[PATCH aurweb 2/2] Add FIDO/U2F ssh keytypes to default config

Eli Schwartz eschwartz at archlinux.org
Thu Jun 10 19:35:57 UTC 2021


On 6/10/21 2:35 PM, Steven Guikal via aur-dev wrote:
> ---
>  conf/config.defaults | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/conf/config.defaults b/conf/config.defaults
> index 98e033b7..e6961520 100644
> --- a/conf/config.defaults
> +++ b/conf/config.defaults
> @@ -62,7 +62,7 @@ ECDSA = SHA256:L71Q91yHwmHPYYkJMDgj0xmUuw16qFOhJbBr1mzsiOI
>  RSA = SHA256:Ju+yWiMb/2O+gKQ9RJCDqvRg7l+Q95KFAeqM5sr6l2s
>  
>  [auth]
> -valid-keytypes = ssh-rsa ssh-dss ecdsa-sha2-nistp256 ecdsa-sha2-nistp384 ecdsa-sha2-nistp521 ssh-ed25519
> +valid-keytypes = ssh-rsa ssh-dss ecdsa-sha2-nistp256 ecdsa-sha2-nistp384 ecdsa-sha2-nistp521 ssh-ed25519 sk-ssh-ecdsa at openssh.com sk-ssh-ed25519 at openssh.com


Thanks, this seems like a very reasonable change. :)

To gitlab.archlinux.org:archlinux/aurweb.git
   a625df07..b32022a1  b32022a176ede116068a405c928cf25e23ffb691 -> master


>  username-regex = [a-zA-Z0-9]+[.\-_]?[a-zA-Z0-9]+$
>  git-serve-cmd = /usr/local/bin/aurweb-git-serve
>  ssh-options = restrict
> 


-- 
Eli Schwartz
Bug Wrangler and Trusted User

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/aur-dev/attachments/20210610/01206240/attachment.sig>


More information about the aur-dev mailing list