aboutsummaryrefslogtreecommitdiffhomepage
Commit message (Collapse)AuthorAgeFilesLines
* oxish: change --generate-host-key to produce OpenSSH formatsync-hostkey-formatHee-Suk Kim7 days1-4/+4
| | | | | | | | | | | | | | | Since --host-key-file now accepts OpenSSH keys, write the generated key in the same format instead of PKCS#8. This was tested locally by rm ssh_host_ed25519_key && ./target/debug/oxish-server --generate-host-key && chmod 0600 ssh_host_ed25519_key && ssh-keygen -y -f ssh_host_ed25519_key for all four paths (aws-lc, graviola) x (ssh-ed25519, ecdsa-sha2-nistp256).
* proto: implement openssh::encode()Hee-Suk Kim7 days3-1/+94
|
* proto: add private_key() method on SigningKey traitHee-Suk Kim7 days5-1/+41
| | | | | | | | | | | | | | | This is needed to encode the OpenSSH private key format from the SigningKey returned by generate_signing_key(). Otherwise, we would have to re-parse the PKCS#8 DER (which was already encoded when generating the key) and extract the private key from there. private_key() is currently used only in the --generate path, so not all backends necessarily need to implement it. So it has a default implementation that fails with Unspecified. Also, Curve25519SeedBin and EcPrivateKeyBin from aws-lc-rs need no extra Zeroizing wrapper, since the underlying Buffer zeroizes on drop (verified against aws-lc-rs 1.18.0).
* oxish: change --host-key-file to accept OpenSSH v1 formatHee-Suk Kim7 days1-5/+4
| | | | | | Previously, PKCS#8 was expected for --host-key-file. This caused confusion as it contradicted the original /etc/ssh route, which expects OpenSSH v1 format.
* proto: add HostKeys::from_openssh_v1()Hee-Suk Kim7 days1-0/+8
|
* docs(readme): remove no-publicizing lineHEADmainArhan Chaudhary13 days1-2/+0
|
* Add Discord badge to READMEDirkjan Ochtman13 days1-0/+1
|
* oxish: make sure the session does not inherit the socket0.1.0Dirkjan Ochtman13 days1-1/+7
|
* Handle global requestsDirkjan Ochtman13 days2-1/+47
|
* oxish: log which user store is in useDirkjan Ochtman13 days1-1/+5
|
* oxish: reset process sessionDirkjan Ochtman13 days1-0/+4
|
* proto: add unknown channel request typeDirkjan Ochtman13 days2-13/+12
|
* proto: add specific error for invalid channel typesDirkjan Ochtman13 days2-6/+13
|
* Reject auth agent channel requestsDirkjan Ochtman13 days2-0/+12
|
* Bump versions to 0.1.0Dirkjan Ochtman13 days5-13/+13
|
* oxish: provide context when host key cannot be foundDirkjan Ochtman13 days1-1/+5
|
* proto: parse OpenSSH host key files when availableDirkjan Ochtman13 days6-7/+482
|
* proto: split out host_keys moduleDirkjan Ochtman13 days8-115/+120
|
* oxish: use named type for key exchange outputDirkjan Ochtman13 days4-44/+56
|
* Show warning after non-PQ key exchangeDirkjan Ochtman13 days7-8/+208
|
* Add back curve25519-sha256 key exchange algorithmDirkjan Ochtman13 days5-6/+129
|
* build(deps): bump clap from 4.6.4 to 4.6.6dependabot[bot]2026-08-101-4/+4
| | | | | | | | | | | | | | | | Bumps [clap](https://github.com/clap-rs/clap) from 4.6.4 to 4.6.6. - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](https://github.com/clap-rs/clap/compare/clap_complete-v4.6.4...clap_complete-v4.6.6) --- updated-dependencies: - dependency-name: clap dependency-version: 4.6.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
* build(deps): bump data-encoding from 2.10.0 to 2.11.1dependabot[bot]2026-08-101-2/+2
| | | | | | | | | | | | | | Bumps [data-encoding](https://github.com/ia0/data-encoding) from 2.10.0 to 2.11.1. - [Commits](https://github.com/ia0/data-encoding/compare/v2.10.0...v2.11.1) --- updated-dependencies: - dependency-name: data-encoding dependency-version: 2.11.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
* oxish: extract AuthenticationStateDirkjan Ochtman2026-08-094-170/+231
|
* Use more fine-grained errors for authenticationDirkjan Ochtman2026-08-093-23/+42
|
* oxish: fix warnings in release profilesDirkjan Ochtman2026-08-031-1/+4
|
* Setup release workflow with dist0.1.0-rc.1Dirkjan Ochtman2026-08-033-0/+317
|
* ci: enable cargo-semver-checksDirkjan Ochtman2026-08-031-0/+7
|
* Extend Cargo metadataDirkjan Ochtman2026-08-034-1/+16
|
* Bump versions to 0.1.0-rc.1Dirkjan Ochtman2026-08-035-13/+13
|
* tests: tweak outputDirkjan Ochtman2026-08-011-4/+4
|
* tests: make handshake() fallibleDirkjan Ochtman2026-08-011-10/+18
|
* tests: make session_binary() fallibleDirkjan Ochtman2026-08-011-5/+5
|
* tests: restore test for no-spawn serverDirkjan Ochtman2026-08-011-10/+37
|
* tests: split rekey test out from handshake()Dirkjan Ochtman2026-08-011-46/+34
|
* tests: extract setup() helperDirkjan Ochtman2026-08-011-30/+37
|
* tests: extract CliClient typeDirkjan Ochtman2026-08-011-75/+99
|
* tests: extract helper function for building the user storeDirkjan Ochtman2026-08-011-39/+46
|
* oxish: guard against pw_name being nullDirkjan Ochtman2026-08-011-4/+4
|
* Warn on clippy::undocumented_unsafe_blocksDirkjan Ochtman2026-08-013-0/+18
|
* oxish: guard against null pw_dir and pw_shell valuesDirkjan Ochtman2026-08-011-3/+12
|
* oxish: handle ERANGE from getpw callsDirkjan Ochtman2026-08-011-23/+40
|
* oxish: replace custom open_dir_dir() with rustix openat()Dirkjan Ochtman2026-08-011-17/+19
|
* oxish: minimize pre_exec() operations in Terminal::spawn()Dirkjan Ochtman2026-08-011-24/+18
|
* oxish: drop logging from within pre_exec() contextDirkjan Ochtman2026-08-011-3/+3
|
* oxish: attach authorized_keys() to UserDirkjan Ochtman2026-07-301-76/+77
|
* oxish: add test for parsing fake keysDirkjan Ochtman2026-07-301-0/+12
|
* proto: warn on unsafe_codeDirkjan Ochtman2026-07-301-1/+1
|
* Move AuthorizedKey into protoDirkjan Ochtman2026-07-306-167/+166
|
* proto: isolate authentication signature encodingDirkjan Ochtman2026-07-302-57/+76
|
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-26 15:18:15 +0000