openssh bugs - Oct 2013 - [Bug 1908] Extract the public key from certificate on pkcs#11

https://bugzilla.mindrot.org/show_bug.cgi?id=1908

Markus Friedl <markus at openbsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |markus at openbsd.org
   Attachment #2054|0                           |1
        is obsolete|                            |

--- Comment #3 from Markus Friedl <markus at openbsd.org> ---
Created attachment 2354
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2354&action=edit
updated patch for extracting the pubkey from x509 via pkcs#11

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1908

--- Comment #4 from Damien Miller <djm at mindrot.org> ---
Might a token offer a key in bare form and as a certificate? If so,
should it check for an identical key in the array before appending it? 

Later, it would be nice to be able to extract an OpenSSH certificate
from an extension section of the X.509 certificate so we could store
our certs on the card too.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1908

Markus Friedl <markus at openbsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #2354|0                           |1
        is obsolete|                            |

--- Comment #5 from Markus Friedl <markus at openbsd.org> ---
Created attachment 2370
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2370&action=edit
extract pub key from x509 via pkcs11, skip duplicates

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1908

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #2370|0                           |1
           is patch|                            |
   Attachment #2370|application/octet-stream    |text/plain
          mime type|                            |

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1908

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #2370|                            |ok+
              Flags|                            |

--- Comment #6 from Damien Miller <djm at mindrot.org> ---
Comment on attachment 2370
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2370
extract pub key from x509 via pkcs11, skip duplicates

Looks good!

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1908

--- Comment #7 from Markus Friedl <markus at openbsd.org> ---
(In reply to Damien Miller from comment #6)
> Comment on attachment 2370 [details]
> extract pub key from x509 via pkcs11, skip duplicates
> 
> Looks good!
I've committed the patch to openbsd....

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.