Skip to content
zit Check-in [52cb4d83bf]
Login

Check-in [52cb4d83bf]

Overview
Comment:Merge the section 6 client login card onto trunk: zit push signs a login card with the derived shared secret so a fossil server authorizes the write, persisting only the 40-hex derived secret at 0600 and never the password — completing authenticated push, the last interop direction.
Timelines: family | ancestors | descendants | both | trunk
Files: files | file ages | folders
SHA3-256: 52cb4d83bf97b078903690eec6dfd31f5c224fd1a0a80fb62fbb3c11367abf69
User & Date: dmestas on 2026-07-15 22:23:14.322
Other Links: manifest | tags
Context
2026-07-15
22:37
Merge the login-card polish onto trunk: pin the section A.5 auth vectors directly against the RFC bytes, scrub the plaintext password buffer after deriving the secret, and cover the legacy pre-credential config decode. check-in: 22d0c3de75 user: dmestas tags: trunk
22:23
Merge trunk back onto cli after the login card. check-in: 56fbf01f2d user: dmestas tags: cli
22:23
Merge the section 6 client login card onto trunk: zit push signs a login card with the derived shared secret so a fossil server authorizes the write, persisting only the 40-hex derived secret at 0600 and never the password — completing authenticated push, the last interop direction. check-in: 52cb4d83bf user: dmestas tags: trunk
22:11
Sign push login cards with the derived shared secret so a fossil server authorizes the write, persisting only the 40-hex secret at 0600 and never the password check-in: f21e962a00 user: dmestas tags: cli
20:31
Merge server-side delta ingest onto trunk: the server push path reconstructs a delta-form file card against its held basis per section 7.4 with section 7.7 integrity, then persists it, so a fossil push of a delta-encoded manifest lands on zit serve. check-in: b49f1fa330 user: dmestas tags: trunk
Changes