[
https://issues.apache.org/jira/browse/SSHD-1221?focusedWorklogId=677848&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-677848
]
ASF GitHub Bot logged work on SSHD-1221:
----------------------------------------
Author: ASF GitHub Bot
Created on: 05/Nov/21 20:44
Start Date: 05/Nov/21 20:44
Worklog Time Spent: 10m
Work Description: tomaswolf merged pull request #208:
URL: https://github.com/apache/mina-sshd/pull/208
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
Issue Time Tracking
-------------------
Worklog Id: (was: 677848)
Time Spent: 1h (was: 50m)
> Support key constraints when adding a key to an SSH agent
> ---------------------------------------------------------
>
> Key: SSHD-1221
> URL: https://issues.apache.org/jira/browse/SSHD-1221
> Project: MINA SSHD
> Issue Type: Improvement
> Affects Versions: 2.7.0
> Reporter: Thomas Wolf
> Assignee: Thomas Wolf
> Priority: Major
> Time Spent: 1h
> Remaining Estimate: 0h
>
> This is needed for OpenSSH compatibility.
> [OpenSSH|https://datatracker.ietf.org/doc/html/draft-miller-ssh-agent-04#section-4.2.6]
> documents three constraints:
> * confirm - the agent prompts the user before each key use of a key added
> with this option.
> * lifetime - in seconds; the agent automatically removes the key when the
> time expires.
> * generic extensions, of which there is one:
> ** sk-provider - path to a middleware library needed for FIDO keys
> The [IETF
> draft|https://datatracker.ietf.org/doc/html/draft-ietf-secsh-agent-02#section-1.4.2]
> also has constraints for keys being added, but of course those are
> different, and their draft looks incomplete in those sections.
> Apache MINA sshd should provide interfaces that enable users to implement
> adding keys to an agent with arbitrary constraints, and should provide a
> default implementation compatible with OpenSSH.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
