OpenSSH keys visible from the repo!

bcgit / bc-java

Bouncy Castle Java Distribution (Mirror)

https://www.bouncycastle.org/java.html

MIT License

2.31k stars 1.14k forks source link

OpenSSH keys visible from the repo! #1883

Closed TacticalNuke1 closed 3 days ago

TacticalNuke1 commented 3 days ago

Found this using a google dork, and your openSSH keys and RSA keys are viewable in: bc-java/prov/src/test/java/org/bouncycastle/jce/provider/test/OpenSSHSpecTests.java

mwcw commented 3 days ago

It's a unit test that needs to load keys and verify their properties.

I'll assume this issue was created as a result of running a tool over the code base or simply searching for keys.

Next time please check the issue is actually an issue before posting.