-
Notifications
You must be signed in to change notification settings - Fork 606
Description
Hi team
Apologies if this has been answered elsewhere but I could not find a definitive statement on this
Does SSHJ fully implement client support for https://datatracker.ietf.org/doc/html/rfc8308 ?
ext-info-c is mentioned in the README in the context of this PR #622 which also has this comment.
Some SSH servers will not honor the negotiated rsa-sha2-256 algorithms
if the client does not indicate support for SSH_MSG_EXT_INFO messages.
Since we only need to accept these messages, but are free to ignore
their contents, adding support amounts to sending "ext-info-c" with our
kex algorithm proposal.
Does this indicate that
(A) SSHJ fully implements/honours RFC-8308 or is the inclusion of ext-info-c on the list of KEX algorithms (Not listed under Supported algorithms > key exchange on the README but is listed here https://ssh-comparison.quendi.de/impls/sshj.html , the comparison site the README links to, under Key exchange protocols)
or
(B) SSHJ does not fully implement/honour RFC-8308 , the inclusion of ext-info-c in the list of client KEX algorithms is only to connect to SSH servers that do support RFC-8308 but SSHJ ignores the messages related to extension negotiation sent back by these SSH servers.
Thanks in advance