[SSHD-757] Add support for PGP authorized keys usage

• Type: New Feature
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.6.0
• Fix Version/s: 2.2.0
• Labels: authorization key key-management pgp ssh
• Assignee: Lyor Goldstein
• Reporter: Lyor Goldstein
• Created: 26/Jul/17 12:35
• Updated: 08/Jun/20 13:34
• Resolved: 22/Nov/18 05:23

Description

SSH 2.3 seems to have added the capability to use PGP keys as authorized ones:

SSH2 Version 2.0.13 introduced support for PGP authentication. Your authorization file may also include PgpPublicKeyFile, PgpKeyName, PgpKey Fingerprint, and PgpKeyId lines. A Command line may follow them, just as it may follow Key:

# SSH2 only
PgpKeyName my-key
Command "/bin/echo PGP authentication was detected" 

Some examples of how to use Bouncycastle to facilitate this:

• Sample code
• jpgpj Library wrapper

Python converter pgp->ssh

openssh-gpg configuration

Calculating PGP key fingerprint

Issue Links

• is a parent of: SSHD-870 Add support for using PGP Key ring(s) for authorized entries and/or client identity