]> git.ipfire.org Git - thirdparty/openssh-portable.git/commit
upstream: refactor key constraint parsing in ssh-agent
authordjm@openbsd.org <djm@openbsd.org>
Tue, 26 Jan 2021 00:54:49 +0000 (00:54 +0000)
committerDamien Miller <djm@mindrot.org>
Tue, 26 Jan 2021 01:21:48 +0000 (12:21 +1100)
commit37c70ea8d4f3664a88141bcdf0bf7a16bd5fd1ac
tree925330108f354aa3a7fea0c0409feae188c8bc91
parente0e8bee8024fa9e31974244d14f03d799e5c0775
upstream: refactor key constraint parsing in ssh-agent

Key constraints parsing code previously existed in both the "add regular
key" and "add smartcard key" path. This unifies them but also introduces
more consistency checking: duplicated constraints and constraints that
are nonsensical for a particular situation (e.g. FIDO provider for a
smartcard key) are now banned.

ok markus@

OpenBSD-Commit-ID: 511cb1b1c021ee1d51a4c2d649b937445de7983c
ssh-agent.c