https://git.schokokeks.org/derivepassphrase.git/tree/942785aa31a0964b2377013b803a37f631f6e980 Recent commits feed provided by GitList. https://git.schokokeks.org/derivepassphrase.git/commit/942785aa31a0964b2377013b803a37f631f6e980 software@the13thletter.info (Marco Ricci) Sat, 27 Dec 2025 15:15:35 +0100 942785aa31a0964b2377013b803a37f631f6e980 Extract the `_prepare_payload` and the `_load_keys_optimistically` helper functions from the `ssh_agent_client_with_test_keys_loaded` fixture function. The `_load_keys_optimistically` helper function needs further refactoring into a per-key function, not a per-keyset function; to be added in a following commit. https://git.schokokeks.org/derivepassphrase.git/commit/dabdc29b8128104b53c3b8a89176e46e3d371cf5 software@the13thletter.info (Marco Ricci) Sat, 27 Dec 2025 15:09:33 +0100 dabdc29b8128104b53c3b8a89176e46e3d371cf5 The `ssh_agent_client_with_test_keys_loaded` fixture function is due to be split, moving the upload bits and the `prepare_payload` function to new top-level helper functions. Rename the `prepare_payload` function, and add parameter definitions so that the extracted functions will make immediate sense. https://git.schokokeks.org/derivepassphrase.git/commit/fe1d7014afb71b37021a538d9581403b7d8bdab0 software@the13thletter.info (Marco Ricci) Sat, 27 Dec 2025 14:57:17 +0100 fe1d7014afb71b37021a538d9581403b7d8bdab0 The old implementation did not record *which* trailing data we were seeing, on the grounds that well-behaved SSH agents would not send any trailing data anyway (i.e., that this error condition was a failsafe). However, while implementing Windows named pipe support, I observed Pageant sporadically returning malformed responses that trigger this error. Without actually recording the trailing data, it is hard to understand whether this is Pageant's fault (unlikely) or ours (more likely), and specifically, whether we're implementing the protocol incorrectly (unlikely), or rather the communication channel (much more likely). So the `TrailingDataError` class now optionally records the actual raw response and the trailing data portion that caused the error, to aid debugging. https://git.schokokeks.org/derivepassphrase.git/commit/837e1f69087b3fd5e343ca83615c5d7cb1760e66 software@the13thletter.info (Marco Ricci) Sat, 27 Dec 2025 14:43:35 +0100 837e1f69087b3fd5e343ca83615c5d7cb1760e66 Use parametric types to allow better introspection into decorated classes. https://git.schokokeks.org/derivepassphrase.git/commit/b2f8b7d67c920bd63e944b72d10e9fa8e6030a59 software@the13thletter.info (Marco Ricci) Fri, 26 Dec 2025 12:25:39 +0100 b2f8b7d67c920bd63e944b72d10e9fa8e6030a59 The how-to "How to set up derivepassphrase vault with an SSH key" and the reference documentation "Prerequisites for using derivepassphrase vault with an SSH key" include new sections on Pageant and OpenSSH on Windows. For the latter, the "prerequisites" document also includes information on the deficiencies of the Windows port of OpenSSH, i.e., that the connection is aborted upon receiving unsupported requests (in violation of the communication protocol) and that the port lacks the features which normally distinguish OpenSSH from Pageant. We also expand the section on GnuPG's OpenSSH emulation on Windows in the "prerequisites" document: that the mode is untested because the documentation is wrong, and that we're now waiting for feedback from the GnuPG developers. https://git.schokokeks.org/derivepassphrase.git/commit/33a52956612f2f13ffb8c16281077ee40fde3121 software@the13thletter.info (Marco Ricci) Thu, 25 Dec 2025 23:37:49 +0100 33a52956612f2f13ffb8c16281077ee40fde3121 https://git.schokokeks.org/derivepassphrase.git/commit/34f1f94cbef736f973bf46318387785e6de66314 software@the13thletter.info (Marco Ricci) Thu, 25 Dec 2025 16:51:03 +0100 34f1f94cbef736f973bf46318387785e6de66314 https://git.schokokeks.org/derivepassphrase.git/commit/e30389fac403cf487af2d1e20e8df2e408edc5dd software@the13thletter.info (Marco Ricci) Thu, 25 Dec 2025 16:25:15 +0100 e30389fac403cf487af2d1e20e8df2e408edc5dd Add sanity checks for the constructed agent client with optimistically loaded test keys. The docstring asserts that the test fixture will skip if no keys can be loaded, but that wasn't the case. Furthermore, while there is little point in sanity testing the client when it is first received (from a different fixture, which does its own sanity checks), it makes sense to sanity-test the client *after* attempting to load all those test keys into the agent, because certain misbehaved agents terminate upon encountering unsupported key formats (see inline commentary), rendering the client non-functional. However, do not check whether the stubbed test agent can load the test keys. The stubbed test agent accesses the test keys directly, and only the test keys; whether the "load keys" operation succeeds or not is completely irrelevant. There is also little point in actually implementing the load operation: it is just more code that needs coverage, and dedicated tests. https://git.schokokeks.org/derivepassphrase.git/commit/537b00606fa01977cff1a7fb86e08c4db1c6f65a software@the13thletter.info (Marco Ricci) Thu, 25 Dec 2025 14:44:46 +0100 537b00606fa01977cff1a7fb86e08c4db1c6f65a Introduce SSH agent spawning functions that interface with running SSH agents on The Annoying OS. Also officially activate interfacing with the system SSH agent on The Annoying OS, now that there are working SSH agent socket providers on The Annoying OS that do not require UNIX domain socket support. Because the socket provider registry drastically changed shape since 0123456789abcdef, also update the tests referencing registry entries to use the correct non-alias base entry, if needed. The two most common agents on The Annoying OS, PuTTY/Pageant and OpenSSH on Windows, do not support session- or subshell-scoped spawning as they do on UNIX. So technically, these new "spawning" functions are actually "interfacing" functions. Introduce a matching type `SSHAgentInterfaceFunc` for these functions, as aluded to in a previous commit. Because the type does not return a process object, consumers of `SSHAgentSpawnFunc | SSHAgentInterfaceFunc` need to be adapted accordingly, leading to a couple of code changes. https://git.schokokeks.org/derivepassphrase.git/commit/41029a5e6ef04a9870dcaf044b54a26af94260ab software@the13thletter.info (Marco Ricci) Thu, 25 Dec 2025 14:33:08 +0100 41029a5e6ef04a9870dcaf044b54a26af94260ab