[
https://issues.apache.org/jira/browse/SSHD-1221?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17438323#comment-17438323
]
Thomas Wolf commented on SSHD-1221:
-----------------------------------
[PR 208|https://github.com/apache/mina-sshd/pull/208]
> Support key constraints when adding a key to an SSH agent
> ---------------------------------------------------------
>
> Key: SSHD-1221
> URL: https://issues.apache.org/jira/browse/SSHD-1221
> Project: MINA SSHD
> Issue Type: Improvement
> Affects Versions: 2.7.0
> Reporter: Thomas Wolf
> Assignee: Thomas Wolf
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> This is needed for OpenSSH compatibility.
> [OpenSSH|https://datatracker.ietf.org/doc/html/draft-miller-ssh-agent-04#section-4.2.6]
> documents three constraints:
> * confirm - the agent prompts the user before each key use of a key added
> with this option.
> * lifetime - in seconds; the agent automatically removes the key when the
> time expires.
> * generic extensions, of which there is one:
> ** sk-provider - path to a middleware library needed for FIDO keys
> The [IETF
> draft|https://datatracker.ietf.org/doc/html/draft-ietf-secsh-agent-02#section-1.4.2]
> also has constraints for keys being added, but of course those are
> different, and their draft looks incomplete in those sections.
> Apache MINA sshd should provide interfaces that enable users to implement
> adding keys to an agent with arbitrary constraints, and should provide a
> default implementation compatible with OpenSSH.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
