Skip to content
Permalink
jjelen-pkcs11
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

Commits on Aug 17, 2020

  1. Do not crash when adding invalid path to pkcs11 module in agent

    @Jakuje
    Jakuje committed Aug 17, 2020
    57da401

  2. Do not reset PIN when provider returns multiple slots

    @Jakuje
    Jakuje committed Aug 17, 2020
    9791d7c

  3. PKCS#11 URI from Fedora 

     * Print PKCS#11 URIs from ssh-keygen
 * Accept PKCS#11 URIs in -i argument to ssh
 * Allow PKCS#11 URI specification in ssh_config
 * Fallback to p11-kit-proxy
 * PKCS#11 URI support for ssh-add and ssh-agent
  * internal representation is URI
 * Allow to specify pin-value in URI to avoid interactive prompts

Currently recognized and used parts of PKCS#11 URI:
 * path (optional)
  * token
  * id
  * manufacturer
  * (library-manufacturer)
 * query (optional)
  * module-path
  * pin-value

Unit test for PKCS#11 URIs

 * test PKCS#11 URI parser, generator
 * test percent_encodeer and decoder

Regression tests for PKCS#11 URI support

 * soft-pkcs11.so  from people.su.se/~lha/soft-pkcs11
  * Return correct CKR for unknown attributes
  * Adjust and build it with regress tests (allowing agent-pkcs11 test)
 * Test PKCS#11 URIs support with soft-pkcs11
  * Direct usage from commandline (URI, provider and combination)
  * Usage from configuration files
  * Usage in ssh-agent (add, sign, remove)
  * Make sure it is built with correct paths
    @Jakuje
    Jakuje committed Aug 17, 2020
    6d12874

Commits on Aug 10, 2020

  1. sync memmem.c with OpenBSD

    @djmdjm
    djmdjm committed Aug 10, 2020
    eaf2765

Commits on Aug 7, 2020

  1. Always send any PAM account messages. 

    If the PAM account stack reaturns any messages, send them to the user
not just if the check succeeds.  bz#2049, ok djm@
    @daztucker
    daztucker committed Aug 7, 2020
    ed6bef7

  2. Output test debug logs on failure.

    @daztucker
    daztucker committed Aug 7, 2020
    a09e98d

  3. Add ability to specify exact test target.

    @daztucker
    daztucker committed Aug 7, 2020
    eb122b1

  4. Document --without-openssl and --without-zlib.

    @daztucker
    daztucker committed Aug 7, 2020
    c2ec7a0

  5. Add without-openssl without-zlib test target.

    @daztucker
    daztucker committed Aug 7, 2020
    651bb3a

Commits on Aug 5, 2020

  1. Add CI with prepare script 

    * Only use heimdal kerberos implementation
* Fetch yubico/libfido2 (see: https://github.com/Yubico/libfido2)
* Add one target for
    * all features
    * each feature alone
    * no features
    @dns2utf8
    dns2utf8 committed Aug 5, 2020
    9499f2b

Commits on Aug 4, 2020

  1. support NetBSD's utmpx.ut_ss address field 

    bz#960, ok dtucker
    @djmdjm
    djmdjm committed Aug 4, 2020
    ea1f649

  2. wrap a declaration in the same ifdefs as its use 

    avoids warnings on NetBSD
    @djmdjm
    djmdjm committed Aug 4, 2020
    32c63e7

  3. undef TAILQ_CONCAT and friends 

    Needed for NetBSD. etc that supply these macros
    @djmdjm
    djmdjm committed Aug 4, 2020
    c9e3be9

Commits on Aug 3, 2020

  1. upstream: ensure that certificate extensions are lexically sorted. 

    Previously if the user specified a custom extension then the everything would
be in order except the custom ones. bz3198 ok dtucker markus

OpenBSD-Commit-ID: d97deb90587b06cb227c66ffebb2d9667bf886f0
    @djmdjm
    djmdjm committed Aug 3, 2020
    2d8a3b7

  2. upstream: allow -A to explicitly enable agent forwarding in scp and 

    sftp. The default remains to not forward an agent, even when ssh_config
enables it. ok jmc dtucker markus

OpenBSD-Commit-ID: 36cc526aa3b0f94e4704b8d7b969dd63e8576822
    @djmdjm
    djmdjm committed Aug 3, 2020
    a8732d7

  3. upstream: clang -Wimplicit-fallthrough does not recognise /* 

    FALLTHROUGH */ comments, which is the style we currently use, and gives too
many boring warnings. ok djm

OpenBSD-Commit-ID: 07b5031e9f49f2b69ac5e85b8da4fc9e393992a0
    @djmdjm
    deraadt@openbsd.org authored and djmdjm committed Aug 3, 2020
    ab91054

  4. upstream: Also compare username when checking for JumpHost loops. 

    bz#3057, ok djm@

OpenBSD-Commit-ID: 9bbc1d138adb34c54f3c03a15a91f75dbf418782
    @daztucker @djmdjm
    daztucker authored and djmdjm committed Aug 3, 2020
    ced327b

Commits on Jul 31, 2020

  1. Remove AC_REVISION. 

    It hasn't been useful since we switched to git in 2014.  ok djm@
    @daztucker
    daztucker committed Jul 31, 2020
    ae75270

Commits on Jul 28, 2020

  1. Use argv in OSSH_CHECK_CFLAG_COMPILE test. 

    configure.ac is not detecting -Wextra in compilers that implement the
option. The problem is that -Wextra implies -Wunused-parameter, and the
C excerpt used by aclocal.m4 does not use argv.  Patch from pedro at
ambientworks.net, ok djm@
    @daztucker
    daztucker committed Jul 28, 2020
    89fc3f4

Commits on Jul 20, 2020

  1. Skip ECDSA-SK webauthn test when built w/out ECC

    @daztucker
    daztucker committed Jul 20, 2020
    62c81ef

  2. Add ssh-sk-helper and manpage to RPM spec file 

    Based on patch from Fabio Pedretti
    @djmdjm
    djmdjm committed Jul 20, 2020
    3ec9a6d

Commits on Jul 17, 2020

  1. upstream: Add %k to the TOKENs for Match Exec for consistency with 

    the other keywords that recently got %k.

OpenBSD-Commit-ID: 1857d1c40f270cbc254fca91e66110641dddcfdb
    @daztucker
    daztucker committed Jul 17, 2020
    a2855c0

  2. upstream: fix macro slip in previous; 

    OpenBSD-Commit-ID: 624e47ab209450ad9ad5c69f54fa69244de5ed9a
    @daztucker
    jmc@openbsd.org authored and daztucker committed Jul 17, 2020
    6986076

  3. upstream: Add test for '%k' (HostKeyAlias) TOKEN. 

    OpenBSD-Regress-ID: 8ed1ba1a811790031aad3fcea860a34ad7910456
    @daztucker
    daztucker committed Jul 17, 2020
    40649bd

  4. upstream: Add tests for expansions on UserKnownHostsFile. 

    OpenBSD-Regress-ID: bccf8060306c841bbcceb1392644f906a4d6ca51
    @daztucker @djmdjm
    daztucker authored and djmdjm committed Jul 17, 2020
    6736fe6

  5. upstream: log error message for process_write() write failures 

    OpenBSD-Commit-ID: f733d7b3b05e3c68967dc18dfe39b9e8fad29851
    @djmdjm
    djmdjm committed Jul 17, 2020
    287dc63

  6. upstream: Add a '%k' TOKEN that expands to the effective HostKey of 

    the destination.  This allows, eg, keeping host keys in individual files
using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654, ok djm@, jmc@
(man page bits)

OpenBSD-Commit-ID: 7084d723c9cc987a5c47194219efd099af5beadc
    @daztucker @djmdjm
    daztucker authored and djmdjm committed Jul 17, 2020
    8df5774

  7. upstream: Add %-TOKEN, environment variable and tilde expansion to 

    UserKnownHostsFile, allowing the file to be automagically split up in the
configuration (eg bz#1654).  ok djm@, man page parts jmc@

OpenBSD-Commit-ID: 7e1b406caf147638bb51558836a72d6cc0bd1b18
    @daztucker @djmdjm
    daztucker authored and djmdjm committed Jul 17, 2020
    c4f2399

  8. upstream: - Add [-a rounds] in ssh-keygen man page and usage() - 

    Reorder parameters list in the first usage() case - Sentence rewording

ok dtucker@
jmc@ noticed usage() missed -a flag too

OpenBSD-Commit-ID: f06b9afe91cc96f260b929a56e9930caecbde246
    @rapenne-s @djmdjm
    rapenne-s authored and djmdjm committed Jul 17, 2020
    dbaaa01

  9. upstream: start sentence with capital letter; 

    OpenBSD-Commit-ID: ab06581d51b2b4cc1b4aab781f7f3cfa56cad973
    @djmdjm
    jmc@openbsd.org authored and djmdjm committed Jul 17, 2020
    69924a9

  10. detect Linux/X32 systems 

    This is a frankenstein monster of AMD64 instructions/calling conventions
but with a 4GB address space. Allegedly deprecated but people still run
into it causing weird sandbox failures, e.g. bz#3085
    @djmdjm
    djmdjm committed Jul 17, 2020
    5b56bd0

Commits on Jul 15, 2020

  1. upstream: Fix previous by calling the correct function. 

    OpenBSD-Regress-ID: 821cdd1dff9c502cceff4518b6afcb81767cad5a
    @daztucker
    daztucker committed Jul 15, 2020
    9c9ddc1

  2. upstream: Update test to match recent change in match.c 

    OpenBSD-Regress-ID: 965bda1f95f09a765050707340c73ad755f41167
    @daztucker
    daztucker committed Jul 15, 2020
    f1a4798

  3. Adjust portable code to match changes in 939d787d,

    @daztucker
    daztucker committed Jul 15, 2020
    d7e71be

  4. upstream: Add default for number of rounds (-a). ok djm@ 

    OpenBSD-Commit-ID: cb7e9aa04ace01a98e63e4bd77f34a42ab169b15
    @daztucker
    daztucker committed Jul 15, 2020
    fec89f3
Older