This is an automated email from the ASF dual-hosted git repository. twolf pushed a change to branch master in repository https://gitbox.apache.org/repos/asf/mina-sshd.git
from 93ac350fe 2.15.0 change notes add ca1b7bf33 GH-650: Pubkey auth: use the correct key from a user certificate new 0ab624e3a [SSHD-1161] Pubkey auth: check certificate signature in server user auth new 05311cac8 [SSHD-1161] Pubkey auth: handle certificates in PublickeyAuthenticator new e2e4e11ec [SSHD-1161] Pubkey auth: source-address restriction in certificates new 1e27daaec OpenSshCertificate: access options and extensions as maps The 4 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: CHANGES.md | 5 + .../common/config/keys/OpenSshCertificate.java | 42 +- .../common/config/keys/OpenSshCertificateImpl.java | 142 ++++++- .../apache/sshd/common/net/InetAddressRange.java | 441 +++++++++++++++++++++ .../sshd/common/net/InetAddressRangeTest.java | 148 +++++++ .../certificate/OpenSshCertificateBuilder.java | 108 ++--- ...AuthorizedKeyEntriesPublickeyAuthenticator.java | 60 ++- .../auth/pubkey/CachingPublicKeyAuthenticator.java | 5 +- .../server/auth/pubkey/PublickeyAuthenticator.java | 9 +- .../sshd/server/auth/pubkey/UserAuthPublicKey.java | 70 +++- .../certificates/OpenSSHCertificateParserTest.java | 10 +- .../common/auth/PublicKeyAuthenticationTest.java | 194 ++++++++- .../server/auth/AuthorizedKeysCertificateTest.java | 198 +++++++++ 13 files changed, 1339 insertions(+), 93 deletions(-) create mode 100644 sshd-common/src/main/java/org/apache/sshd/common/net/InetAddressRange.java create mode 100644 sshd-common/src/test/java/org/apache/sshd/common/net/InetAddressRangeTest.java create mode 100644 sshd-core/src/test/java/org/apache/sshd/server/auth/AuthorizedKeysCertificateTest.java