sk_enroll: never drop SSH_SK_USER_VERIFICATION_REQD flag from response
authordjm <djm@openbsd.org>
Wed, 14 Sep 2022 00:14:37 +0000 (00:14 +0000)
committerdjm <djm@openbsd.org>
Wed, 14 Sep 2022 00:14:37 +0000 (00:14 +0000)
commita22b3b3a26748558d18d007a53f9463703abfefc
tree8c31751a86ee63ac5732caa25179b2cb710ca951
parentbbe6ee58f661ab23bab2ce359761d5348bddab8c
sk_enroll: never drop SSH_SK_USER_VERIFICATION_REQD flag from response

Now that all FIDO signing calls attempt first without PIN and then
fall back to trying PIN only if that attempt fails, we can remove the
hack^wtrick that removed the UV flag from the keys returned during
enroll.

By Corinna Vinschen
usr.bin/ssh/sk-usbhid.c