Release v0.9.0 · Foxboron/ssh-tpm-agent

Source: github.com
45 points by Foxboron a day ago on lobsters | 0 comments

The release is signed with C100 3466 7663 4E80 C940 FB9E 9C02 FF41 9FEC BE16.

Packaging change

ssh-tpm-agent releases now has a tarball with an accompanying signature.
Please use this tarball instead of the Github generated tarball to have
ssh-tpm-agent report the correct version.

Alternatively please checkout the tag release straight from git.

Changes

Key confirm dialog and process chain

ssh-tpm-add now supports the -c flag for adding keys with a confirmation
dialog. This will require user-interaction through ssh-askpass before the key
is used for authentication or signatures.

Additionally the ssh-askpass prompt now contains the process chain that
prompted the dialog instead of it appearing context less.

Thanks to @Mic92 for implementing this.

Example screenshot:

583363150-96b34a5b-f38c-4434-8d9e-7cf4cb9fe55f

Public keys permissions changes

Public keys are now saved as world readable, 644, instead of the only readable
by the owner.

This mirrors the behaviour from ssh-keygen.

Generated Changelog

What's Changed

  • Tests | Data Races eliminated by @derwesx in #91
  • when keyring returns ENOENT, treat it as ENOKEY by @Mic92 in #94
  • Fix typo in README by @Gusted in #98
  • Fix typo of 'shouldnt' by @jas4711 in #104
  • Create public keys with permissions 644 by @nlewo in #111
  • docs: fix bash syntax highlighting in README by @only1thor in #113
  • ssh-tpm-add: add -c flag for per-use confirmation by @Mic92 in #114
  • fix: Provide err context (fixes #118) by @vorburger in #119
  • fix: Provide err context for 'Failed changing passphrase on the key by @vorburger in #120
  • fix: ssh-tpm-keygen for empty passphrase by @vorburger in #121
  • agent: show requesting process in confirm prompt by @Mic92 in #124
  • Embed version in git-archive tarballs and populate VERSION from it when set by @jas4711 in #105

New Contributors

Full Changelog: v0.8.0...v0.9.0