[KARAF-5286] Separate server key generation from key reading

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.2.0.M1
• Fix Version/s: 4.2.0.M1
• Component/s: karaf
• Assignee: Christian Schneider
• Reporter: Christian Schneider
• Created: 03/Aug/17 08:53
• Updated: 15/Sep/18 16:35
• Resolved: 04/Aug/17 12:30

Description

Currently we use AbstractGeneratorHostKeyProvider to read server keys and also generate them on the fly. According to the mina sshd team this class is not meant for production use.

So I propose we create a separate classes for reading and writing keys.
I also propose we remove the hostKeyFormat config and only support OpenSSH pem based keys.

For now we need a custom OpenSSHKeyPairProvider to read out keys as mina sshd has a bug (SSHD-760). After the release of sshd 1.7.0 we can switch to the standard FileKeyProvider from mina.

Issue Links

• contains: KARAF-5072 Add setting to ssh server for forcing a provided key