Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support CertificateFile #10

Closed
beyondbill opened this issue Jun 12, 2019 · 5 comments
Closed

Support CertificateFile #10

beyondbill opened this issue Jun 12, 2019 · 5 comments

Comments

@beyondbill
Copy link

Our bastion host verifies certificate in addition to SSH key.For example, to establish a SSH tunnel to a private Postgres DB server via bastion, we'll run

ssh -N -o CertificateFile=~/.ssh/cert.pub -L 5432:pg.foo.com:5432 user@bastion.foo.com

I'd love to see a certificate_file option in the tunnel data source. Certificate is supported in the underlying Go lib golang.org/x/crypto/ssh. I would appreciate an assessment on whether this feature is relatively easy to implement. If so, I can spend time working on it with some general directions from project owner(s).

@stefansundin
Copy link
Owner

Great suggestion. I haven't used CertificateFile before but I'm excited to try it.

@stefansundin
Copy link
Owner

I just added this and it seems to be working fine in my tests: 588a0a9

Do you want me to compile a binary for you to test with?

I'll probably release a new version this coming week.

@beyondbill
Copy link
Author

@stefansundin Wow this is amazing! Thanks so much for quickly adding the feature! I should be able to compile a binary by myself if I still remember how to do so three years ago. Will let you know how it works once I test it. Looking forward to the new release!

@beyondbill
Copy link
Author

Compiled and tested on my Mac. It worked as expected 🎊

@stefansundin
Copy link
Owner

Released in v0.0.4.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants