[ssh_x509] FIDO Support?

ssh_x509 at roumenpetrov.info ssh_x509 at roumenpetrov.info
Wed Dec 18 21:57:56 EET 2024


На 18.12.24 г. в 1:12 ч., ssh_x509 at roumenpetrov.info написа:
> Hi Roumen,
> I understand that you don't adopt everything that OpenSSH does in your PKIX-SSH project. However, I was curious if there were plans to add FIDO support in the future.

FIDO? If it is about so called security keys ..

So branch security_keys is keep up to date.

It seem to me finally "security keys" could be used with "windows 
hello". Not yet released neither by OpenBSD nor my adaptation.

Also finally OpenBSD key management is moved to EVP(!) API and PKEY as 
storage. So, adaptation(branch security keys) is just adjusted with 
exiting in PKIX-SSH key management.
As this part does not use deprecated API it could be published man stream.
When? Sorry, not in my priority list.


Part of code. for instance "dummy" provider and etc. still uses 
deprecated in OpenSSL 0.9.8(!) API. 20 year ago no way to publish such code.
Remark: publish = to push to main stream.


Branch is rebased on each push i.e., after official release, it could be 
considered as "release N + security keys as extra".

So use branch, please.

> 
> Thank you,
> Alex

Regards,
Roumen Petrov



More information about the ssh_x509 mailing list