[jira] [Commented] (GUACAMOLE-945) Migrate SSH support (back) to libssh

["Mike Jumper (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GUACAMOLE-945?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17439939#comment-17439939 ] 

Mike Jumper commented on GUACAMOLE-945:
---------------------------------------

It looks like there's been quite a bit of progress on the libssh2 side since this issue was opened. The key exchange types noted by GUACAMOLE-1052 are now supported (with the possible exception of one that appears specific to libssh), there is support for ECDSA keys and OpenSSH-style key files, and agent support as of the latest release.

Perhaps this is no longer necessary except that we should bring things up-to-date with the latest support available via libssh2? (Though the lack of a libssh2-devel package on RHEL platforms would continue to be a pain...)

> Migrate SSH support (back) to libssh
> ------------------------------------
>
>                 Key: GUACAMOLE-945
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-945
>             Project: Guacamole
>          Issue Type: Improvement
>          Components: SSH
>            Reporter: Joonas Tuomisto
>            Assignee: Mike Jumper
>            Priority: Minor
>
> It appears Red Hat / CentOS stopped shipping libssh2 in version 8 which makes building Guacamole a hassle on those platforms - of course, this has nothing to do with Guacamole as such, but would it make sense to consider other libraries?
> I didn't look into this in depth so not sure if there's major benefits feature-wise and how much work this would entail...
> libssh seems to have undergone an external security audit recently so security could be one consideration.
> re: CentOS, this is discussed here: https://bugs.centos.org/view.php?id=16492



--
This message was sent by Atlassian Jira
(v8.20.1#820001)