Skip to content

Differentiate SSH key usage for authentication vs signing#37352

Draft
lunny wants to merge 1 commit intogo-gitea:mainfrom
lunny:lunny/ssh_key_usage
Draft

Differentiate SSH key usage for authentication vs signing#37352
lunny wants to merge 1 commit intogo-gitea:mainfrom
lunny:lunny/ssh_key_usage

Conversation

@lunny
Copy link
Copy Markdown
Member

@lunny lunny commented Apr 22, 2026

Resolve #32434

  • Add usage metadata for SSH keys to distinguish authentication and signing-only keys, with migration support.
  • Enforce usage rules in authorized_keys generation, HTTP signature auth, and commit signature verification.
  • Expose usage in UI/API and update fixtures/tests to cover signing-only behavior.
image

@lunny lunny added this to the 1.27.0 milestone Apr 22, 2026
@lunny lunny added the type/enhancement An improvement of existing functionality label Apr 22, 2026
@GiteaBot GiteaBot added the lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. label Apr 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. type/enhancement An improvement of existing functionality

Projects

None yet

Milestone

1.27.0

Development

Successfully merging this pull request may close these issues.

Differentiate between ssh authentication keys and ssh signing keys

2 participants

@lunny @GiteaBot