Skip to content

Question (not an enhancement request) relating to RFC-8308 support #1015

@colmoflynn

Description

@colmoflynn

Hi team

Apologies if this has been answered elsewhere but I could not find a definitive statement on this

Does SSHJ fully implement client support for https://datatracker.ietf.org/doc/html/rfc8308 ?

ext-info-c is mentioned in the README in the context of this PR #622 which also has this comment.

Some SSH servers will not honor the negotiated rsa-sha2-256 algorithms
if the client does not indicate support for SSH_MSG_EXT_INFO messages.
Since we only need to accept these messages, but are free to ignore
their contents, adding support amounts to sending "ext-info-c" with our
kex algorithm proposal.

Does this indicate that

(A) SSHJ fully implements/honours RFC-8308 or is the inclusion of ext-info-c on the list of KEX algorithms (Not listed under Supported algorithms > key exchange on the README but is listed here https://ssh-comparison.quendi.de/impls/sshj.html , the comparison site the README links to, under Key exchange protocols)

or

(B) SSHJ does not fully implement/honour RFC-8308 , the inclusion of ext-info-c in the list of client KEX algorithms is only to connect to SSH servers that do support RFC-8308 but SSHJ ignores the messages related to extension negotiation sent back by these SSH servers.

Thanks in advance

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions