[openssh-commits] [openssh] branch master updated (643222df6 -> 69965aefe)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

    from 643222df6 Update OSSFuzz link to current bug tracker.
     new 2238c48dc upstream: pkcs11_fetch_ecdsa_pubkey: use ASN1_STRING accessors
     new 69965aefe upstream: When loading FIDO2 resident keys, set the comment to the

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit 69965aefe3355488e0462291be13a233b8405091
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Mon Nov 24 23:43:10 2025 +0000

    upstream: When loading FIDO2 resident keys, set the comment to the
    
    FIDO application string. This matches the behaviour of ssh-keygen -K
    
    From Arian van Putten via GHPR608
    
    OpenBSD-Commit-ID: 3fda54b44ed6a8a6f94cd3e39e69c1e672095712

commit 2238c48dc90dc56af1d86b298d2cb25fa0c7ef14
Author: tb at openbsd.org <tb at openbsd.org>
Date:   Sun Nov 23 07:04:18 2025 +0000

    upstream: pkcs11_fetch_ecdsa_pubkey: use ASN1_STRING accessors
    
    In anticipation of davidben and beck making ASN1_STRING opaque in
    OpenSSL 4 with the aim of enabling surgery to make the X509 data
    structure less bad [1], we need to use dumb accessors to avoid build
    breakage. Fortunately only in one spot.
    
    This is OpenSSL 1.1 API and available in all members of the fork family.
    
    ok beck djm
    
    [1]: https://github.com/openssl/openssl/issues/29117
    
    OpenBSD-Commit-ID: 0bcaf691d20624ef43f3515c983cd5aa69547d4f

Summary of changes:
 ssh-add.c    | 6 +++---
 ssh-pkcs11.c | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.