Граф коммитов

141 Коммитов

Автор SHA1 Сообщение Дата
Kevin Jones bed8c96486
Use generate to construct key instead of mutating the PKEY instance for OpenSSL 3.0 compatibility 2023-01-05 18:18:51 -05:00
Kevin Jones b28ddc9eeb
Add Ruby 3.2 to test matrix 2023-01-05 16:02:02 -05:00
Kevin Jones 3970557452
Merge pull request #36 from Brcrwilliams/refactor-signature-spec
Refactor signature spec
2022-05-26 10:09:36 -04:00
Kevin Jones 2f09ec25f3
Merge pull request #38 from github/drop-ruby-26
Remove Ruby 2.6 that is EOL from the test matrix
2022-05-26 10:00:39 -04:00
Kevin Jones 4273e85d19
Remove Ruby 2.6 that is EOL from the test matrix 2022-05-26 09:57:41 -04:00
Kevin Jones 974b50407e
Merge pull request #37 from github/actions-on-prs
Run actions on pull requests
2022-05-26 09:31:19 -04:00
Kevin Jones 9e198ad2bc
Run actions on pull requests 2022-05-26 09:29:28 -04:00
Brian Williams 36fd213604 Refactor signature spec 2022-05-26 06:46:02 -05:00
Kevin Jones a1b98d5fdf
Merge pull request #34 from github/release-1.3.0
Prepare for 1.3.0 release
2022-01-21 10:41:39 -05:00
Kevin Jones 41e4e893dc
Prepare for 1.3.0 release 2022-01-21 10:40:12 -05:00
Kevin Jones c78ca22f5b
Merge pull request #32 from github/update-ruby-tests
Support Ruby 3.1 and fix Q size to 160 bits
2022-01-05 12:24:54 -05:00
Kevin Jones ff034d52fd
Test default parameters for DSA 2021-12-29 17:38:27 -05:00
Kevin Jones 6e1bb8edfb
Fix DSA key generation to use a 160 Q bit value in Ruby 3.1 / OpenSSL 3.0. 2021-12-29 17:14:53 -05:00
Kevin Jones e7c2b70c92
Merge pull request #31 from github/full-sig-support
Support SSHSIG and SK verification
2021-12-29 12:47:28 -05:00
Kevin Jones c77dba477f
Fix ruby 2.6 syntax error 2021-12-29 12:44:43 -05:00
Kevin Jones 51dfdffca8
Test against Ruby 3.1 and update the setup-ruby action. 2021-12-29 12:41:44 -05:00
Kevin Jones f26e94fc93
Add tests for failing to decode a signature 2021-12-29 12:34:02 -05:00
Kevin Jones 5f3cbdfe45
Code review feedback.
* Move some things in to a more specific module for security keys.
* Comment on the security key defaults.
* Rework code so that flag checks are independent for security keys.
2021-12-29 11:58:57 -05:00
Kevin Jones 4233196772
Add support for SSHSIG with certificates 2021-12-19 15:50:58 -05:00
Kevin Jones 07d2424db4
Test various security key options 2021-12-19 12:36:00 -05:00
Kevin Jones c16b90ac63
Support checking the sk_flags 2021-12-19 11:43:40 -05:00
Kevin Jones b4b7cb649a
Remove re-check of hash algorithm since it's checked in initialize 2021-12-17 13:53:26 -05:00
Kevin Jones 0b1f519e5a
Rename hashalgorithm to hash_algorithm to match spec 2021-12-17 13:51:44 -05:00
Kevin Jones d74f25829f
Fix decode_openssh_signature to respect offset 2021-12-17 13:47:24 -05:00
Kevin Jones e0c24b2c39
Support SSHSIG and SK verification.
This adds support for OpenSSH SSHSIG signatures, used for signing
arbitrary payloads.

This also adds support for public-key verification from -SK algorithms
so that signatures from security keys can be verified. This enables
using security keys for SSHSIG, as well as using security keys as
SSH-cert CAs.
2021-12-13 11:07:22 -05:00
Kevin Jones 1890c4bfc4
Merge pull request #30 from github/update-lock
Update lockfile version
2021-12-02 11:07:20 -05:00
Kevin Jones 20f2680c94
Update lockfile version 2021-12-02 11:05:34 -05:00
Kevin Jones 2d04bec7cd
Merge pull request #29 from github/bump-version
Bump version
2021-12-02 10:46:44 -05:00
Kevin Jones fd2ef08043
Bump version
Bump the version in preparation for a new release.
2021-12-02 10:37:34 -05:00
Kevin Jones 1c4cacb58f
Merge pull request #21 from github/sk-keys
Support parsing SK-* keys
2021-03-11 12:48:20 -05:00
Kevin Jones 595d2d6dbe
Add doc comment and new line at EOF 2021-03-03 17:29:50 -05:00
Kevin Jones 3855f1ce2e
Improve SK-EC tests. 2021-03-03 14:55:43 -05:00
Kevin Jones be8023c9b4
Rename algos to follow consistency. 2021-03-03 14:20:04 -05:00
Kevin Jones e7f046c9d4
Support ED25519 certificates. 2021-03-03 14:00:06 -05:00
Kevin Jones 3848df5516
Support SK-ECDSA leaf certificates 2021-03-03 14:00:05 -05:00
Kevin Jones 0ef6709803
Skip private key checks for SK keys 2021-03-03 14:00:04 -05:00
Kevin Jones dde95a7de8
Support SK-ECDSA keys. 2021-03-03 14:00:03 -05:00
Kevin Jones 9c646e3c53
Support SK-ED25519 public key parsing. 2021-03-03 14:00:02 -05:00
Kevin Jones a44e9de1d0
Ignore macOS generated files. 2021-03-03 13:59:58 -05:00
Kevin Jones 236c8a3e72
Merge pull request #20 from vcsjones/housekeeping
Housekeeping: Update development dependencies and test on Ruby 3.0
2021-03-03 12:17:10 -05:00
Kevin Jones 0020ff76ca
Include Ruby 2.7 in test matrix 2021-03-03 12:01:57 -05:00
Kevin Jones 16cdaeb967
Disable colorization in rspec.
This is necessary for now because rspec will attempt to colorize failures
that have binary strings. It currently does a poor job of this, so go back
to the non-colorized behavior as was in the previous version of rspec.
2021-03-02 11:15:49 -05:00
Kevin Jones a9843b22d8
Replace deprecated action 2021-03-02 10:50:53 -05:00
Kevin Jones 03c10fd4be
Use ruby-version over the now-deprecated version 2021-03-02 10:43:09 -05:00
Kevin Jones e9e649848b
Update development dependencies and test against Ruby 3.0 2021-03-02 10:40:31 -05:00
Patrick Toomey 11414f8960
Merge pull request #18 from jhawthorn/patch-1
Allow Ruby 3.0
2021-02-10 14:36:56 -07:00
John Hawthorn c271f717b4
Allow Ruby 3.0 2020-11-25 10:40:39 -08:00
Ben Toews 393d4b7885
Merge pull request #15 from github/link-to-docs
README: link to docs
2019-11-20 14:40:51 -07:00
Ben Toews 43044a5a87
README: link to docs 2019-11-20 14:38:03 -07:00
Ben Toews fa503f2194
Merge pull request #14 from github/ipv6
Test ipv6 functionality for source-address extension
2019-08-27 09:10:46 -06:00