diff options
| author | Linos Giannopoulos <linosgian00@gmail.com> | 2021-01-06 23:19:48 +0200 |
|---|---|---|
| committer | Linos Giannopoulos <linosgian00@gmail.com> | 2021-01-07 00:53:05 +0200 |
| commit | 855db864b0c4d2dcc5ed2f0182ea4a7942314086 (patch) | |
| tree | df57ef4f4713a06ce6ed98cc1c99b2872439d577 /net/openssh/Config.in | |
| parent | 1ce5b104259503be843f7a92a8955ad5021fda04 (diff) | |
openssh: Add FIDO2 hardware token support
Version 8.2[0] added support for two new key types: "ecdsa-sk" and
"ed25519-sk". These two type enable the usage of hardware tokens that
implement the FIDO (or FIDO2) standard, as an authentication method for
SSH.
Since we're already on version 8.4 all we need to do is to explicitly enable
the support for hardware keys when compiling OpenSSH and add all the
missing dependencies OpenSSH requires.
OpenSSH depends on libfido2[1], to communicate with the FIDO devices
over USB. In turn, libfido2 depends on libcbor, a C implementation of
the CBOR protocol[2] and OpenSSL.
[0]: https://lwn.net/Articles/812537/
[1]: https://github.com/Yubico/libfido2
[2]: tools.ietf.org/html/rfc7049
Signed-off-by: Linos Giannopoulos <linosgian00@gmail.com>
Diffstat (limited to 'net/openssh/Config.in')
| -rw-r--r-- | net/openssh/Config.in | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/net/openssh/Config.in b/net/openssh/Config.in new file mode 100644 index 000000000..3690ced2b --- /dev/null +++ b/net/openssh/Config.in @@ -0,0 +1,12 @@ +if PACKAGE_openssh-server + +config OPENSSH_LIBFIDO2 + bool + default y + prompt "Include libfido2 support in openssh-server" + help + OpenSSH version 8.2 added two new ssh authentication methods, + namely `ecdsa_sk` and `ed25519_sk`. These two methods make use + of hardware keys that implement the FIDO and FIDO2 protocols. + In order to use these two types, libfido2 is required. +endif |