diff options
| author | Stan Hu <stanhu@gmail.com> | 2022-06-11 14:42:25 -0700 |
|---|---|---|
| committer | Stan Hu <stanhu@gmail.com> | 2022-06-26 00:11:42 -0700 |
| commit | 4919ec7a1ef3bcf7a8b2da1a5369c9135845f55e (patch) | |
| tree | 2ebab4c057f6191e72b7dd79b71f2fa180495147 /internal/handler | |
| parent | 34ec4ec81fa3b505a57095e7b07b38157ae57622 (diff) | |
| download | gitlab-shell-4919ec7a1ef3bcf7a8b2da1a5369c9135845f55e.tar.gz | |
gitlab-sshd: Add support for configuring host certificates
This adds support for specifying host certificates via the
`host_cert_files` option and advertises the signed key to the
client. This acts similarly to OpenSSH's `HostCertificate` parameter:
gitlab-sshd attempts to match a host key to its certificate, and then
substitutes the matching host key with a certificate signed by a
trusted certificate authority's key.
This is the first requirement to supporting SSH certificates. This
will enable the client to trust the server if both trust a common
certificate authority. The `TrustedUserCAKeys` option will need to be
supported later for the server to trust all user keys signed by this
certificate authority.
Relates to https://gitlab.com/gitlab-org/gitlab-shell/-/issues/495
Diffstat (limited to 'internal/handler')
0 files changed, 0 insertions, 0 deletions