Re: [Cryptography-dev] ssh public key processing

2016-08-18 Thread Ron Frederick
I’ve implemented all of this in AsyncSSH, and there I chose to break out the authorized_key parsing from public key parsing. More specifically, AsyncSSH provides the following functions for reading SSH public keys: import_public_key

Re: [Cryptography-dev] ssh public key processing

2016-08-18 Thread Chris Hines
Hi Paul, Options are specified in the sshd man page https://www.freebsd.org/cgi/man.cgi?sshd(8) Under the section Authorized Keys File Format. Technically options are not part of the public key (so are not covered by RFC4253) but are part of the OpenSSHD authorized_keys file format (which includ

Re: [Cryptography-dev] ssh public key processing

2016-08-18 Thread Paul Kehrer
Hi Chris, I don't think we've tried to specifically bound it. In general the assumption has been that the keys it loads would be OpenSSH public keys in the form that you get from an "id_rsa.pub" file (for example). What do the options look like? Are they put into the line at the end as comments?

[Cryptography-dev] ssh public key processing

2016-08-17 Thread Chris Hines
Hi List, I have a question about the function cryptography.hazmat.primatives.serialization.load_ssh_public_key Basically is the function inteornded to load only the public key or is it intended that it be able to process any like out of an authorized_keys_file Source code shows that the function