Documentation
¶
Overview ¶
Package sshconfig keeps ssh crypto and peer client settings consistent across the application.
Index ¶
Constants ¶
View Source
const PeerUser = "peer"
PeerUser is the reserved username peer nodes authenticate with.
Variables ¶
This section is empty.
Functions ¶
func ApplySSHCryptoConfig ¶
ApplySSHCryptoConfig removes insecure key exchanges, ciphers, and MACs from the default lists.
func CheckPinnedHostKey ¶
func CheckPinnedHostKey(pinned ssh.PublicKey) ssh.HostKeyCallback
CheckPinnedHostKey accepts the remote host key when it, or the key embedded in its certificate, matches the pinned public key. Peer nodes have host certificates signed by their own certificate authority which the dialing node does not necessarily trust, so the key itself is pinned.
func NewPeerClientConfig ¶
NewPeerClientConfig builds the ssh client config used to authenticate to another node as a peer, with the hardened crypto settings applied.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.