Skip to content

touchid-agent v0.8.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Jun 19:41
· 59 commits to main since this release
v0.8.0
This tag was signed with the committer’s verified signature.
ignaciojimenez
SSH Key Fingerprint: 1VJ0wgG02grYDOQATblvb8afSNQZjJMQ/+bXlipXl0g
Verified
Learn about vigilant mode.
4f565c2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

touchid-agent v0.8.0

macOS SSH agent backed by the Secure Enclave and Touch ID. Drop-in
replacement for yubikey-agent.

Changes since v0.7.0

  • Merge pull request #24 from ignaciojimenez/feat/per-key-caller-binding
  • feat: per-key caller binding (#20)
  • Merge pull request #23 from ignaciojimenez/feat/require-hardened-callers
  • feat: optional hardened-runtime requirement for callers (#17 Phase 3)
  • Merge pull request #22 from ignaciojimenez/feat/caller-identity-rules
  • feat: identity-based caller verification rules (#17 Phase 2)
  • Merge pull request #21 from ignaciojimenez/feat/caller-codesign-identity
  • feat: resolve caller code-signing identity via audit token (#17 Phase 1)

Verifying this release

```
shasum -a 256 -c touchid-agent-VERSION-darwin-universal.tar.gz.sha256
```

The binary is signed with a Developer ID certificate and notarized by Apple.
Gatekeeper validates the notarization ticket online on first launch (flat
Mach-O CLI binaries cannot be stapled).

Installing

```
tar -xzf touchid-agent-VERSION-darwin-universal.tar.gz
sudo install -m 755 touchid-agent /usr/local/bin/
```

See README.md for SSH config and launchd setup.

Assets 9
Loading