Expand description
Functions or structs for dealing with SSH Certificates.
Parsing, and creating certs happens here.
This module is a heavily modified version of the sshkeys
crate
that adds certificate verification, and many other things to
support that. The original licence for the code is in the source
code provided
Structs§
- Allowed
Signer - A type which represents an allowed signer entry. Please refer to [ssh-keygen-1.ALLOWED_SIGNERS] for more details about the format. [ssh-keygen-1.ALLOWED_SIGNERS]: https://man.openbsd.org/ssh-keygen.1#ALLOWED_SIGNERS
- Allowed
Signers - A type which represents a collection of allowed signer entries. Please refer to [ssh-keygen-1.ALLOWED_SIGNERS] for more details about the format. [ssh-keygen-1.ALLOWED_SIGNERS]: https://man.openbsd.org/ssh-keygen.1#ALLOWED_SIGNERS
- Certificate
- A type which represents an OpenSSH certificate key. Please refer to [PROTOCOL.certkeys] for more details about OpenSSH certificates. [PROTOCOL.certkeys]: https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/PROTOCOL.certkeys?annotate=HEAD
- Curve
- A type which represents a cryptographic curve.
- Ecdsa
Private Key - ECDSA private key.
- Ecdsa
Public Key - ECDSA public key. The format of ECDSA public keys is described in RFC 5656, section 3.1.
- Ecdsa
SkPrivate Key - Hardware backed ECDSA private key.
- Ed25519
Private Key - ED25519 private key.
- Ed25519
Public Key - ED25519 public key. The format of ED25519 public keys is described in https://tools.ietf.org/html/draft-bjh21-ssh-ed25519-02
- Ed25519
SkPrivate Key - Hardware backed Ed25519 private key.
- Fingerprint
- A type that represents an OpenSSH public key fingerprint.
- KeyType
KeyType
represents the type of an OpenSSH key.- Private
Key - A type which represents an OpenSSH private key.
- Public
Key - A type which represents an OpenSSH public key.
- Reader
- A
Reader
is used for reading from a byte sequence representing an encoded OpenSSH public/private key or certificate. - RsaPrivate
Key - RSA private key.
- RsaPublic
Key - RSA public key. The format of RSA public keys is described in RFC 4253, section 6.6
- SshSignature
- An SSH signature object from signing arbitrary data. This object has not been verified against a message so it is untrusted.
- Verified
SshSignature - An SSH signature that has an attached message we’ve successfully verified against the signature.
- Writer
- A
Writer
is used for encoding a key in OpenSSH compatible format.
Enums§
- Allowed
Signer Parsing Error - A type to represent the different kinds of errors.
- Cert
Type - Represents the different types a certificate can be.
- Curve
Kind - Represents the different kinds of supported curves.
- Fingerprint
Kind - The
FingerprintKind
enum represents the different fingerprint representation. - Hash
Algorithm - The hash algorithm used to sign the data in the SshSignature
- KeyType
Kind - A type which represents the various kinds of keys.
- Private
KeyKind - A type which represents the different kinds a public key can be.
- Public
KeyKind - A type which represents the different kinds a public key can be.
Traits§
- SSHCertificate
Signer - Types that implement this trait can be used to sign SSH certificates using the Certificate::sign function.