com.maverick.sshd

Class OpenSshCACertificateStoreImpl

java.lang.Object

com.maverick.sshd.OpenSshCACertificateStoreImpl

All Implemented Interfaces:

PublicKeyStore

public class OpenSshCACertificateStoreImpl
extends Object
implements PublicKeyStore

Constructor Summary

Constructors

Constructor and Description
OpenSshCACertificateStoreImpl(Collection<com.maverick.ssh.components.SshPublicKey> caPublicKeys)
OpenSshCACertificateStoreImpl(com.maverick.ssh.components.SshPublicKey caPublicKey)

Method Summary

Modifier and Type	Method and Description
void	addCAKey(com.maverick.ssh.components.SshPublicKey caKey)
boolean	isAuthorizedKey(com.maverick.ssh.components.SshPublicKey key, Connection con) Check the supplied public key against the users authorized keys.
void	removeKey(com.maverick.ssh.components.SshPublicKey caKey)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OpenSshCACertificateStoreImpl

public OpenSshCACertificateStoreImpl(com.maverick.ssh.components.SshPublicKey caPublicKey)

OpenSshCACertificateStoreImpl

public OpenSshCACertificateStoreImpl(Collection<com.maverick.ssh.components.SshPublicKey> caPublicKeys)

Method Detail

addCAKey

public void addCAKey(com.maverick.ssh.components.SshPublicKey caKey)
              throws com.maverick.ssh.SshException

Throws:

com.maverick.ssh.SshException

removeKey

public void removeKey(com.maverick.ssh.components.SshPublicKey caKey)

isAuthorizedKey

public boolean isAuthorizedKey(com.maverick.ssh.components.SshPublicKey key,
                               Connection con)

Description copied from interface: PublicKeyStore

Check the supplied public key against the users authorized keys. The actual verification of the key is performed by the server, you only need to return a value to indicate whether the key is authorized or not. You can obtain the username, home directory, group or remote socket address from the com.maverick.sshd.platform.AuthenticationProvider instance.

If your authorized key database is kept on the native file system you can obtain and initialize an instance as follows:

 NativeFileSystemProvider nfs =
         (NativeFileSystemProvider)authenticationProvider.getContext().getFileSystemProvider().newInstance();

 nfs.init(sessionid, null, authenticationProvider.getContext());
 

Don't forget to close any file handles and the file system once you've done accessing files.

Specified by:

isAuthorizedKey in interface PublicKeyStore

Parameters:

key - SshPublicKey

Returns:

boolean true if the key is an authorized key, otherwise false