Struct IdentityFilter 

pub struct IdentityFilter { /* private fields */ }

An IdentityFilter can determine if an Identity provided by the ssh-agent is trusted or not by this plugin. It is constructed from files or commands providing regular ssh keys or cert-authority keys.

Implementations

impl IdentityFilter

pub fn new( authorized_keys_file: &Path, ca_keys_file: Option<&Path>, authorized_keys_command: Option<&str>, authorized_keys_command_user: Option<&str>, calling_user: &str, ) -> Result<Self>

Construct a new Identity filter where path is the path to a file in authorized_keys format, and the ca_keys_file is an optional path to a file containing cert-authority keys. See README.md for the details on the expected file format.

pub fn from_authorized_file(authorized_keys_file: &Path) -> Result<Self>

pub fn filter(&self, identity: &Identity<'_>) -> bool

Returns true if the provided Identity is a PublicKey and this filter is configured with the same public key, or if the Identity is a Certificate and this filter is configured with a matching cert authority key. Please note that for certificates this is not enough, see auth::validate_cert for more information.