[CAMEL-16365] Support ecdsa-sha2-* and ssh-ed25519 algorithms in camel-ssh

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.10.0
• Estimated Complexity: Unknown
• Assignee: Grzegorz Grzybek
• Reporter: Grzegorz Grzybek
• Created: 17/Mar/21 08:46
• Updated: 25/Apr/22 05:59
• Resolved: 02/Apr/21 10:00

Description

Currently camel-ssh supports only ssh-rsa and ssh-dss algorithms. See here.

Apache SSHD supports EC keys through BouncyCastle without problems and EdDSA using net.i2p.crypto/eddsa library.

However Camel itself can't validate such server keys.

I have locally working version of camel-ssh which validates all these additional algorithms supported by OpenSSH:

• ecdsa-sha2-nistp256
• ecdsa-sha2-nistp384
• ecdsa-sha2-nistp521
• ssh-ed25519

Issue Links

• is related to: SSHD-1145 EdDSASecurityProviderRegistrar#isSupported() should check more classloaders
• links to: GitHub Pull Request #70
• links to: GitHub Pull Request #5290