[ssh_x509] FIDO Support?

[ssh_x509 at roumenpetrov.info]

Hi Roumen,
Yes I am referring to security keys like yubico and others. Thanks for the information on the security_keys branch. Maybe the answer to this question is obvious, but is the security_keys branch kept up to date with both your PKIX-SSH updates and the relevant security_keys updates from OpenSSH?

Thank you,
Alex






On Wednesday, December 18, 2024 at 02:58:09 PM EST, <ssh_x509 at roumenpetrov.info> wrote: 





На 18.12.24 г. в 1:12 ч., ssh_x509 at roumenpetrov.info написа:
> Hi Roumen,
> I understand that you don't adopt everything that OpenSSH does in your PKIX-SSH project. However, I was curious if there were plans to add FIDO support in the future.

FIDO? If it is about so called security keys ..

So branch security_keys is keep up to date.

It seem to me finally "security keys" could be used with "windows 
hello". Not yet released neither by OpenBSD nor my adaptation.

Also finally OpenBSD key management is moved to EVP(!) API and PKEY as 
storage. So, adaptation(branch security keys) is just adjusted with 
exiting in PKIX-SSH key management.
As this part does not use deprecated API it could be published man stream.
When? Sorry, not in my priority list.


Part of code. for instance "dummy" provider and etc. still uses 
deprecated in OpenSSL 0.9.8(!) API. 20 year ago no way to publish such code.
Remark: publish = to push to main stream.


Branch is rebased on each push i.e., after official release, it could be 
considered as "release N + security keys as extra".

So use branch, please.

> 
> Thank you,
> Alex

Regards,
Roumen Petrov


_______________________________________________
ssh_x509 mailing list
ssh_x509 at roumenpetrov.info
http://roumenpetrov.info/mailman/listinfo/ssh_x509_roumenpetrov.info