[ssh_x509] FIDO Support?
ssh_x509 at roumenpetrov.info
ssh_x509 at roumenpetrov.info
Wed Dec 18 21:57:56 EET 2024
На 18.12.24 г. в 1:12 ч., ssh_x509 at roumenpetrov.info написа:
> Hi Roumen,
> I understand that you don't adopt everything that OpenSSH does in your PKIX-SSH project. However, I was curious if there were plans to add FIDO support in the future.
FIDO? If it is about so called security keys ..
So branch security_keys is keep up to date.
It seem to me finally "security keys" could be used with "windows
hello". Not yet released neither by OpenBSD nor my adaptation.
Also finally OpenBSD key management is moved to EVP(!) API and PKEY as
storage. So, adaptation(branch security keys) is just adjusted with
exiting in PKIX-SSH key management.
As this part does not use deprecated API it could be published man stream.
When? Sorry, not in my priority list.
Part of code. for instance "dummy" provider and etc. still uses
deprecated in OpenSSL 0.9.8(!) API. 20 year ago no way to publish such code.
Remark: publish = to push to main stream.
Branch is rebased on each push i.e., after official release, it could be
considered as "release N + security keys as extra".
So use branch, please.
>
> Thank you,
> Alex
Regards,
Roumen Petrov
More information about the ssh_x509
mailing list