search for: key_filter

Hi list, I have no idea if Damien Miller had the time to work on that. I have an initial patch to authenticate using PKCS#11 and ECDSA keys. This requires OpenSSL 1.0.2, prior OpenSSL versions do not expose the required interfaces to override the signature function pointer for ECDSA. The only limitation is that the OpenSSL API misses some cleanup function (finish, for instance), hence I have yet

...CKU_USER, (u_char *)pin, pin ? strlen(pin) : 0); if (rv != CKR_OK && rv != CKR_USER_ALREADY_LOGGED_IN) { - free(pin); + if (pin) free(pin); error("C_Login failed: %lu", rv); return (-1); } - free(pin); + if (pin) free(pin); si->logged_in = 1; } key_filter[1].pValue = k11->keyid;

...; + if ((rv = f->C_Login(si->session, CKU_USER, pin, pin ? strlen(pin): 0)) != CKR_OK) { - xfree(pin); + if (pin) + xfree(pin); error("C_Login failed: %lu", rv); return (-1); - } - xfree(pin); + } + if (pin) + xfree(pin); si->logged_in = 1; } key_filter[1].pValue = k11->keyid; Only in openssh-6.2p2: ssh-pkcs11.o

...free(pin); + }; + if ((rv = f->C_Login(si->session, CKU_USER, pin, pin ? strlen(pin): 0)) + != CKR_OK) { + if (pin) + xfree(pin); error("C_Login failed: %lu", rv); return (-1); } - free(pin); + if (pin) + xfree(pin); si->logged_in = 1; } key_filter[1].pValue = k11->keyid;

Hi, OpenSSH 6.7 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This is a big release containing a number of features, a lot of internal refactoring and some potentially-incompatible changes. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD: