]> source.dussan.org Git - jgit.git/commit
sshd: Skip unknown keys from the SSH agent 77/189377/3
authorThomas Wolf <thomas.wolf@paranor.ch>
Wed, 29 Dec 2021 19:33:33 +0000 (20:33 +0100)
committerThomas Wolf <thomas.wolf@paranor.ch>
Sun, 30 Jan 2022 16:13:46 +0000 (17:13 +0100)
commitf41929708e79d7b36e0a653ae3d7464d4f20b606
treece20d85a592f426844846970f0e592570d339959
parentb73548bc4c9b3cedb1d381c802186dcd43829a27
sshd: Skip unknown keys from the SSH agent

An SSH agent might contain keys that Apache MINA sshd cannot handle.
Pageant for instance can contain ed448 keys, which are not implemented
in OpenSSH or in Apache MINA sshd.

When an agent delivers such keys, simply skip (and log) them. That way,
we can work with the remaining keys. Otherwise a single unknown key in
the agent would break pubkey authentication.

Change-Id: I3945d932c7e64b628465004cfbaf10f4dc05f3e4
Signed-off-by: Thomas Wolf <thomas.wolf@paranor.ch>
org.eclipse.jgit.ssh.apache/META-INF/MANIFEST.MF
org.eclipse.jgit.ssh.apache/resources/org/eclipse/jgit/internal/transport/sshd/SshdText.properties
org.eclipse.jgit.ssh.apache/src/org/eclipse/jgit/internal/transport/sshd/SshdText.java
org.eclipse.jgit.ssh.apache/src/org/eclipse/jgit/internal/transport/sshd/agent/SshAgentClient.java