You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2022/03/19 16:30:00 UTC

[jira] [Work logged] (SSHD-1254) Support host-based pubkey authentication in the client

     [ https://issues.apache.org/jira/browse/SSHD-1254?focusedWorklogId=744642&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-744642 ]

ASF GitHub Bot logged work on SSHD-1254:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 19/Mar/22 16:29
            Start Date: 19/Mar/22 16:29
    Worklog Time Spent: 10m 
      Work Description: tomaswolf opened a new pull request #213:
URL: https://github.com/apache/mina-sshd/pull/213


   Provide a KexExtensionParser for it; make the default client KEX
   extension handler understand the "publickey-hostbound@openssh.com"
   extension, and use it in UserAuthPublicKey.
   
   The extension changes the auth name in the SSH_MSG_USERAUTH_REQUEST
   from "pubkey" to "publickey-hostbound-v00@openssh.com" and includes
   the server's public key in the message.
   
   See https://github.com/openssh/openssh-portable/blob/807be686/PROTOCOL#L347


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Issue Time Tracking
-------------------

            Worklog Id:     (was: 744642)
    Remaining Estimate: 0h
            Time Spent: 10m

> Support host-based pubkey authentication in the client
> ------------------------------------------------------
>
>                 Key: SSHD-1254
>                 URL: https://issues.apache.org/jira/browse/SSHD-1254
>             Project: MINA SSHD
>          Issue Type: Improvement
>    Affects Versions: 2.8.0
>            Reporter: Thomas Wolf
>            Assignee: Thomas Wolf
>            Priority: Minor
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> This is a variation of the normal pubkey authentication that also includes the server's public host key in the SSH_MSG_USERAUTH_REQUEST message.
> See
>  * [https://www.openssh.com/agent-restrict.html#authverify]
>  * [https://github.com/openssh/openssh-portable/blob/807be686/PROTOCOL#L347]



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org