This is an automated email from the ASF dual-hosted git repository. twolf pushed a change to branch master in repository https://gitbox.apache.org/repos/asf/mina-sshd.git.
from 4ab8c06 [maven-release-plugin] prepare for next development iteration add d275066 Formatting fix add 8eb688b [SSHD-1161] Rename OpenSshCertificate.getServerHostKey() add 9c96734 [SSHD-1161] Enable client certificate public key authentication add baf2989 [SSHD-1161] Test for client certificate pubkey authentication No new revisions were added by this update. Summary of changes: pom.xml | 3 + .../apache/sshd/common/config/keys/KeyUtils.java | 38 +++++ .../common/config/keys/OpenSshCertificate.java | 3 +- .../common/config/keys/OpenSshCertificateImpl.java | 10 +- .../keys/impl/OpenSSHCertificateDecoder.java | 3 - .../apache/sshd/common/util/ReflectionUtils.java | 14 +- .../org/apache/sshd/common/util/buffer/Buffer.java | 2 +- .../buffer/keys/OpenSSHCertPublicKeyParser.java | 4 +- .../{NoIoTestCase.java => ContainerTestCase.java} | 4 +- sshd-core/pom.xml | 49 +++++- .../sshd/client/auth/pubkey/UserAuthPublicKey.java | 8 +- .../java/org/apache/sshd/client/kex/DHGClient.java | 4 +- .../sshd/client/session/AbstractClientSession.java | 2 +- .../ClientOpenSSHCertificatesTest.java | 190 +++++++++++++++++++++ .../org/apache/sshd/client/opensshcerts/ca/ca | 51 ++++++ .../org/apache/sshd/client/opensshcerts/ca/ca.pub | 1 + .../sshd/client/opensshcerts/docker/Dockerfile | 45 +++++ .../sshd/client/opensshcerts/docker/entrypoint.sh | 17 ++ .../sshd/client/opensshcerts/docker/sshd_config | 16 ++ .../client/opensshcerts/docker/supervisord.conf | 12 ++ .../apache/sshd/client/opensshcerts/host/host01 | 27 +++ .../sshd/client/opensshcerts/host/host01.pub | 1 + .../apache/sshd/client/opensshcerts/host/host02 | 27 +++ .../sshd/client/opensshcerts/host/host02.pub | 1 + .../opensshcerts/user/user01_authorized_keys | 8 + .../sshd/client/opensshcerts/user/user01_ecdsa_256 | 5 + .../opensshcerts/user/user01_ecdsa_256-cert.pub | 1 + .../client/opensshcerts/user/user01_ecdsa_256.pub | 1 + .../sshd/client/opensshcerts/user/user01_ecdsa_384 | 6 + .../opensshcerts/user/user01_ecdsa_384-cert.pub | 1 + .../client/opensshcerts/user/user01_ecdsa_384.pub | 1 + .../sshd/client/opensshcerts/user/user01_ecdsa_521 | 7 + .../opensshcerts/user/user01_ecdsa_521-cert.pub | 1 + .../client/opensshcerts/user/user01_ecdsa_521.pub | 1 + .../sshd/client/opensshcerts/user/user01_ed25519 | 7 + .../opensshcerts/user/user01_ed25519-cert.pub | 1 + .../client/opensshcerts/user/user01_ed25519.pub | 1 + .../opensshcerts/user/user01_rsa_sha2_256_2048 | 27 +++ .../user/user01_rsa_sha2_256_2048-cert.pub | 1 + .../opensshcerts/user/user01_rsa_sha2_256_2048.pub | 1 + .../opensshcerts/user/user01_rsa_sha2_256_4096 | 51 ++++++ .../user/user01_rsa_sha2_256_4096-cert.pub | 1 + .../opensshcerts/user/user01_rsa_sha2_256_4096.pub | 1 + .../opensshcerts/user/user01_rsa_sha2_512_2048 | 27 +++ .../user/user01_rsa_sha2_512_2048-cert.pub | 1 + .../opensshcerts/user/user01_rsa_sha2_512_2048.pub | 1 + .../opensshcerts/user/user01_rsa_sha2_512_4096 | 51 ++++++ .../user/user01_rsa_sha2_512_4096-cert.pub | 1 + .../opensshcerts/user/user01_rsa_sha2_512_4096.pub | 1 + .../opensshcerts/user/user02_authorized_keys | 8 + .../sshd/client/opensshcerts/user/user02_ecdsa_256 | 5 + .../opensshcerts/user/user02_ecdsa_256-cert.pub | 1 + .../client/opensshcerts/user/user02_ecdsa_256.pub | 1 + .../sshd/client/opensshcerts/user/user02_ecdsa_384 | 6 + .../opensshcerts/user/user02_ecdsa_384-cert.pub | 1 + .../client/opensshcerts/user/user02_ecdsa_384.pub | 1 + .../sshd/client/opensshcerts/user/user02_ecdsa_521 | 7 + .../opensshcerts/user/user02_ecdsa_521-cert.pub | 1 + .../client/opensshcerts/user/user02_ecdsa_521.pub | 1 + .../sshd/client/opensshcerts/user/user02_ed25519 | 7 + .../opensshcerts/user/user02_ed25519-cert.pub | 1 + .../client/opensshcerts/user/user02_ed25519.pub | 1 + .../opensshcerts/user/user02_rsa_sha2_256_2048 | 27 +++ .../user/user02_rsa_sha2_256_2048-cert.pub | 1 + .../opensshcerts/user/user02_rsa_sha2_256_2048.pub | 1 + .../opensshcerts/user/user02_rsa_sha2_256_4096 | 51 ++++++ .../user/user02_rsa_sha2_256_4096-cert.pub | 1 + .../opensshcerts/user/user02_rsa_sha2_256_4096.pub | 1 + .../opensshcerts/user/user02_rsa_sha2_512_2048 | 27 +++ .../user/user02_rsa_sha2_512_2048-cert.pub | 1 + .../opensshcerts/user/user02_rsa_sha2_512_2048.pub | 1 + .../opensshcerts/user/user02_rsa_sha2_512_4096 | 51 ++++++ .../user/user02_rsa_sha2_512_4096-cert.pub | 1 + .../opensshcerts/user/user02_rsa_sha2_512_4096.pub | 1 + sshd-mina/pom.xml | 2 + sshd-netty/pom.xml | 2 + sshd-sftp/pom.xml | 2 +- 77 files changed, 918 insertions(+), 30 deletions(-) copy sshd-common/src/test/java/org/apache/sshd/util/test/{NoIoTestCase.java => ContainerTestCase.java} (90%) create mode 100644 sshd-core/src/test/java/org/apache/sshd/client/opensshcerts/ClientOpenSSHCertificatesTest.java create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/ca/ca create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/ca/ca.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/docker/Dockerfile create mode 100755 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/docker/entrypoint.sh create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/docker/sshd_config create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/docker/supervisord.conf create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/host/host01 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/host/host01.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/host/host02 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/host/host02.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_authorized_keys create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ecdsa_256 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ecdsa_256-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ecdsa_256.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ecdsa_384 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ecdsa_384-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ecdsa_384.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ecdsa_521 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ecdsa_521-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ecdsa_521.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ed25519 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ed25519-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_ed25519.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_256_2048 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_256_2048-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_256_2048.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_256_4096 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_256_4096-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_256_4096.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_512_2048 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_512_2048-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_512_2048.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_512_4096 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_512_4096-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user01_rsa_sha2_512_4096.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_authorized_keys create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ecdsa_256 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ecdsa_256-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ecdsa_256.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ecdsa_384 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ecdsa_384-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ecdsa_384.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ecdsa_521 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ecdsa_521-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ecdsa_521.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ed25519 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ed25519-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_ed25519.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_256_2048 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_256_2048-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_256_2048.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_256_4096 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_256_4096-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_256_4096.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_512_2048 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_512_2048-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_512_2048.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_512_4096 create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_512_4096-cert.pub create mode 100644 sshd-core/src/test/resources/org/apache/sshd/client/opensshcerts/user/user02_rsa_sha2_512_4096.pub