From 461ade27b8dd175c175e333b8d11b6e8a9a70a19 Mon Sep 17 00:00:00 2001 From: Ahmad Jarara Date: Fri, 5 Nov 2021 14:12:56 -0400 Subject: [PATCH 3/3] gnu: Add support for ecdsa-sk, ed25519-sk ssh keys * gnu/packages/ssh.scm (openssh): Add support for ecdsa-sk, ed25519-sk ssh keys --- gnu/packages/ssh.scm | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm index 4e217888fd..c0d7a6debc 100644 --- a/gnu/packages/ssh.scm +++ b/gnu/packages/ssh.scm @@ -63,6 +63,7 @@ (define-module (gnu packages ssh) #:use-module (gnu packages python-web) #:use-module (gnu packages python-xyz) #:use-module (gnu packages readline) + #:use-module (gnu packages security-token) #:use-module (gnu packages texinfo) #:use-module (gnu packages tls) #:use-module (gnu packages xorg) @@ -199,6 +200,7 @@ (define-public openssh (native-inputs `(("groff" ,groff) ("pkg-config" ,pkg-config))) (inputs `(("libedit" ,libedit) + ("libfido2" ,libfido2) ("openssl" ,openssl) ,@(if (hurd-target?) '() @@ -229,6 +231,9 @@ (define-public openssh '() '("--with-pam")) + ;; supports creation and use of ecdsa-sk, ed25519-sk keys + "--with-security-key-builtin" + ;; "make install" runs "install -s" by default, ;; which doesn't work for cross-compiled binaries ;; because it invokes 'strip' instead of -- 2.33.1