opensource/teleport
3
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-10-29 17:58:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix IP Pinning Bypass w/ direct dial to Node (#65087)

Browse Source 
* Enforce IP Pinning for SSH connections if deemed necessary by the Decision Service.

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>

* Fix missing IP Pinning permit builder; Fix keyboard interactive.

---------

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>
This commit is contained in:
Brian Joerger
2026-04-10 20:35:26 +00:00
committed by GitHub
co-authored by rosstimothy
parent e54920fdf2
commit cb1c27e6ed
11 changed files with 241 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/sshca/identity.go
+2 -1
View File
@@ -102,7 +102,8 @@ type Identity struct {
PreviousIdentityExpires time.Time
// LoginIP is an observed IP of the client on the moment of certificate creation.
LoginIP string
// PinnedIP is an IP from which client must communicate with Teleport.
// PinnedIP is an IP from which client must communicate with Teleport. If set,
// this implies that IP Pinning was required at the time of certificate creation.
PinnedIP string
// DisallowReissue flags that any attempt to request new certificates while
// authenticated with this cert should be denied.