These are chat archives for tg123/sshpiper

3rd
Jan 2015
tgic
@tg123
Jan 03 2015 07:00
you cannot forward ssh keys. instead, you can fill up MapPublicKey, which returns the private key for target host, in SSHPiperConfig.
Nick Schuch
@nickschuch
Jan 03 2015 08:33
Is that just a limitation of the sshpiper framework or impossible?
tgic
@tg123
Jan 03 2015 08:43
impossible. security reason (man in the mid) see https://github.com/tg123/sshpiper#publickey-sign-again
if you dont want to know the content in the ssh connections you can just forward tcp connections
sshpiper has to understand the content of the ssh connection because it want to findupstream by username
Nick Schuch
@nickschuch
Jan 03 2015 11:17
yep, I definitely want to know the connection details so I can route to a specific ssh daemon. just wanting to also authenticate against that end ssh daemon service with the users ssh key for security reasons.
tgic
@tg123
Jan 03 2015 16:25
well that is why I made sshpiper. you can see my authentication and key mapping code https://github.com/tg123/sshpiper/blob/master/sshpiperd/workingdir.go#L152