Ssh Inscribe Versions Save

Changelog

• 3dd9768fcd4d82c1a977e1a1a33f92c792211f62: refactor: use cobra.NoFileCompletions instead of our own (@scop)
• f2f1b2851dc9967b1fa75fbad11c57ff312b7da4: chore: update readme on development version install (@aakso)
• fc9ed0ff8950eee67780b87792d116545ba0f635: chore: build with go1.18.4 (@aakso)
• 6332426776de721918f28c71e219e61dbf022066: chore: upgrade cobra to v1.5.0 (@aakso)
• f2e7d54e5d64bc3d009fe827baa02eb171f0af16: chore: upgrade all deps (@aakso)
• 5c1bb2d041024394f35cbe00ba0b0ca909cfccf5: ci: add basic config (@scop)
• 32b5bc6fd8d51ff534bdab1acc0c6be23de295f8: refactor(client): use cobra's builtin completion emitter (@scop)
• c2bcdb6eff2e5c623a4860487dbd942be645a3d2: refactor(client): make use of cobra.FixedCompletions (@scop)
• 66f34986e021be2b46f46b34f4de493ec6ba7f81: style(client): make Command args related member placement consistent (@scop)
• ca0ac11d8a23278845aa3632977adc758463af65: fix(client): ca response (no-)argument validation and completion (@scop)
• ff3c59107649d2a97ceef5c88bb124e64b8fc52a: feat(client): error out on args to commands taking none (@scop)
• 4ef78f33a8eee5bce4224c7bee4de37c093b46e6: chore: go mod tidy (@scop)
• 44af720a00495bf610f7947fa7a1bc38bebeff9d: feat(server)!: default signing option to rsa-sha2-256 (@scop)
• 6d739d1dcf26ad6434d2b4ab715eda851df22362: fix(client): include ssh-rsa in signing-option docs and completions (@scop)
• cdb5723579bdf7c418ca7b96d8bcd26da89653d0: build: switch to goreleaser (@scop)
• a8348359ae977a58ecd1ba3c604ccc1ea80e0a5f: ci: hook up goreleaser (@scop)
• 4b6b1363828b561d8ecfd5c0cbfd654209efeaa0: build: own etc and var dirs in packages (@scop)
• 06ba1b2ce4103ee237c3b3868ea7a3e031762aaf: build: roll .debs, too (@scop)
• b438443336128ec26e3793f949ce872244aebfff: build: upload packages to packagecloud.io (@scop)
• 66b870d8913d5c2ccb7996f5b63e033f5d9759bf: chore: gitignore dist (@scop)
• c5c790a280508d7a0f97f3e4e3aa51796724b5de: build: add some more metadata to packages (@scop)
• 2ddc1af5cd21c82d20af35af9de031b2f5dde8b6: build: package LICENSE and README.md (@scop)
• 854a3e90015698654fef9012c4f731296ee07347: docs: add release install instructions, apt/dnf/yum repo info (@scop)
• 4da4bb2dd29dbf14714e8d839f2ecc5463214e35: chore: use go1.20 and upgrade deps (@aakso)
• 932d478ced536ca3b23c891a86a52c22636eb004: build: disable CGO (@aakso)
• e20af6106e7069ca3d1cac785b800bd0b5139b49: build: make .deb and .rpm depend on ssh-agent (@scop)
• af751df9511c7804df3de74b064dfb330327ed0b: build: include bare bones auth_users.yaml in server .deb and .rpm (@scop)
• ed754c4060d34e8a91bf59c1063f121002a751d9: feat: server arg handling improvements (@scop)
• e6203a5b6ebdba1d61ff8a4bf74e140cf4781256: fix(client): crash on invalid URL (@scop)
• 7be13b1f282dd9cc2a66c2a581073b76ebf98ac1: test: error handling improvements (@scop)
• 2cfec10a5b22520d772aeacde3ced38dd50fffc8: fix(oidc): handle claims unmarshal errors (@scop)
• 99c1c6d0efc4f891972dccf6a748047fb03c588f: fix(server): handle smart card remove errors (@scop)
• 56b8b4afb0cebf45425116ee933a6bf1a642ccf1: feat(server): log error response send errors (@scop)
• f4dc0211c6623df5a3b6660a778bf3215276649f: style: spelling fixes (@scop)
• 7922b3e15f5fd9569c927f1464982c6f9e870f5b: feat: include bash completions in .deb and .rpm (@scop)
• 8e0079c9cd247395552965e3c01a03cef4525965: style: apply cleanups suggested by gosimple (@scop)
• c28febedbda2381e020dec00c9b35072803dc161: test: filteringagent error handling fixes (@scop)
• 0cdfc0b6d5e3b4b3afeb23ea8b5d96be51847e7e: test: keysigner error handling fixes (@scop)
• e51b8068604f8f571ffc17dbfd5d119cbb32e780: style(keysigner): remove dead code (@scop)
• 80855468d00c9c5c525390249d5bd661a28b0151: chore: avoid using several deprecated things (@scop)
• ccff25572baf37072de8befc3773658547d0e73f: test(authfile): temp file error handling fix (@scop)
• c32d7a3e51063d47ada82729b31505e45850696a: refactor: migrate to echo-jwt/v4 and jwt/v5 (@scop)
• b728842d653035f9dfeae6b118029c8ecae971a0: refactor(authldap): remove dead code (@scop)
• 75759716b33306e9cbb03211509be595e28d2158: chore: nolint some staticcheck deprecation findings (@scop)
• d4a43bec027630a687d82f4d7270f4414fa6d42a: refactor: remove unused code (@scop)
• c496e95ca3ee51f6b9052dbe690dca213be17ab8: refactor: remove unnecessary appends (@scop)
• da8231a32e34b29e1d164042f0989ad73c6e238b: build(goreleaser): add some config whitespace (@scop)
• 9f7750252dd9a286bc9b58e13e91bc0d703cc1db: build(deb): include LICENSE as copyright (@scop)
• c53d59fa18cd051035ba3fb507d56211fcf65c76: build(packaging): apply standard umask for auxiliary files (@scop)
• fb74c16dc1c59e2fdb5b37f5f48397e1d48692c0: build(dist): with Go 1.20.7 (@scop)
• 12fdfcef6a125087bef3994ccfc7c5e5e0bb6fe4: fix: keep in sync with server's default signing algo for rsa (@aakso)
• ba25b9165dbb4df64685c02f2792023d5c01dd7c: feat: use signing flags with filtering agent to support sha2 signatures (@aakso)
• 006260b28b3ea2c640fd249759782537c64b9c56: chore: use a global constant to mark a default RSA algorithm (@aakso)
• ec529c6808a24cd7a96e14c54261313142cbed41: feat: stop server on .deb and .rpm remove (@scop)
• bb3f992a49116266ba333acadc06215f8cc6e427: feat: systemctl daemon-reload, restart service on .deb and .rpm postinst (@scop)
• 66a893bec32cf31d9d4284d5451c984515e02205: fix: quiet server .deb and .rpm preinstall script (@scop)
• e82dd90ac31d4941da3ecfdbc1314919f455bc4c: ci: run golangci-lint (@scop)
• 422b601f42e0a0f98e4983177738fb16a8fbea8a: ci: lint and test on schedule, every other Monday (@scop)
• d48e4b4e3a7d85c8bc7218e446778fd85b845593: ci: run tests even if linting fails (@scop)

apt and dnf/yum package repositories are available at Packagecloud.

• chore: build darwin-arm64
• chore: upgrade cobra to 1.4.0
• chore: build with go1.18.1
• feat(client): complete sshi ssh on (unhashed) known hosts
• feat: implement max principals per certificate
• fix: support newer versions of ssh-agent pkcs11 integration
• feat(client): re-request credentials until auth success or interrupted
• feat(client): allow exiting with Ctrl+C on readline input
• fix(client): do not bother initializing readline if ssh-askpass is used

• fix: version check broken in exec and ssh commands

• feat: handle multiple cert versions

Add support for signature options to support SHA2 signatures with RSA CA keys.

• server: added support for multiple certificates to allow multi-domain configurations