Skip to content
This repository has been archived by the owner on Dec 7, 2018. It is now read-only.

support multiple hostkeys #65

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

yuta1024
Copy link

@yuta1024 yuta1024 commented Mar 7, 2018

This PR supports multiple hostkeys.

As background, OpenSSH 7.0 and greater disabled ssh-dss by default.
Therefore, I'm considering that switch DSA to RSA.
However, needed backward-compatible for environments of using DSA.

A example of settings of multiple hostkeys in sshd_proxy.properties

sshd.root=developer_config
sshd.port=2222
sshd.artifactoryUrl=http://localhost:4080/artifactory
# use the default.
sshd.artifactoryUsername=admin
sshd.artifactoryPassword=password

# run artifactory in the same jvm
sshd.jetty.port=4080
sshd.jetty.webapp.dir=developer_config/webapps

# hostkey setting
sshd.hostKeyPath=./developer_config/conf/sshd_proxy/ssh_host_dsa_key,./developer_config/conf/sshd_proxy/ssh_host_rsa_key

The following outputs are results that verify support multiple hostkeys using above settings.

$ ssh -o HostKeyAlgorithms="ssh-dss" -p 2222 localhost
The authenticity of host '[localhost]:2222 ([127.0.0.1]:2222)' can't be established.
DSA key fingerprint is 38:49:a1:28:12:5c:dd:41:69:d7:0b:41:7b:86:57:1b.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[localhost]:2222' (DSA) to the list of known hosts.
*---------------------------------------------------*
|               _  _ _  _|    _-|-. _  _            |
|    this is a |_)| (_)(_||_|(_ | |(_)| | server    |
|              |                                    |
*---------------------------------------------------*
Connection to localhost closed.
$ ssh -o HostKeyAlgorithms="ssh-rsa" -p 2222 localhost
The authenticity of host '[localhost]:2222 ([127.0.0.1]:2222)' can't be established.
RSA key fingerprint is 24:08:6f:00:7f:38:6d:27:0d:fd:42:5e:e9:be:fb:15.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[localhost]:2222' (RSA) to the list of known hosts.
*---------------------------------------------------*
|               _  _ _  _|    _-|-. _  _            |
|    this is a |_)| (_)(_||_|(_ | |(_)| | server    |
|              |                                    |
*---------------------------------------------------*
Connection to localhost closed.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant