[ssh_x509] PKIX-SSH release 11.1

ssh_x509 at roumenpetrov.info ssh_x509 at roumenpetrov.info
Tue Dec 19 21:03:30 EET 2017


I would like to announce immediate availability of new release - 11.1.

This release includes some improvements:
- Protected authentication path for EC-keys
   Use of RSA keys stored on a secure token supports protected 
authentication path (pinpad reader). Unfortunately functionality was not 
implemented for EC-keys. With refactoring PKCS#11 login functionality 
protected authentication path is available for EC-keys as well.

- print public key for externally stored identities
   Now ssh-keygen command option -y, that print an public key to stdout, 
accepts keyfile name in enhanced identity format.
   Remark: PKIX-SSH could use externally stored identities - for mode 
details see description of IdentityFile in manual page ssh_config(5). In 
brief if identity name start with "engine:" instead from file identity 
load is redirected to "loadable cryptographic module" (engine). Prefix 
"store:" could be used if cryptographic library supports ossl_store(7) 
functionality (upcoming OpenSSL functionality).

- build fixes
   Build system is modernized to use more recent scripts. Also duplicate 
dependency objects or libraries are removed.

Roumen Petrov

More information about the ssh_x509 mailing list