[ssh_x509] PKIX-SSH release 15.1

[ssh_x509 at roumenpetrov.info]

Hi,

На 15.07.24 г. в 21:35 ч., ssh_x509 at roumenpetrov.info написа:
> 
> 
> On 2024-07-13 02:46, ssh_x509 at roumenpetrov.info wrote:
>>> On 2024-07-06 09:21, ssh_x509 at roumenpetrov.info wrote:
>>>> Regular release PKIX-SSH 15.1 is available for download. This 
>>>> release adds following:
>>>
>>> Hi, it seems that the diff has not been published for this release. 
>>> Is there a plan to release a diff for the 16.1 release?
>>
>> https://roumenpetrov.info/pipermail/ssh_x509_roumenpetrov.info/2024q3/000705.html
>>
> Thank you for the response, I suppose I missed this message. I am the 
> maintainer of openssh-contrib in Gentoo Linux, and without the diff, it 
> is much more difficult to include the X509 functionality. I would prefer 
> not to have to drop this functionality in the future.
> 

This is tough decision.

Not only "firewall" is recent differences.
 From repository is removed fuzzy testing due to poor integration.
Other new functionality like obscure keystroke does not look promising 
and requires more testing and review before to be accepted i.e., postponed.
Integration with system daemon is almost ready to be published. It 
includes is not only notification functionality but installs "services".
Also split of daemon binary is postponed for future as is not well 
tested, split is not finished yet, and PKIX-SSH still allows privilege 
separation to be disabled.

Separate repository keeps "security key" related patches. This 
functionality uses outdated and deprecated OpenSSL API. Not plan to 
integrate.

Android integration is in update phase needs to be adapted to "TermOne 
Plus" command "addon" model. This is development with priority.


Long time ago PKIX-SSH stops to be a patch that adds X.509 certificate 
support - version 8.0, 11 August 2014 is distributed with separate 
source package. The main reason is that PKIX-SSH starts use of modern 
OpenSSL API and FIPS capable cryptographic libraries. Also it supports 
OpenSSL engine and store API. So integration with OpenSSL is core 
difference.


As is visible so many differences result is huge diff-file.


Regards,
Roumen Petrov