Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Harden the generation of the Gitolite authorized_keys file

Download Browse

It should not be possible to get an authorized_keys file with invalid entries This is part of request #9970: Directly manage SSH keys instead of delegating it to gitolite Change-Id: I59a7f0e24911e9338aaa5a6fc45562fcb81f5f2f

+323 −20
Thomas Gerbet (tgerbet) 2017-02-24 15:18
Thomas Gerbet (tgerbet) 2017-02-27 19:21
9f43853b3cf26c991c301f6fa60cec66f15d0dcb
aaeb6401b5857333baf5dc38834e70159ee8893b
git #tuleap/stable/9f43853b3cf26c991c301f6fa60cec66f15d0dcb

Modified Files

Side by side diff
Inline diff
Name
M plugins/git/include/Git/Gitolite/SSHKey/AuthorizedKeysFileCreator.php +127 −9 Go to diff View file
M plugins/git/include/Git/Gitolite/SSHKey/Key.php +25 −1 Go to diff View file
A plugins/git/include/Git/Gitolite/SSHKey/MalformedAuthorizedKeysFileException.php +25 −0 Go to diff View file
M plugins/git/include/autoload.php +3 −2 Go to diff View file
M plugins/git/include/gitPlugin.class.php +4 −2 Go to diff View file
M plugins/git/tests/Git/Gitolite/SSHKey/AuthorizedKeysFileCreatorTest.php +33 −1 Go to diff View file
A plugins/git/tests/Git/Gitolite/SSHKey/KeyTest.php +62 −0 Go to diff View file
M src/common/user/User_SSHKeyValidator.class.php +5 −5 Go to diff View file
A src/utils/ssh-keys-validity-checker.sh +39 −0 Go to diff View file