[Bug 2817] Add support for PKCS#11 URIs (RFC 7512)

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Fri Feb 16 02:14:42 AEDT 2018


https://bugzilla.mindrot.org/show_bug.cgi?id=2817

Jakub Jelen <jjelen at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #3111|0                           |1
        is obsolete|                            |

--- Comment #2 from Jakub Jelen <jjelen at redhat.com> ---
Created attachment 3119
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3119&action=edit
PKCS#11 URI (RFC7512) support v2

I uploaded a new version of the patch, which is removing the PKCS11URI
configuration option and instead the URI can be provided to
IdentityFile configuration option with prefix "pkcs11:".

The changes to the code are minimal (the largest part is the testing
soft-pkcs11 module):

 Makefile.in                       |   24 +-
 configure.ac                      |   37 ++
 readconf.c                        |    5 +-
 regress/Makefile                  |    9 +-
 regress/agent-pkcs11.sh           |   13 +-
 regress/locl.h                    |   79 +++
 regress/pkcs11.sh                 |  285 +++++++++
 regress/soft-pkcs11.c             | 2058
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 regress/unittests/Makefile        |    2 +-
 regress/unittests/pkcs11/Makefile |    9 +
 regress/unittests/pkcs11/tests.c  |  329 ++++++++++
 ssh-add.c                         |   26 +
 ssh-agent.c                       |   99 ++-
 ssh-keygen.c                      |    1 +
 ssh-pkcs11-client.c               |    3 +
 ssh-pkcs11-uri.c                  |  399 ++++++++++++
 ssh-pkcs11-uri.h                  |   41 ++
 ssh-pkcs11.c                      |  266 ++++++--
 ssh-pkcs11.h                      |    5 +
 ssh.c                             |   99 ++-
 ssh_config.5                      |   13 +
 21 files changed, 3699 insertions(+), 103 deletions(-)

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list