teleport

12,109 Commits 9,614 Branches 7,118 Tags

3 Commits

Include renames

Author SHA1 Message Date

Author	SHA1	Message	Date
Andrew LeFevre	948c1db915	preform RBAC checks before connecting to registered OpenSSH nodes (#21938 ) The RBAC logic assumes that SSH connections to registered OpenSSH nodes will always be proxied and terminated, which will come in a future PR. Part of implementing #19261.	2023-03-03 17:29:53 +00:00
Tobiasz Heller	5f07b284b0	security: Prevent access to SSH nodes using SessionJoinPrincipal	2022-12-28 09:24:02 -08:00
Jakub Nyckowski	d68c90929f	Fix compatibility with `sshd` 7.x (#18181 ) This change introduces a workaround for OpenSSH 7.x bug related to SHA-2 signed certificates. Teleport signs all certificates with SHA-2-512, which prevents us from connecting to older sshd. As a workaround, we will send the same certificate signed with SHA-2-512 (as we do right now) and SHA-1 if the first authentication fails. We always send the SHA-2 certificates first, so newer OpenSSH versions should always use SHA-2 certs as they do right now.	2022-11-10 22:50:06 +00:00

948c1db915

preform RBAC checks before connecting to registered OpenSSH nodes (#21938 )

The RBAC logic assumes that SSH connections to registered OpenSSH nodes
will always be proxied and terminated, which will come in a future PR.

Part of implementing #19261.

2023-03-03 17:29:53 +00:00

Tobiasz Heller 5f07b284b0 security: Prevent access to SSH nodes using SessionJoinPrincipal 2022-12-28 09:24:02 -08:00

Jakub Nyckowski

d68c90929f

Fix compatibility with sshd 7.x (#18181 )

This change introduces a workaround for OpenSSH 7.x bug related to SHA-2 signed certificates. Teleport signs all certificates with SHA-2-512, which prevents us from connecting to older sshd. As a workaround, we will send the same certificate signed with SHA-2-512 (as we do right now) and SHA-1 if the first authentication fails. We always send the SHA-2 certificates first, so newer OpenSSH versions should always use SHA-2 certs as they do right now.

2022-11-10 22:50:06 +00:00