LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
25767 Commits
1 Branch
46 MiB
Tree: aba4a294ba
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'aba4a294ba'
${ noResults }
openwrt-packages-dist/net/openssh/Config.in

12 lines
383 B
Raw Normal View History

openssh: Add FIDO2 hardware token support Version 8.2[0] added support for two new key types: "ecdsa-sk" and "ed25519-sk". These two type enable the usage of hardware tokens that implement the FIDO (or FIDO2) standard, as an authentication method for SSH. Since we're already on version 8.4 all we need to do is to explicitly enable the support for hardware keys when compiling OpenSSH and add all the missing dependencies OpenSSH requires. OpenSSH depends on libfido2[1], to communicate with the FIDO devices over USB. In turn, libfido2 depends on libcbor, a C implementation of the CBOR protocol[2] and OpenSSL. [0]: https://lwn.net/Articles/812537/ [1]: https://github.com/Yubico/libfido2 [2]: tools.ietf.org/html/rfc7049 Signed-off-by: Linos Giannopoulos <linosgian00@gmail.com>
4 years ago
​
​
​
​
​
​
​
​
​
​
​
 
  1. if PACKAGE_openssh-server
  2. 

  3. config OPENSSH_LIBFIDO2
  4. 	bool
  5. 	default y
  6. 	prompt "Include libfido2 support in openssh-server"
  7. 	help
  8. 		OpenSSH version 8.2 added two new ssh authentication methods,
  9. 		namely `ecdsa_sk` and `ed25519_sk`. These two methods make use
  10. 		of hardware keys that implement the FIDO and FIDO2 protocols.
  11. 		In order to use these two types, libfido2 is required.
  12. endif