summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authordjm@openbsd.org <djm@openbsd.org>2021-06-04 04:02:21 +0000
committerDamien Miller <djm@mindrot.org>2021-06-04 14:05:37 +1000
commit60107677dc0ce1e93c61f23c433ad54687fcd9f5 (patch)
tree483ab38aaea364f377c5d8576a932e4a69f4e15d
parentecc186e46e3e30f27539b4311366dfda502f0a08 (diff)
downloadopenssh-git-60107677dc0ce1e93c61f23c433ad54687fcd9f5.tar.gz
upstream: correct extension name "no-presence-required" =>
"no-touch-required" document "verify-required" option OpenBSD-Commit-ID: 1879ff4062cf61d79b515e433aff0bf49a6c55c5
-rw-r--r--PROTOCOL.certkeys18
1 files changed, 13 insertions, 5 deletions
diff --git a/PROTOCOL.certkeys b/PROTOCOL.certkeys
index 1fce8700..5b0cc2ce 100644
--- a/PROTOCOL.certkeys
+++ b/PROTOCOL.certkeys
@@ -260,6 +260,14 @@ source-address string Comma-separated list of source addresses
certificates may be presented from any
source address.
+verify-required empty Flag indicating that signatures made
+ with this certificate must assert FIDO
+ user verification (e.g. PIN or
+ biometric). This option only make sense
+ for the U2F/FIDO security key types that
+ support this feature in their signature
+ formats.
+
Extensions
----------
@@ -280,11 +288,11 @@ their data fields are:
Name Format Description
-----------------------------------------------------------------------------
-no-presence-required empty Flag indicating that signatures made
+no-touch-required empty Flag indicating that signatures made
with this certificate need not assert
- user presence. This option only make
- sense for the U2F/FIDO security key
- types that support this feature in
+ FIDO user presence. This option only
+ make sense for the U2F/FIDO security
+ key types that support this feature in
their signature formats.
permit-X11-forwarding empty Flag indicating that X11 forwarding
@@ -311,4 +319,4 @@ permit-user-rc empty Flag indicating that execution of
of this script will not be permitted if
this option is not present.
-$OpenBSD: PROTOCOL.certkeys,v 1.17 2019/11/25 00:57:51 djm Exp $
+$OpenBSD: PROTOCOL.certkeys,v 1.18 2021/06/04 04:02:21 djm Exp $