CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2021/12/02 16:23:13
Modified files: usr.bin/ssh : sk-usbhid.c Log message: improve the testing of credentials against inserted FIDO keys a little more: ask the token whether a particular key belongs to it in cases where the token support on-token user- verification (e.g. biometrics) rather than just assuming that it will accept it. Will reduce spurious "Confirm user presence" notifications for key handles that relate to FIDO keys that are not currently inserted in at least some cases. Motivated by bz3366; by Pedro Martelletto