[ 
https://issues.apache.org/jira/browse/SSHD-1161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17342212#comment-17342212
 ] 

Alex Sherwin edited comment on SSHD-1161 at 5/11/21, 12:51 AM:
---------------------------------------------------------------

This work is underway on my mina fork here: 
[https://github.com/alex-sherwin/mina-sshd/tree/feature/SSHD-1161-client-certificates]

 

There has already been some discussion on the original certificates PR (for 
host certs) here: https://github.com/apache/mina-sshd/pull/119

 

PR for this ticket to follow soon


was (Author: [email protected]):
This work is underway on my mina fork here: 
[https://github.com/alex-sherwin/mina-sshd/tree/feature/SSHD-1161-client-certificates]

PR to follow soon

> Support OpenSSH client certificates for publickey authentication
> ----------------------------------------------------------------
>
>                 Key: SSHD-1161
>                 URL: https://issues.apache.org/jira/browse/SSHD-1161
>             Project: MINA SSHD
>          Issue Type: New Feature
>            Reporter: Alex Sherwin
>            Priority: Major
>   Original Estimate: 24h
>  Remaining Estimate: 24h
>
> Support OpenSSH client certificates for publickey authentication
> This extends the existing publickey authentication protocol described in RFC 
> 4252 Section 7: https://datatracker.ietf.org/doc/html/rfc4252#section-7
> The extensions are described in 
> [https://cvsweb.openbsd.org/src/usr.bin/ssh/PROTOCOL.certkeys?annotate=HEAD]
> Currently the MINA code base supports host key certificates (where the client 
> can optionally validate a host certificate), but client certificates are not 
> supported (where the client can use a certificate for authentication to the 
> server)
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to