forgejo/modules/ssh
Gusted de35b141b7
[GITEA] Restrict certificate type for builtin SSH server
- While doing some sanity checks over OpenSSH's code for how they
handle certificates authentication. I stumbled on an condition that
checks the certificate type is really an user certificate on the
server-side authentication. This checks seems to be a formality and just
for the sake of good domain seperation, because an user and host
certificate don't differ in their generation, verification or flags that
can be included.
- Add this check to the builtin SSH server to stay close to the
unwritten SSH specification.
- This is an breaking change for setups where the builtin SSH server is
being used and for some reason host certificates were being used for
authentication.

(cherry picked from commit 74c88c3217)
(cherry picked from commit 40df1875da)
(cherry picked from commit 07152e9a9d)
(cherry picked from commit 7bc135732d)
2023-08-29 09:55:20 +02:00
..
init.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
ssh.go [GITEA] Restrict certificate type for builtin SSH server 2023-08-29 09:55:20 +02:00
ssh_graceful.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00