CVS: cvs.openbsd.org: src

Damien Miller <[email protected]> Mon, 3 Aug 2026 00:50:49 -0600 (MDT)

Newsgroups	gmane.os.openbsd.cvs
Message-ID	<[email protected]>

CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2026/08/03 00:50:49

Modified files:
	usr.bin/ssh    : sshconnect2.c 

Log message:
Tweak ordering of certificates tried during pubkey authentication
to prefer FIDO keys that do not require user presence (touch) first,
followed by ones that do and with FIDO keys that require user
verification via PIN or biometrics last.

This effectively tries low-friction authenticators before higher
friction authenticators.

ok dtucker@