https://git.schokokeks.org/derivepassphrase.git/tree/8f037c3b884428c8df9089f71994024e32017c0c Recent commits feed provided by GitList. In PuTTY's wishlist entry page, links are kept at their default styling. A line like blocks: pageant-deferred-decrypt pageant-forwarding-path pageant-key-confirm remains readable because the links are underlined, and thus word boundaries are clearly discernable. *Our* wishlist page however uses the standard Material for MkDocs styling, which does not underline links. As such, it is much more difficult to discern where one link ends and the next one begins. We fix this by adding 0.5em whitespace between two adjacent links in the bug-summary table. We add a right margin instead of a left one, despite the shakier browser support, because the table text is left-justified and the margin would "turn into a text-indent" if there happens to be a line-break between two such links. https://git.schokokeks.org/derivepassphrase.git/commit/8f037c3b884428c8df9089f71994024e32017c0c software@the13thletter.info (Marco Ricci) Mon, 23 Mar 2026 22:04:29 +0100 8f037c3b884428c8df9089f71994024e32017c0c https://git.schokokeks.org/derivepassphrase.git/commit/c187d73e08d40b1e1bb9d788f03901f5a9dc67b4 software@the13thletter.info (Marco Ricci) Mon, 23 Mar 2026 22:04:18 +0100 c187d73e08d40b1e1bb9d788f03901f5a9dc67b4 * windows-named-pipes: (61 commits) Add a changelog entry for Windows named pipe support Update the README for v0.6 Fix unloading SSH keys in the test suite Add more tests for the SSH agent socket provider internals Overhaul the SSH key tutorial, also aligning it with the SSH key how-to Add a tutorial for using SSH keys with `derivepassphrase vault` Update the copyright year to 2026 Fix a longstanding typo in the Markdown manpage examples Update the manpages with respect to SSH agents Fix minor formatting errors, linting errors, and typos Add tests for explicit SSH agent socket provider selection Error out correctly when an invalid SSH agent socket provider is specified Support specifying the SSH agent socket provider via CLI or configuration Document platform-specific coverage exclusion markers Work around non-reentrant SSH agent sockets/clients Add more coverage exclusion, with commentary Report SSH agent socket providers in `--version` output Support aliases in `--version` output (item feature lists) Turn the built in SSH agent socket provider names into an enum Fix coverage slipups in SSH agent socket provider implementations ... https://git.schokokeks.org/derivepassphrase.git/commit/010e3e9c6c9d162d32d0fb2dd0bccbfd13747c42 software@the13thletter.info (Marco Ricci) Mon, 23 Mar 2026 18:33:33 +0100 010e3e9c6c9d162d32d0fb2dd0bccbfd13747c42 Also mention the `--ssh-agent-socket-provider` command-line option and the `vault.ssh-agent-socket-provider` configuration option, and mention some caveats with the test suite on The Annoying OS. For developers, also mention related recent changes in the test suite: non-isolated agents and the PERMITTED_SSH_AGENTS and NON_REENTRANT_SSH_AGENTS environment variables. https://git.schokokeks.org/derivepassphrase.git/commit/28d6d733d73a92338d1ce2cd67044be60bba3ccb software@the13thletter.info (Marco Ricci) Sun, 22 Mar 2026 22:32:22 +0100 28d6d733d73a92338d1ce2cd67044be60bba3ccb Adjust the passages concerning SSH agent support and software dependencies to accurately reflect the state in (what will later become) v0.6. Also fix typos in the page footer and in a previous changelog entry that we came across while editing the README. https://git.schokokeks.org/derivepassphrase.git/commit/863e371fc2db3cd942a99bfc99844b70e250ffdd software@the13thletter.info (Marco Ricci) Sun, 22 Mar 2026 22:23:38 +0100 863e371fc2db3cd942a99bfc99844b70e250ffdd In the `ssh_agent_client_with_test_keys_loaded` test fixture, fix the unloading of the SSH test keys during fixture teardown. Previously, the test keys were persisting in the agent due to a protocol violation in our request -- the payload should be wrapped in an extra layer of `SSHAgentClient.string` -- but the fixture either never unloaded keys in the first place (for isolated agents) or it misinterpreted the resulting error message as indicating that the key was no longer available in the agent anyway. To avoid making such silent errors in the future, we now always unload keys, even for isolated agents, so that these errors have as high a chance as possible of triggering non-silently. https://git.schokokeks.org/derivepassphrase.git/commit/490996f7d8d1d79323259aee66548dac2514db0f software@the13thletter.info (Marco Ricci) Sun, 22 Mar 2026 13:24:44 +0100 490996f7d8d1d79323259aee66548dac2514db0f Specifically, add tests for the low-level `WindowsNamedPipeHandle` class, and for the socket provider selection machinery built on top of it. These tests, happily enough, mostly stub out the operating system-specific parts anyway, so they can be run on all operating systems, not just The Annoying OS. The lone `TestGracefulFailureForSSHAuthSock` class now fits into this larger picture of testing SSH agent socket provider failures, and so is moved to that section. Also, an unrelated typo in the inline commentary of the heavy-duty CLI tests was spotted while preparing this, and swiftly corrected. https://git.schokokeks.org/derivepassphrase.git/commit/9093a9bb513cb904161936f8ea01972383bcede6 software@the13thletter.info (Marco Ricci) Sat, 21 Mar 2026 20:02:13 +0100 9093a9bb513cb904161936f8ea01972383bcede6 On The Annoying OS, we add screenshots for the steps involving `pageant` and `puttygen`, because we cannot present a verbatim shell transcript. The instructions avoid giving motor instructions ("click on ...", "type ... in", etc.) as much as possible, both for consistency with the UNIX instructions and to focus on the higher-level operations instead. This also avoids doing users with motor impairments or unusual input device setups the disservice of giving them instructions they cannot follow. We add a definition for "key rotation", and further short commentary on key compartmentalization and locking the agent (or the key in the agent). We align the visual style of both this tutorial and the SSH key how-to by using the text framing approach from the latter to frame alternate blocks of content (e.g. operating system-specific instructions), either explicitly or implicitly, as needed. We ensure that this style is also used consistently in the how-to as well. Finally, we also add the `pageant` logo to the how-to, and image credits for the logo on both pages. https://git.schokokeks.org/derivepassphrase.git/commit/a8e01a9854df59178deb35c75fb9c918ddc564bd software@the13thletter.info (Marco Ricci) Sat, 14 Mar 2026 17:33:38 +0100 a8e01a9854df59178deb35c75fb9c918ddc564bd The tutorial builds on the previous tutorial for setting up `derivepassphrase vault` with a master passphrase, modifying the existing configuration to use a master SSH key instead. It covers SSH agent installation, key generation, and reconfiguring `derivepassphrase vault`. Both tutorials link to each other. The other tutorial (for setting up `derivepassphrase vault` with a master passphrase) now also contains a short note on shell prompts as well as operating system-specific instructions for the `pip` install method. For reproducibility, the new tutorial uses the standard Ed25519 SSH test key as the master SSH key. The test key is explicitly linked. The tutorial also includes a copy of the Pageant icon to help the reader identify the correct icon in The Annoying OS's task bar. https://git.schokokeks.org/derivepassphrase.git/commit/f9a8d370e5d2cb92d7c9f430543fe42a28bc5ff6 software@the13thletter.info (Marco Ricci) Sun, 08 Mar 2026 22:46:41 +0100 f9a8d370e5d2cb92d7c9f430543fe42a28bc5ff6 Also fix one instance where the declared license identifier still was the MIT license, making it unclear whether this file was licensed under a different license than the rest. (No, it was merely a typo.) https://git.schokokeks.org/derivepassphrase.git/commit/7eb5e54f22abbd9115bd27603f1a71bfda60425f software@the13thletter.info (Marco Ricci) Sun, 08 Feb 2026 21:25:06 +0100 7eb5e54f22abbd9115bd27603f1a71bfda60425f