Add support for using CA certs for upstream ssh connection (#210)

This commit is contained in:
Matthew Atkinson 2023-08-25 17:32:49 -07:00 committed by GitHub
parent 36f03e7a74
commit 13fcc8c0a8
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
12 changed files with 473 additions and 250 deletions

View file

@ -3,6 +3,11 @@
# use entrypoint.sh to generate the ssh_host_ed25519_key
PLUGIN="dummy_badname/" bash /sshpiperd/entrypoint.sh 2>/dev/null
# Create an ssh key pair and then sign the public key with the ca cert
chmod 600 cahost/ca
ssh-keygen -t ssh-ed25519 -f /etc/ssh/ssh_user -N ""
ssh-keygen -s cahost/ca -I ssh_user -n client_123 /etc/ssh/ssh_user.pub
if [ "${SSHPIPERD_DEBUG}" == "1" ]; then
echo "enter debug on hold mode"
echo "run [docker exec -ti e2e_testrunner_1 bash] to run to attach"