meshcloud / unipipe-service-broker

GitOps Open Service Broker - exposes service instances and bindings as files in a git repository
Apache License 2.0
14 stars 11 forks source link

change ssh library - its not supporting rsa-sha2-* #130

Closed younGihan closed 3 months ago

younGihan commented 3 months ago

As Jcraft Jsch is not officially maintained anymore (last release over 5 years ago) and its not supporting RSA-SHA2-*. Therefore its not usable in combination e.g. with Azure DevOps Repositories (https://devblogs.microsoft.com/devops/ssh-rsa-deprecation/)

it would be good if we can switch to another library - from a security perspective as well as to ensure a working service broker.

example would be a maintained fork such as https://github.com/mwiede/jsch