-
Notifications
You must be signed in to change notification settings - Fork 188
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add flag to allow configuration of SSH kex algos #655
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can this be tested in a way?
28039dc
to
e7cf79c
Compare
main.go
Outdated
@@ -120,6 +122,8 @@ func main() { | |||
"The TTL of an index in the cache. Valid time units are ns, us (or µs), ms, s, m, h.") | |||
flag.StringVar(&helmCachePurgeInterval, "helm-cache-purge-interval", "1m", | |||
"The interval at which the cache is purged. Valid time units are ns, us (or µs), ms, s, m, h.") | |||
flag.StringSliceVar(&kexAlgos, "ssh-kex-algos", []string{}, | |||
"The list of kex algorithms to use for ssh arranged from most preferred to least.") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
"The list of kex algorithms to use for ssh arranged from most preferred to least.") | |
"The list of key exchange algorithms to use for ssh connections, arranged from most preferred to the least.") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for working on this @aryan9600!
LGTM
Adds a flag `ssh-kex-algos` which configures the gogit and libgit2 managed clients to use the specified list of kex algos for ssh. If not used the default list in `golang/x/crypto/ssh` is used. Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, thanks @aryan9600 🙇
Adds a runtime flag to specify which key exchange algorithms to use for ssh.
Ref: fluxcd/flux2#2610
Signed-off-by: Sanskar Jaiswal jaiswalsanskar078@gmail.com