7 Commits

Author	SHA1	Message	Date
djm@openbsd.org	e0d38ae9bc	upstream: more debugging; behind DEBUG_SK ... OpenBSD-Commit-ID: a978896227118557505999ddefc1f4c839818b60	2019-11-27 10:44:29 +11:00
djm@openbsd.org	b7e74ea072	upstream: Add new structure for signature options ... This is populated during signature verification with additional fields that are present in and covered by the signature. At the moment, it is only used to record security key-specific options, especially the flags field. with and ok markus@ OpenBSD-Commit-ID: 338a1f0e04904008836130bedb9ece4faafd4e49	2019-11-25 12:23:33 +11:00
djm@openbsd.org	d2b0f88178	upstream: memleak in error path ... OpenBSD-Commit-ID: 93488431bf02dde85a854429362695d2d43d9112	2019-11-25 12:22:43 +11:00
Darren Tucker	2f95d43dc2	Include openssl compat header. ... Fixes warning for ECDSA_SIG_set0 on OpenSSL versions prior to 1.1.	2019-11-20 16:34:11 +11:00
djm@openbsd.org	a70d92f236	upstream: adjust on-wire signature encoding for ecdsa-sk keys to ... better match ec25519-sk keys. Discussed with markus@ and Sebastian Kinne NB. if you are depending on security keys (already?) then make sure you update both your clients and servers. OpenBSD-Commit-ID: 53d88d8211f0dd02a7954d3af72017b1a79c0679	2019-11-20 09:27:29 +11:00
Damien Miller	764d51e044	autoconf pieces for U2F support ... Mostly following existing logic for PKCS#11 - turning off support when either libcrypto or dlopen(3) are unavailable.	2019-11-01 13:35:34 +11:00
djm@openbsd.org	02bb0768a9	upstream: Initial infrastructure for U2F/FIDO support ... Key library support: including allocation, marshalling public/private keys and certificates, signature validation. feedback & ok markus@ OpenBSD-Commit-ID: a17615ba15e0f7932ac4360cb18fc9a9544e68c7	2019-11-01 09:46:08 +11:00