Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

adding X509 authentication of host #453

Merged
merged 4 commits into from
Sep 8, 2022

Conversation

JacobBarthelmeh
Copy link
Contributor

Interop. testing with pkixssh

sshd_config used

cat sshd_config 
Port 22222
Protocol 2
LoginGraceTime 600
PermitRootLogin yes
PasswordAuthentication yes
PermitEmptyPasswords no
UsePrivilegeSeparation no
UseDNS no

TrustedUserCAKeys /home/jak/Documents/wolfssh-fork/keys/ca-cert-ecc.pem
#CACertificateFile /home/jak/Documents/wolfssh-fork/keys/ca-cert-ecc.pem
HostKey /home/jak/Documents/wolfssh-fork/keys/server-key.pem
HostCertificate /home/jak/Documents/wolfssh-fork/keys/server-cert.der

wolfSSH as the host

cd wolfssh
sudo ./apps/wolfsshd/wolfsshd -D -d -f sshd_config -p 22222

cd pkixssh
 ./ssh -p 22222 -o"CACertificateFile /home/jak/Documents/wolfssh-fork/keys/ca-cert-ecc.pem" -i id_john john@127.0.0.1

pkixssh as the host

cd pkixssh
sudo /home/jak/Documents/pkixssh/sshd -f ./sshd_config -p 22222 -D -o"CACertificateFile /home/jak/Documents/wolfssh-fork/keys/ca-cert-ecc.pem"


cd wolfssh
./examples/client/client -u john -J ./keys/john-cert.der -i ./keys/john-key.der -A ./keys/ca-cert-ecc.der -t

apps/wolfsshd/wolfsshd.c Outdated Show resolved Hide resolved
@ejohnstown ejohnstown self-requested a review September 7, 2022 23:35
@ejohnstown ejohnstown merged commit 66be47a into wolfSSL:master Sep 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants