openbsd.org · 4 years, 9 months ago
  59. 9a0e01b upstream: reshuffle the text to read better; input from naddy, by jmc@openbsd.org · 4 years, 9 months ago
  60. 5ca52c0 $< doesn't work as` I thought; explicily list objs by Damien Miller · 4 years, 9 months ago
  61. 18e84bf upstream: tweak wording by djm@openbsd.org · 4 years, 9 months ago
  62. 8ef5bf9 missing .SUFFIXES line makes make sad by Damien Miller · 4 years, 9 months ago
  63. 323da82 (hopefully) fix out of tree builds of sk-dummy.so by Damien Miller · 4 years, 9 months ago
  64. d8b2838 upstream: remove stray semicolon after closing brace of function; by djm@openbsd.org · 4 years, 9 months ago
  65. 6e1d1bb upstream: Revert previous commit. The channels code still uses int by dtucker@openbsd.org · 4 years, 9 months ago
  66. 4898924 wire sk-dummy.so into test suite by Damien Miller · 4 years, 9 months ago
  67. f79364b upstream: use error()+_exit() instead of fatal() to avoid running by djm@openbsd.org · 4 years, 9 months ago
  68. 70ec5e5 upstream: Make channel_id u_int32_t and remove unnecessary check by dtucker@openbsd.org · 4 years, 9 months ago
  69. ad44ca8 upstream: test FIDO2/U2F key types; ok markus@ by djm@openbsd.org · 4 years, 9 months ago
  70. c6efa8a upstream: add dummy security key middleware based on work by by djm@openbsd.org · 4 years, 9 months ago
  71. 8635afa upstream: tweak previous; by jmc@openbsd.org · 4 years, 9 months ago
  72. e0d38ae upstream: more debugging; behind DEBUG_SK by djm@openbsd.org · 4 years, 9 months ago
  73. 9281d43 unbreak fuzzers for recent security key changes by Damien Miller · 4 years, 9 months ago
  74. c5f1cc9 upstream: unbreak tests for recent security key changes by djm@openbsd.org · 4 years, 9 months ago
  75. 6498826 upstream: unbreak after security key support landed by djm@openbsd.org · 4 years, 9 months ago
  76. e65e25c upstream: Remove workaround for broken 'openssl rsa -text' output by tb@openbsd.org · 4 years, 10 months ago
  77. 21377ec upstream: redundant test by djm@openbsd.org · 4 years, 9 months ago
  78. 664deef upstream: document the "no-touch-required" certificate extension; by djm@openbsd.org · 4 years, 9 months ago
  79. 26cb128 upstream: Print a key touch reminder when generating a security by djm@openbsd.org · 4 years, 9 months ago
  80. daeaf41 upstream: allow "ssh-keygen -x no-touch-required" when generating a by djm@openbsd.org · 4 years, 9 months ago
  81. 2e71263 upstream: add a "no-touch-required" option for authorized_keys and by djm@openbsd.org · 4 years, 9 months ago
  82. 0fddf29 upstream: Add a sshd_config PubkeyAuthOptions directive by djm@openbsd.org · 4 years, 9 months ago
  83. b7e74ea upstream: Add new structure for signature options by djm@openbsd.org · 4 years, 9 months ago
  84. d2b0f88 upstream: memleak in error path by djm@openbsd.org · 4 years, 9 months ago
  85. e2c0a21 upstream: Wait for FD to be readable or writeable during a nonblocking by dtucker@openbsd.org · 4 years, 9 months ago
  86. 2f95d43 Include openssl compat header. by Darren Tucker · 4 years, 10 months ago
  87. a70d92f upstream: adjust on-wire signature encoding for ecdsa-sk keys to by djm@openbsd.org · 4 years, 10 months ago
  88. 26369a5 upstream: a little more information from the monitor when signature by djm@openbsd.org · 4 years, 10 months ago
  89. 4402d6c upstream: revert previous: naddy pointed out what's meant to by jmc@openbsd.org · 4 years, 10 months ago
  90. 88056f8 upstream: -c and -s do not make sense with -k; reshuffle -k into by jmc@openbsd.org · 4 years, 10 months ago
  91. 2cf262c upstream: document '$' environment variable expansion for by naddy@openbsd.org · 4 years, 10 months ago
  92. f0edda8 upstream: more missing mentions of ed25519-sk; ok djm@ by naddy@openbsd.org · 4 years, 10 months ago
  93. 189550f upstream: additional missing stdarg.h includes when built without by naddy@openbsd.org · 4 years, 10 months ago
  94. 723a536 upstream: add the missing WITH_OPENSSL ifdefs after the ED25519-SK by naddy@openbsd.org · 4 years, 10 months ago
  95. 478f4f9 remove all EC algs from proposals, no just sk ones by Damien Miller · 4 years, 10 months ago
  96. 6a7ef31 filter PUBKEY_DEFAULT_PK_ALG for ECC algorithms by Damien Miller · 4 years, 10 months ago
  97. 64f56f1 upstream: LibreSSL change the format for openssl rsa -text output from by dtucker@openbsd.org · 4 years, 10 months ago
  98. 4bfc050 upstream: fix a bug that prevented serialisation of ed25519-sk keys by djm@openbsd.org · 4 years, 10 months ago
  99. d882054 upstream: Fix incorrect error message when key certification fails by djm@openbsd.org · 4 years, 10 months ago
  100. 740c4bc upstream: fix bug that prevented certification of ed25519-sk keys by djm@openbsd.org · 4 years, 10 months ago