This is an automated email from the ASF dual-hosted git repository. lgoldstein pushed a change to branch master in repository https://gitbox.apache.org/repos/asf/mina-sshd.git.
from c39dd0d [SSHD-977] Use consistent logging policy of caught exceptions details new 47f779f [SSHD-660] Add support for serer side openssh host certkeys new 7ebb469 [SSHD-660] Added some code improvements and logging for certificates handling code The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: CHANGES.md | 4 +- README.md | 3 + docs/server-setup.md | 3 + .../org/apache/sshd/cli/server/SshServerMain.java | 15 ++ .../apache/sshd/common/config/keys/KeyUtils.java | 8 + .../common/config/keys/OpenSshCertificate.java | 79 ++++++++ .../common/config/keys/OpenSshCertificateImpl.java | 223 +++++++++++++++++++++ .../keys/impl/OpenSSHCertificateDecoder.java | 118 +++++++++++ .../FileHostKeyCertificateProvider.java | 101 ++++++++++ .../HostKeyCertificateProvider.java} | 17 +- .../sshd/common/keyprovider/KeyPairProvider.java | 14 +- .../sshd/common/signature/BuiltinSignatures.java | 88 ++++++++ .../sshd/common/signature/SignatureFactory.java | 2 +- .../apache/sshd/common/signature/SignatureRSA.java | 5 +- .../org/apache/sshd/common/util/buffer/Buffer.java | 34 +++- .../sshd/common/util/buffer/ByteArrayBuffer.java | 7 + .../util/buffer/keys/BufferPublicKeyParser.java | 1 + .../buffer/keys/OpenSSHCertPublicKeyParser.java | 95 +++++++++ .../security/eddsa/EdDSASecurityProviderUtils.java | 2 - .../util/security/eddsa/EDDSAProviderTest.java | 4 +- .../java/org/apache/sshd/client/ClientBuilder.java | 6 + .../apache/sshd/client/ClientFactoryManager.java | 10 + .../java/org/apache/sshd/client/kex/DHGClient.java | 117 ++++++++++- .../sshd/client/session/AbstractClientSession.java | 27 ++- .../sshd/server/ServerAuthenticationManager.java | 8 + .../java/org/apache/sshd/server/ServerBuilder.java | 8 + .../java/org/apache/sshd/server/SshServer.java | 12 ++ .../sshd/server/config/keys/ServerIdentity.java | 23 ++- .../java/org/apache/sshd/server/kex/DHGServer.java | 1 + .../sshd/server/session/AbstractServerSession.java | 56 +++++- .../common/signature/OpenSSHCertificateTest.java | 175 ++++++++++++++++ .../server/ServerAuthenticationManagerTest.java | 11 + .../org/apache/sshd/common/signature/example-ca | 49 +++++ .../apache/sshd/common/signature/example-ca.pub | 1 + .../apache/sshd/common/signature/ssh_host_rsa_key | 38 ++++ .../common/signature/ssh_host_rsa_key-cert.pub | 1 + .../sshd/common/signature/ssh_host_rsa_key.pub | 1 + .../signature/ssh_host_rsa_key_sha1-cert.pub | 1 + 38 files changed, 1334 insertions(+), 34 deletions(-) create mode 100644 sshd-common/src/main/java/org/apache/sshd/common/config/keys/OpenSshCertificate.java create mode 100644 sshd-common/src/main/java/org/apache/sshd/common/config/keys/OpenSshCertificateImpl.java create mode 100644 sshd-common/src/main/java/org/apache/sshd/common/config/keys/impl/OpenSSHCertificateDecoder.java create mode 100644 sshd-common/src/main/java/org/apache/sshd/common/keyprovider/FileHostKeyCertificateProvider.java copy sshd-common/src/main/java/org/apache/sshd/common/{config/keys/loader/openssh/OpenSSHKeyDecryptor.java => keyprovider/HostKeyCertificateProvider.java} (66%) create mode 100644 sshd-common/src/main/java/org/apache/sshd/common/util/buffer/keys/OpenSSHCertPublicKeyParser.java create mode 100644 sshd-core/src/test/java/org/apache/sshd/common/signature/OpenSSHCertificateTest.java create mode 100644 sshd-core/src/test/resources/org/apache/sshd/common/signature/example-ca create mode 100644 sshd-core/src/test/resources/org/apache/sshd/common/signature/example-ca.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/common/signature/ssh_host_rsa_key create mode 100644 sshd-core/src/test/resources/org/apache/sshd/common/signature/ssh_host_rsa_key-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/common/signature/ssh_host_rsa_key.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/common/signature/ssh_host_rsa_key_sha1-cert.pub