Make it possible to load certs from PKCS#11 tokens
authordjm <djm@openbsd.org>
Mon, 18 Dec 2023 14:46:56 +0000 (14:46 +0000)
committerdjm <djm@openbsd.org>
Mon, 18 Dec 2023 14:46:56 +0000 (14:46 +0000)
commiteead3eb2279781736d1ec900982388cc8e13de4b
tree1dd88ce5808b3e9f0517ca55759b8ca1c392402d
parent95a9b9b7de489f6d9cc8d35decfa2696cd5317a4
Make it possible to load certs from PKCS#11 tokens

Adds a protocol extension to allow grafting certificates supplied by
ssh-add to keys loaded from PKCS#11 tokens in the agent.

feedback/ok markus@
usr.bin/ssh/PROTOCOL.agent
usr.bin/ssh/authfd.c
usr.bin/ssh/authfd.h
usr.bin/ssh/ssh-add.1
usr.bin/ssh/ssh-add.c
usr.bin/ssh/ssh-agent.c
usr.bin/ssh/ssh-pkcs11-client.c
usr.bin/ssh/ssh-pkcs11.h