Sergey Shishkin shishkin

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

Pure ESM package

The package that linked you here is now pure ESM. It cannot be require()'d from CommonJS.

This means you have the following choices:

Use ESM yourself. (preferred)
Use import foo from 'foo' instead of const foo = require('foo') to import the package. You also need to put "type": "module" in your package.json and more. Follow the below guide.
If the package is used in an async context, you could use await import(…) from CommonJS instead of require(…).
Stay on the existing version of the package until you can move to ESM.

Sample Project

Starting from:

lein new foo
cd foo

Say I have a random JAR file that is not available in any repository:

touch README.md

	/*
	Copyright 2015 Viktor Klang

	Licensed under the Apache License, Version 2.0 (the "License");
	you may not use this file except in compliance with the License.
	You may obtain a copy of the License at

	http://www.apache.org/licenses/LICENSE-2.0

	Unless required by applicable law or agreed to in writing, software

	#!/bin/sh
	#if run_with_bin_sh
	# Doing this because arguments can't be used with /usr/bin/env on linux, just mac
	exec fsharpi --define:mono_posix --exec $0 $*
	#endif

	(*
	* Crossplatform FSharp Makefile Bootstrapper
	* Apache licensed - Copyright 2014 Jay Tuley <[email protected]>
	* v 2.0 https://gist.github.com/jbtule/9243729

	object Tennis {
	// A Typesafe solution for http://codingdojo.org/cgi-bin/wiki.pl?KataTennis
	sealed trait Player
	case class Player1() extends Player
	case class Player2() extends Player

	sealed trait Score
	case class NScore [+P <: Score]() extends Score()

	type Score0 = NScore[Score]

	<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
	<xsl:template match="@*\|node()">
	<xsl:copy>
	<xsl:apply-templates select="@*\|node()"/>
	</xsl:copy>
	</xsl:template>
	<xsl:template match="//link[@rel='import']">
	<xsl:copy-of select="document(@href)" />
	</xsl:template>
	</xsl:stylesheet>

	;;; Compile your CoffeeScript along with your Clojure

	;; NOTE: For Clojure projects using Leiningen 1.7.x.
	;; Instructions for Leiningen 2.0.x coming soon.

	;; Step 1: add [robert/hooke "1.1.2"] to the :dev-dependencies option of your defproject call

	;; Step 2: add the following code to the bottom of your project.clj:

	(require ['robert.hooke :as 'hooke]

	var parser = document.createElement('a');
	parser.href = "http://example.com:3000/pathname/?search=test#hash";

	parser.protocol; // => "http:"
	parser.hostname; // => "example.com"
	parser.port; // => "3000"
	parser.pathname; // => "/pathname/"
	parser.search; // => "?search=test"
	parser.hash; // => "#hash"
	parser.host; // => "example.com:3000"