Kevin Jones
bed8c96486
Use generate to construct key instead of mutating the PKEY instance for OpenSSL 3.0 compatibility
2023-01-05 18:18:51 -05:00
Kevin Jones
b28ddc9eeb
Add Ruby 3.2 to test matrix
2023-01-05 16:02:02 -05:00
Kevin Jones
3970557452
Merge pull request #36 from Brcrwilliams/refactor-signature-spec
...
Refactor signature spec
2022-05-26 10:09:36 -04:00
Kevin Jones
2f09ec25f3
Merge pull request #38 from github/drop-ruby-26
...
Remove Ruby 2.6 that is EOL from the test matrix
2022-05-26 10:00:39 -04:00
Kevin Jones
4273e85d19
Remove Ruby 2.6 that is EOL from the test matrix
2022-05-26 09:57:41 -04:00
Kevin Jones
974b50407e
Merge pull request #37 from github/actions-on-prs
...
Run actions on pull requests
2022-05-26 09:31:19 -04:00
Kevin Jones
9e198ad2bc
Run actions on pull requests
2022-05-26 09:29:28 -04:00
Brian Williams
36fd213604
Refactor signature spec
2022-05-26 06:46:02 -05:00
Kevin Jones
a1b98d5fdf
Merge pull request #34 from github/release-1.3.0
...
Prepare for 1.3.0 release
2022-01-21 10:41:39 -05:00
Kevin Jones
41e4e893dc
Prepare for 1.3.0 release
2022-01-21 10:40:12 -05:00
Kevin Jones
c78ca22f5b
Merge pull request #32 from github/update-ruby-tests
...
Support Ruby 3.1 and fix Q size to 160 bits
2022-01-05 12:24:54 -05:00
Kevin Jones
ff034d52fd
Test default parameters for DSA
2021-12-29 17:38:27 -05:00
Kevin Jones
6e1bb8edfb
Fix DSA key generation to use a 160 Q bit value in Ruby 3.1 / OpenSSL 3.0.
2021-12-29 17:14:53 -05:00
Kevin Jones
e7c2b70c92
Merge pull request #31 from github/full-sig-support
...
Support SSHSIG and SK verification
2021-12-29 12:47:28 -05:00
Kevin Jones
c77dba477f
Fix ruby 2.6 syntax error
2021-12-29 12:44:43 -05:00
Kevin Jones
51dfdffca8
Test against Ruby 3.1 and update the setup-ruby action.
2021-12-29 12:41:44 -05:00
Kevin Jones
f26e94fc93
Add tests for failing to decode a signature
2021-12-29 12:34:02 -05:00
Kevin Jones
5f3cbdfe45
Code review feedback.
...
* Move some things in to a more specific module for security keys.
* Comment on the security key defaults.
* Rework code so that flag checks are independent for security keys.
2021-12-29 11:58:57 -05:00
Kevin Jones
4233196772
Add support for SSHSIG with certificates
2021-12-19 15:50:58 -05:00
Kevin Jones
07d2424db4
Test various security key options
2021-12-19 12:36:00 -05:00
Kevin Jones
c16b90ac63
Support checking the sk_flags
2021-12-19 11:43:40 -05:00
Kevin Jones
b4b7cb649a
Remove re-check of hash algorithm since it's checked in initialize
2021-12-17 13:53:26 -05:00
Kevin Jones
0b1f519e5a
Rename hashalgorithm to hash_algorithm to match spec
2021-12-17 13:51:44 -05:00
Kevin Jones
d74f25829f
Fix decode_openssh_signature to respect offset
2021-12-17 13:47:24 -05:00
Kevin Jones
e0c24b2c39
Support SSHSIG and SK verification.
...
This adds support for OpenSSH SSHSIG signatures, used for signing
arbitrary payloads.
This also adds support for public-key verification from -SK algorithms
so that signatures from security keys can be verified. This enables
using security keys for SSHSIG, as well as using security keys as
SSH-cert CAs.
2021-12-13 11:07:22 -05:00
Kevin Jones
1890c4bfc4
Merge pull request #30 from github/update-lock
...
Update lockfile version
2021-12-02 11:07:20 -05:00
Kevin Jones
20f2680c94
Update lockfile version
2021-12-02 11:05:34 -05:00
Kevin Jones
2d04bec7cd
Merge pull request #29 from github/bump-version
...
Bump version
2021-12-02 10:46:44 -05:00
Kevin Jones
fd2ef08043
Bump version
...
Bump the version in preparation for a new release.
2021-12-02 10:37:34 -05:00
Kevin Jones
1c4cacb58f
Merge pull request #21 from github/sk-keys
...
Support parsing SK-* keys
2021-03-11 12:48:20 -05:00
Kevin Jones
595d2d6dbe
Add doc comment and new line at EOF
2021-03-03 17:29:50 -05:00
Kevin Jones
3855f1ce2e
Improve SK-EC tests.
2021-03-03 14:55:43 -05:00
Kevin Jones
be8023c9b4
Rename algos to follow consistency.
2021-03-03 14:20:04 -05:00
Kevin Jones
e7f046c9d4
Support ED25519 certificates.
2021-03-03 14:00:06 -05:00
Kevin Jones
3848df5516
Support SK-ECDSA leaf certificates
2021-03-03 14:00:05 -05:00
Kevin Jones
0ef6709803
Skip private key checks for SK keys
2021-03-03 14:00:04 -05:00
Kevin Jones
dde95a7de8
Support SK-ECDSA keys.
2021-03-03 14:00:03 -05:00
Kevin Jones
9c646e3c53
Support SK-ED25519 public key parsing.
2021-03-03 14:00:02 -05:00
Kevin Jones
a44e9de1d0
Ignore macOS generated files.
2021-03-03 13:59:58 -05:00
Kevin Jones
236c8a3e72
Merge pull request #20 from vcsjones/housekeeping
...
Housekeeping: Update development dependencies and test on Ruby 3.0
2021-03-03 12:17:10 -05:00
Kevin Jones
0020ff76ca
Include Ruby 2.7 in test matrix
2021-03-03 12:01:57 -05:00
Kevin Jones
16cdaeb967
Disable colorization in rspec.
...
This is necessary for now because rspec will attempt to colorize failures
that have binary strings. It currently does a poor job of this, so go back
to the non-colorized behavior as was in the previous version of rspec.
2021-03-02 11:15:49 -05:00
Kevin Jones
a9843b22d8
Replace deprecated action
2021-03-02 10:50:53 -05:00
Kevin Jones
03c10fd4be
Use ruby-version over the now-deprecated version
2021-03-02 10:43:09 -05:00
Kevin Jones
e9e649848b
Update development dependencies and test against Ruby 3.0
2021-03-02 10:40:31 -05:00
Patrick Toomey
11414f8960
Merge pull request #18 from jhawthorn/patch-1
...
Allow Ruby 3.0
2021-02-10 14:36:56 -07:00
John Hawthorn
c271f717b4
Allow Ruby 3.0
2020-11-25 10:40:39 -08:00
Ben Toews
393d4b7885
Merge pull request #15 from github/link-to-docs
...
README: link to docs
2019-11-20 14:40:51 -07:00
Ben Toews
43044a5a87
README: link to docs
2019-11-20 14:38:03 -07:00
Ben Toews
fa503f2194
Merge pull request #14 from github/ipv6
...
Test ipv6 functionality for source-address extension
2019-08-27 09:10:46 -06:00