5 ms·

OpenSSH 6.2 from 2013 added AuthorizedKeysCommand, so no patching needed.

• jwilk 2y ago
  The command would still need to print millions of SSH keys on stdout, so this doesn't really help.
  • cozzyd 2y ago
    I think it takes the user as an argument, so it could relatively nicely solve the problem (though maybe would be too susceptible to DOS attacks since it requires a new process per connection attempt, although openssh should rate limit anyway?)
    • jwilk 2y ago
      The SSH username is always "git".
      • cozzyd 2y ago
        ah, right. I do wonder why they do it that way...
        • progval 2y ago
          HTTPS URLs are inconvenient for private repositories, and username has to be part of SSH URLs that people share when setting up a submodule or linking to a repository.
          • jwilk 2y ago
            > username has to be part of SSH URLs No? Usernames are optional in SSH URLs.
            • ongy 2y ago
              But then it defaults to the users username on device Which isn't always in sync with their GitHub username. Which might even be "root".
              • cozzyd 2y ago
                surely anybody using GitHub via ssh knows how to edit their .ssh/config