Module sshcerts::ssh

source ·
Expand description

Functions or structs for dealing with SSH Certificates. Parsing, and creating certs happens here. This module is a heavily modified version of the sshkeys crate that adds certificate verification, and many other things to support that. The original licence for the code is in the source code provided

Structs§

  • A type which represents an allowed signer entry. Please refer to [ssh-keygen-1.ALLOWED_SIGNERS] for more details about the format. [ssh-keygen-1.ALLOWED_SIGNERS]: https://man.openbsd.org/ssh-keygen.1#ALLOWED_SIGNERS
  • A type which represents a collection of allowed signer entries. Please refer to [ssh-keygen-1.ALLOWED_SIGNERS] for more details about the format. [ssh-keygen-1.ALLOWED_SIGNERS]: https://man.openbsd.org/ssh-keygen.1#ALLOWED_SIGNERS
  • A type which represents an OpenSSH certificate key. Please refer to [PROTOCOL.certkeys] for more details about OpenSSH certificates. [PROTOCOL.certkeys]: https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/PROTOCOL.certkeys?annotate=HEAD
  • A type which represents a cryptographic curve.
  • ECDSA private key.
  • ECDSA public key. The format of ECDSA public keys is described in RFC 5656, section 3.1.
  • Hardware backed ECDSA private key.
  • ED25519 private key.
  • ED25519 public key. The format of ED25519 public keys is described in https://tools.ietf.org/html/draft-bjh21-ssh-ed25519-02
  • Hardware backed Ed25519 private key.
  • A type that represents an OpenSSH public key fingerprint.
  • KeyType represents the type of an OpenSSH key.
  • A type which represents an OpenSSH private key.
  • A type which represents an OpenSSH public key.
  • A Reader is used for reading from a byte sequence representing an encoded OpenSSH public/private key or certificate.
  • RSA private key.
  • RSA public key. The format of RSA public keys is described in RFC 4253, section 6.6
  • An SSH signature object from signing arbitrary data. This object has not been verified against a message so it is untrusted.
  • An SSH signature that has an attached message we’ve successfully verified against the signature.
  • A Writer is used for encoding a key in OpenSSH compatible format.

Enums§

  • A type to represent the different kinds of errors.
  • Represents the different types a certificate can be.
  • Represents the different kinds of supported curves.
  • The FingerprintKind enum represents the different fingerprint representation.
  • The hash algorithm used to sign the data in the SshSignature
  • A type which represents the various kinds of keys.
  • A type which represents the different kinds a public key can be.
  • A type which represents the different kinds a public key can be.

Traits§

  • Types that implement this trait can be used to sign SSH certificates using the Certificate::sign function.