Subject: Re: [PATCH] Generalized API for publickey userauth

Re: [PATCH] Generalized API for publickey userauth

From: Simon Josefsson <simon_at_josefsson.org>
Date: Tue, 15 Dec 2009 10:36:24 +0100

Daiki Ueno <ueno_at_unixuser.org> writes:

> Peter Stuge <peter_at_stuge.se> writes:
>
>>> - a patch which adds callback-based function for "publickey" authentication
>>> (The existing file-based function is now implemented with the
>>> callback-based function)
>>>
>>> - a sample program which demonstrates authentication using ssh-agent
>>> (To play with this, add ssh2_agent.c to noinst_PROGRAMS in
>>> example/simple/Makefile.am, rebuild, and run it as "ssh2_agent host user")
>>
>> I think that we want to have more of ssh2_agent.c within libssh2
>> itself, I'm not sure about the callback approach.
>
> Thanks for the response. Indeed I realized that the code to talk to
> ssh-agent is too complicated to let users write it by themselves.

However I think it would be useful to have the ability to do a
callback-based public key signing too. One goal here would be to permit
private keys in-memory rather than on disk, to facilitate
process-separation between the process knowing the private key and doing
the signing, and the actually libssh2 code.

So I kind of liked your initial API as a "low-level" API. Maybe libssh2
can expose it, and ALSO provide a utility function for performing
agent-style authentication that is simple to use for applications.
Thoughts?

/Simon
_______________________________________________
libssh2-devel http://cool.haxx.se/cgi-bin/mailman/listinfo/libssh2-devel
Received on 2009-12-15