From f127c624c0f6ae6154dc4ab8f6060d8f9eb28b4e Mon Sep 17 00:00:00 2001 From: Russell Ballestrini Date: Sun, 21 Dec 2025 09:47:57 -0500 Subject: [PATCH] Add INFO logging for fingerprint passthrough --- libplugin/skel/skel.go | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/libplugin/skel/skel.go b/libplugin/skel/skel.go index e0bd2429..4017f38b 100644 --- a/libplugin/skel/skel.go +++ b/libplugin/skel/skel.go @@ -296,14 +296,16 @@ func (p *SkelPlugin) createUpstreamWithClientKey(conn libplugin.ConnMetadata, to } // If client public key is provided, prepend fingerprint to username - // Format: "SHA256:xxxxx.originaluser" - maldoror/upstream can parse this + // Format: "fp:xxxxx.originaluser" - maldoror/upstream can parse this if clientPublicKey != nil { hash := sha256.Sum256(clientPublicKey) fingerprint := base64.RawStdEncoding.EncodeToString(hash[:]) // Replace any dots in fingerprint with underscores to avoid parsing issues fingerprint = strings.ReplaceAll(fingerprint, ".", "_") user = "fp:" + fingerprint + "." + user - log.Debugf("passing client fingerprint in username: %s", user) + log.Infof("passing client fingerprint in username: %s", user) + } else { + log.Infof("no client public key provided, using original username: %s", user) } p.cache.SetDefault(conn.UniqueID(), to)