aboutsummaryrefslogtreecommitdiffstats
path: root/plumbing/transport/server/server.go
diff options
context:
space:
mode:
authorEvan Elias <evan@skeema.net>2022-06-20 18:20:18 -0400
committerMáximo Cuadros <mcuadros@gmail.com>2022-09-22 10:14:48 +0200
commitc35b8082c863f2106de1c3c95ba9ed21d30f9371 (patch)
treeaea2f664d84c32e9ff169d02737d7735d165f36e /plumbing/transport/server/server.go
parentaf1efaa7dfb2a33de9c15597dd2cc65ea626cf35 (diff)
downloadgo-git-c35b8082c863f2106de1c3c95ba9ed21d30f9371.tar.gz
plumbing: transport/ssh, auto-populate ClientConfig.HostKeyAlgorithms. Fixes #411
This commit adjusts the transport/ssh logic in command.connect(), so that it now auto-populates ssh.ClientConfig.HostKeyAlgorithms. The algorithms are chosen based on the known host keys for the target host, as obtained from the known_hosts file. In order to look-up the algorithms from the known_hosts file, external module github.com/skeema/knownhosts is used. This package is just a thin wrapper around golang.org/x/crypto/ssh/knownhosts, adding an extra mechanism to query the known_hosts keys, implemented in a way which avoids duplication of any golang.org/x/crypto/ssh/knownhosts logic. Because HostKeyAlgorithms vary by target host, some related logic for setting HostKeyCallback has been moved out of the various AuthMethod implementations. This was necessary because the old HostKeyCallbackHelper is not host-specific. Since known_hosts handling isn't really tied to AuthMethod anyway, it seems reasonable to separate these. Previously-exported types/methods remain in place for backwards compat, but some of them are now unused. For testing approach, see pull request. Issue #411 can only be reproduced via end-to-end / integration testing, since it requires actually launching an SSH connection, in order to see the key mismatch error triggered from https://github.com/golang/go/issues/29286 as the root cause.
Diffstat (limited to 'plumbing/transport/server/server.go')
0 files changed, 0 insertions, 0 deletions