[openssh-commits] [openssh] branch master updated (a62f4e19 -> 633778d5)

Sat Dec 14 08:41:03 AEDT 2019

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

      from  a62f4e19  upstream: some more corrections for documentation problems spotted
       new  c33d4686  upstream: add a note about the 'extensions' field in the signed
       new  b52ec0ba  upstream: use ssh-sk-helper for all security key signing operations
       new  612b1dd1  upstream: allow sshbuf_put_stringb(buf, NULL); ok markus@
       new  611073fb  upstream: perform security key enrollment via ssh-sk-helper too.
       new  d2143476  upstream: actually commit the ssh-sk-helper client code; ok markus
       new  f45f3a8a  fixup
       new  7b47b40b  adapt Makefile to ssh-sk-client everywhere
       new  633778d5  only link ssh-sk-helper against libfido2

The 8 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.

Detailed log of new commits:

commit 633778d567ad50b63d2a3bca5e1b97d279d236d9
Author: Damien Miller <djm at mindrot.org>
Date:   Sat Dec 14 08:40:33 2019 +1100

    only link ssh-sk-helper against libfido2

commit 7b47b40b170db4d6f41da0479575f6d99dd7228a
Author: Damien Miller <djm at mindrot.org>
Date:   Sat Dec 14 08:20:52 2019 +1100

    adapt Makefile to ssh-sk-client everywhere

commit f45f3a8a12e2bee601046b916e6c5cd6eae08048
Author: Damien Miller <djm at mindrot.org>
Date:   Sat Dec 14 07:53:11 2019 +1100

    fixup

commit d21434766764d5babf99fc3937c19b625c0f6334
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Dec 13 20:16:56 2019 +0000

    upstream: actually commit the ssh-sk-helper client code; ok markus

    OpenBSD-Commit-ID: fd2ea776a5bbbf4d452989d3c3054cf25a5e0589

commit 611073fb40ecaf4ac65094e403edea3a08deb700
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Dec 13 19:11:14 2019 +0000

    upstream: perform security key enrollment via ssh-sk-helper too.

    This means that ssh-keygen no longer needs to link against ssh-sk-helper, and
    only ssh-sk-helper needs libfido2 and /dev/uhid* access;

    feedback & ok markus@

    OpenBSD-Commit-ID: 9464233fab95708d2ff059f8bee29c0d1f270800

commit 612b1dd1ec91ffb1e01f58cca0c6eb1d47bf4423
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Dec 13 19:09:37 2019 +0000

    upstream: allow sshbuf_put_stringb(buf, NULL); ok markus@

    OpenBSD-Commit-ID: 91482c1ada9adb283165d48dafbb88ae91c657bd

commit b52ec0ba3983859514aa7b57d6100fa9759fe696
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Dec 13 19:09:10 2019 +0000

    upstream: use ssh-sk-helper for all security key signing operations

    This extracts and refactors the client interface for ssh-sk-helper
    from ssh-agent and generalises it for use by the other programs.
    This means that most OpenSSH tools no longer need to link against
    libfido2 or directly interact with /dev/uhid*

    requested by, feedback and ok markus@

    OpenBSD-Commit-ID: 1abcd3aea9a7460eccfbf8ca154cdfa62f1dc93f

commit c33d46868c3d88e04a92610cdb429094aeeb5847
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Wed Dec 11 22:19:47 2019 +0000

    upstream: add a note about the 'extensions' field in the signed

    object

    OpenBSD-Commit-ID: 67c01e0565b258e0818c1ccfe1f1aeaf9a0d4c7b

Summary of changes:
 .depend               |   3 +-
 Makefile.in           |  79 +++++++-----
 PROTOCOL.u2f          |   4 +
 configure.ac          |   1 -
 ssh-agent.c           | 160 ++++---------------------
 ssh-sk-client.c       | 323 ++++++++++++++++++++++++++++++++++++++++++++++++++
 ssh-sk-helper.c       | 161 +++++++++++++++++++------
 ssh-sk.c              |   4 +-
 ssh-sk.h              |   7 +-
 sshbuf-getput-basic.c |   5 +-
 sshkey.c              |  15 +--
 sshkey.h              |   9 +-
 12 files changed, 544 insertions(+), 227 deletions(-)
 create mode 100644 ssh-sk-client.c

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.