From: Dan McGregor Date: Fri, 12 Apr 2024 01:45:01 +0000 (-0600) Subject: openssh: add fido2 support X-Git-Tag: yocto-5.2~3212 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=74451a65f29b16f78b008b3ac70c99c2d61a7cad;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git openssh: add fido2 support OpenSSH supports FIDO security keys in both the client and server. Add an option to support them in oe. This change requires a new recipe that I've submitted to meta-openembedded that has not merged yet. Signed-off-by: Dan McGregor Signed-off-by: Richard Purdie --- diff --git a/meta/recipes-connectivity/openssh/openssh_9.6p1.bb b/meta/recipes-connectivity/openssh/openssh_9.6p1.bb index edd8e8c2d18..d941664b417 100644 --- a/meta/recipes-connectivity/openssh/openssh_9.6p1.bb +++ b/meta/recipes-connectivity/openssh/openssh_9.6p1.bb @@ -58,6 +58,7 @@ DEPENDS += "${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'systemd', '', d) # systemd-sshd-socket-mode means installing sshd.socket # and systemd-sshd-service-mode corresponding to sshd.service PACKAGECONFIG ??= "systemd-sshd-socket-mode" +PACKAGECONFIG[fido2] = "--with-security-key-builtin,--disable-security-key,libfido2" PACKAGECONFIG[kerberos] = "--with-kerberos5,--without-kerberos5,krb5" PACKAGECONFIG[ldns] = "--with-ldns,--without-ldns,ldns" PACKAGECONFIG[libedit] = "--with-libedit,--without-libedit,libedit"