CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2020/05/13 04:08:02
Modified files:
usr.bin/ssh : sk-usbhid.c
Log message:
Enable credProtect extension when generating a resident key.
The FIDO 2.1 Client to Authenticator Protocol introduced a "credProtect"
feature to better protect resident keys. This option allows (amone other
possibilities) requiring a PIN prior to all operations that may retrieve
the key handle.
Patch by Pedro Martelletto; ok djm and markus
