Alan Parra 8302d467d1 Improved touch ID availability and diagnostics (#12963) ...

Since #12794 we now build `tsh` binaries with touch ID capabilities. This calls
for a more sophisticated mechanism to determine if touch ID functions should be
enabled, as compile-time support only is not enough.

I've added the following checks, on top of compile-time / `touchid` build tag:

Binary is signed
Binary has entitlements
Machine is touch ID capable
Machine has a Secure Enclave
Put together this give us a much better proxy on whether to enable touch ID.

I've also added the `tsh touchid diag` command, mentioned in the Passwordless
macOS RFD (see
https://github.com/gravitational/teleport/blob/master/rfd/0054-passwordless-macos.md#tsh-support-commands).

#9160

* Improved touch ID availability and diagnostics
* Add the `tsh touchid diag` command
* Set min macOS version to 10.12 (macOS Sierra)

2022-05-31 17:10:06 +00:00

..

embedded.provisionprofile

Build macOS installer for tsh.app (#12751)

2022-05-23 20:56:21 +00:00

Info.plist

Improved touch ID availability and diagnostics (#12963)

2022-05-31 17:10:06 +00:00

PkgInfo

Build macOS installer for tsh.app (#12751)

2022-05-23 20:56:21 +00:00