Add support for X509 certificates

Open JacobBarthelmeh opened this issue 3 years ago • 2 comments

May 23 '22 16:05 JacobBarthelmeh

ok to test

Aug 03 '22 17:08 JacobBarthelmeh

interop testing with PKIXSSH

Download pkixssh (https://roumenpetrov.info/secsh/)

Create pkixssh expected key format from john-cert.pem and john-key.pem using

cp ./keys/john-key.pem id_john
chmod 600 id_john
openssl x509 -in ./keys/john-cert.pem -subject -issuer -alias >> id_john
# use the pkixssh ssh-keygen tool
./ssh-keygen -y -f id_john > id_john.pub

Then connect to the example server using:

./examples/echoserver/echoserver -a ./keys/ca-ecc-cert.pem -J john:./keys/john-cert.pem

# using the pkixssh 'ssh'
./ssh -p 22222 -i id_john [email protected]

Aug 08 '22 23:08 JacobBarthelmeh