summaryrefslogtreecommitdiffstats
path: root/src/cryptenroll (follow)
Commit message (Expand)AuthorAgeFilesLines
* cryptenroll: don't try to get PCR bank if we know the device keyLennart Poettering2024-09-111-1/+2
* cryptenroll/cryptsetup: allow combined signed TPM2 PCR policy + pcrlock policyLennart Poettering2024-09-061-33/+122
* crypenroll: make slot wiping on pin change a bit more explicitLennart Poettering2024-08-302-1/+3
* cryptenroll: don't return slot 0 when we have no policy to search forLennart Poettering2024-08-301-1/+1
* cryptenroll: iovec'ify a few more thingsLennart Poettering2024-08-3011-65/+57
* treewide: use sd_json_variant_un{hex|base64}() pervasivelyLennart Poettering2024-08-301-4/+3
* terminal-util: split out color macros/helpers into its own headerLennart Poettering2024-07-191-0/+1
* cryptenroll: add --list-devices switch that shows candidate block devicesLennart Poettering2024-07-011-0/+11
* cryptenroll: support for enrolling FIDO2 tokens in manual modeKamil Szczęk2024-06-203-48/+133
* tree-wide: port over to new builder apisLennart Poettering2024-06-193-20/+17
* libsystemd: turn json.[ch] into a public APILennart Poettering2024-06-126-60/+66
* cryptenroll: upgrade log level of critical failureYu Watanabe2024-05-251-1/+1
* cryptenroll: do not pass an empty pcrlock policyYu Watanabe2024-05-251-0/+2
* cryptenroll: explicitly pick PCR bank if literal PCR binding is off, but sign...Lennart Poettering2024-05-231-0/+13
* cryptenroll: determine TPM enrollment parmaeters only if we actually do TPM e...Lennart Poettering2024-05-061-22/+24
* cryptenroll: do not combine pcrlock and signed PCR policies in TPM modeLennart Poettering2024-05-062-8/+12
* cryptenroll: disable loading public key if --tpm2-public-key= is emptySam Leonard2024-05-023-20/+32
* tree-wise: several cleanups for loggingYu Watanabe2024-04-302-3/+3
* tree-wide: Use log_setup() everywhereDaan De Meyer2024-04-251-3/+1
* cryptenroll: fix typo (close parenthesis out of nowhere)Mike Yuan2024-04-241-1/+1
* Merge pull request #32434 from poettering/cryptenroll-prefer-varLuca Boccassi2024-04-231-16/+67
|\
| * cryptenroll: use [] in --help text to indicate block device argument is now o...Lennart Poettering2024-04-231-1/+1
| * cryptenroll: default to block device backing /var/ rather than /Lennart Poettering2024-04-231-15/+66
* | cryptenroll: sort includesMike Yuan2024-04-231-1/+1
|/
* cryptenroll: use root device by defaultLudwig Nussel2024-04-231-8/+25
* tpm2-util: add generic wrapper tpm2_context_new_or_warn() that wrpas tpm2_con...Lennart Poettering2024-04-221-2/+2
* cryptsetup: drop "headless" bool, make it a flag in AskPasswordFlags insteadLennart Poettering2024-02-203-3/+8
* cryptenroll,cryptsetup: clean up unlock credential for TPM2 + FIDO2Lennart Poettering2024-02-202-3/+5
* pkcs11-util: clean up credential handling for PKCS11 PINLennart Poettering2024-02-201-1/+1
* cryptenroll: use a different credential for new new PINLennart Poettering2024-02-201-1/+1
* libfido2: tweak credential to read fido2 PIN fromLennart Poettering2024-02-201-0/+1
* cryptenroll: use correct askpw id for pw requestLennart Poettering2024-02-201-2/+2
* cryptenroll: fix type confusion on acquire_tpm2_key() parameterLennart Poettering2024-02-201-1/+1
* ask-password: rework how we pass request meta info when asking passwordsLennart Poettering2024-02-202-25/+44
* Merge pull request #30766 from polarina/cryptenroll-tpm2-unlockLennart Poettering2024-02-084-10/+182
|\
| * cryptenroll: Support rotating PIN on an existing TPM2 enrollmentGabríel Arthúr Pétursson2024-02-013-7/+27
| * cryptenroll: Add support for unlocking through TPM2 enrollmentsGabríel Arthúr Pétursson2024-02-014-3/+151
| * cryptenroll: Lock memory pages before operating on the deviceGabríel Arthúr Pétursson2024-02-011-0/+4
* | cryptenroll: Fix reading keyfile from socketFelix Riemann2024-02-061-1/+1
* | cryptenroll: allow to use a public key on a tokenVladimir Stoiakin2024-02-021-5/+6
|/
* pcrlock: when unlocking try to pick up pcrlock policy from system credentialsLennart Poettering2024-01-221-0/+1
* Fix gcc14 -Wcalloc-transposed-args warningsCristian Rodríguez2024-01-141-1/+1
* hexdecoct: make unbase64mem and unhexmem always use SIZE_MAXMike Yuan2024-01-081-1/+1
* Merge pull request #30754 from poettering/iovecificationLennart Poettering2024-01-051-30/+26
|\
| * tpm2-util: more iovec'ificationLennart Poettering2024-01-051-30/+26
* | Merge pull request #29692 from H5117/fix_pkcs11_uriLennart Poettering2024-01-051-8/+38
|\ \ | |/ |/|
| * cryptenroll: change class in provided PKCS#11 URI if necessaryVladimir Stoiakin2024-01-051-8/+38
* | Merge pull request #30628 from YHNdnzj/format-table-improvementYu Watanabe2023-12-251-1/+1
|\ \
| * | format-table: introduce table_isempty and use it where appropriateMike Yuan2023-12-251-1/+1
| |/
* / tree-wide: drop space between variable and an increment/decrementYu Watanabe2023-12-242-2/+2
|/