| Commit message (Expand) | Author | Age | Files | Lines |
* | upstream: fix parsing of hex cert expiry time; was checking whether the | djm@openbsd.org | 2022-11-07 | 1 | -2/+2 |
* | upstream: allow certificate validity intervals, sshsig verification | djm@openbsd.org | 2022-08-11 | 1 | -3/+22 |
* | upstream: don't prompt for FIDO passphrase before attempting to enroll | djm@openbsd.org | 2022-08-05 | 1 | -9/+2 |
* | upstream: ssh-keygen: fix touch prompt, pin retries; | djm@openbsd.org | 2022-07-20 | 1 | -13/+10 |
* | upstream: when enrolling a resident key on a security token, check | djm@openbsd.org | 2022-07-20 | 1 | -1/+26 |
* | upstream: pull passphrase reading and confirmation into a separate | djm@openbsd.org | 2022-07-20 | 1 | -28/+37 |
* | upstream: ssh-keygen -A: do not generate DSA keys by default. | dtucker@openbsd.org | 2022-06-03 | 1 | -2/+1 |
* | upstream: ssh-keygen: implement "verify-required" certificate option. | naddy@openbsd.org | 2022-06-03 | 1 | -1/+11 |
* | upstream: Allow existing -U (use agent) flag to work with "-Y sign" | djm@openbsd.org | 2022-05-09 | 1 | -7/+12 |
* | upstream: improve error message when 'ssh-keygen -Y sign' is unable to | djm@openbsd.org | 2022-05-09 | 1 | -6/+13 |
* | upstream: helpful comment | djm@openbsd.org | 2022-03-18 | 1 | -1/+2 |
* | upstream: ssh-keygen -Y check-novalidate requires namespace or SEGV | djm@openbsd.org | 2022-03-18 | 1 | -1/+7 |
* | upstream: mark const string array contents const too, i.e. static | djm@openbsd.org | 2022-02-02 | 1 | -2/+2 |
* | upstream: add a comment so I don't make this mistake again | djm@openbsd.org | 2022-01-06 | 1 | -3/+5 |
* | upstream: fix cut-and-pasto in error message | djm@openbsd.org | 2022-01-06 | 1 | -2/+2 |
* | upstream: allow selection of hash at sshsig signing time; code | djm@openbsd.org | 2022-01-05 | 1 | -15/+28 |
* | upstream: add missing -O option to usage() for ssh-keygen -Y sign; | djm@openbsd.org | 2022-01-05 | 1 | -2/+2 |
* | upstream: move sig_process_opts() to before sig_sign(); no | djm@openbsd.org | 2022-01-05 | 1 | -38/+39 |
* | upstream: fix indenting in last commit | djm@openbsd.org | 2021-11-28 | 1 | -2/+2 |
* | upstream: Add ssh-keygen -Y match-principals operation to perform | djm@openbsd.org | 2021-11-27 | 1 | -1/+41 |
* | upstream: ssh-keygen: make verify-time argument parsing optional | djm@openbsd.org | 2021-10-29 | 1 | -4/+6 |
* | upstream: When downloading resident keys from a FIDO token, pass | djm@openbsd.org | 2021-10-28 | 1 | -34/+59 |
* | upstream: Dynamically allocate encoded HashKnownHosts and free as | dtucker@openbsd.org | 2021-10-06 | 1 | -1/+2 |
* | upstream: correct my mistake in previous fix; spotted by halex | djm@openbsd.org | 2021-09-08 | 1 | -2/+2 |
* | upstream: avoid NULL deref in -Y find-principals. Report and fix | djm@openbsd.org | 2021-09-07 | 1 | -2/+3 |
* | upstream: when verifying sshsig signatures, support an option | djm@openbsd.org | 2021-08-11 | 1 | -4/+19 |
* | upstream: Don't omit ssh-keygen -y from usage when built without | dtucker@openbsd.org | 2021-07-24 | 1 | -2/+2 |
* | upstream: Exclude key conversion options from usage when built | dtucker@openbsd.org | 2021-07-24 | 1 | -1/+3 |
* | upstream: Let allowed signers files used by ssh-keygen(1) | djm@openbsd.org | 2021-07-23 | 1 | -8/+50 |
* | upstream: silence redundant error message; reported by Fabian Stelzer | djm@openbsd.org | 2021-07-09 | 1 | -2/+3 |
* | upstream: Order includes as per style(9). Portable already has | dtucker@openbsd.org | 2021-07-08 | 1 | -1/+1 |
* | upstream: highly polished whitespace, mostly fixing spaces-for-tab | djm@openbsd.org | 2021-04-03 | 1 | -8/+8 |
* | upstream: pwcopy() struct passwd that we're going to reuse across a | djm@openbsd.org | 2021-03-13 | 1 | -1/+2 |
* | upstream: load_hostkeys()/hostkeys_foreach() variants for FILE* | djm@openbsd.org | 2020-12-21 | 1 | -2/+2 |
* | upstream: Include cipher.h for declaration of cipher_by_name. | dtucker@openbsd.org | 2020-11-28 | 1 | -1/+2 |
* | upstream: Document ssh-keygen -Z, sanity check its argument earlier and | dtucker@openbsd.org | 2020-11-27 | 1 | -3/+6 |
* | upstream: when requesting a security key touch on stderr, inform the | djm@openbsd.org | 2020-11-08 | 1 | -2/+2 |
* | Remove preprocessor directive from log macro calls. | Darren Tucker | 2020-11-08 | 1 | -1/+2 |
* | upstream: fix type of nid in type_bits_valid(); github PR#202 from | djm@openbsd.org | 2020-10-29 | 1 | -2/+2 |
* | upstream: whitespace; no code change | djm@openbsd.org | 2020-10-29 | 1 | -2/+2 |
* | upstream: use the new variant log macros instead of prepending | djm@openbsd.org | 2020-10-18 | 1 | -170/+134 |
* | upstream: when writing an attestation blob for a FIDO key, record all | djm@openbsd.org | 2020-09-09 | 1 | -17/+27 |
* | upstream: debug()-print a little info about FIDO-specific key | djm@openbsd.org | 2020-08-27 | 1 | -2/+6 |
* | upstream: Request PIN ahead of time for certain FIDO actions | djm@openbsd.org | 2020-08-27 | 1 | -18/+20 |
* | upstream: major rework of FIDO token selection logic | djm@openbsd.org | 2020-08-27 | 1 | -1/+6 |
* | upstream: support for user-verified FIDO keys | djm@openbsd.org | 2020-08-27 | 1 | -16/+39 |
* | upstream: ensure that certificate extensions are lexically sorted. | djm@openbsd.org | 2020-08-03 | 1 | -67/+85 |
* | upstream: - Add [-a rounds] in ssh-keygen man page and usage() - | solene@openbsd.org | 2020-07-17 | 1 | -7/+8 |
* | upstream: Defer creation of ~/.ssh by ssh(1) until we attempt to | dtucker@openbsd.org | 2020-06-26 | 1 | -17/+4 |
* | upstream: fix exit status for downloading of FIDO resident keys; | djm@openbsd.org | 2020-05-29 | 1 | -4/+4 |