Net::SSH update

[Jamis Buck]

Well, the thunderous silence that followed my query prompted me to
continue with my self-assigned task to implement Net::SSH in solitude.

However, I'm rapidly learning *why* Net::SSH has never, to date, been
implemented in Ruby--the OpenSSL module for Ruby leaves out some very
key features (no pun intended), namely:

1) It is frankly impossible to create an empty DH key with the Ruby
OpenSSL interface, and

2) There is no hook into the RSA_verify method.

Those are the two stumpers I've run into so far, and I have no doubt
I'll run into more.

So, given this situation, which is the recommended course of action?

1) Add the missing features to Ruby/OpenSSL and then submit patches,
hoping they'll get integrated into the main distro, or

2) Create my own binary module that provides the necessary features
of OpenSSL, and distribute it as part of Net::SSH.

Any opinions?

--
Jamis Buck
(e-mail address removed)
http://www.jamisbuck.org/jamis

ruby -h | ruby -e
'a=[];readlines.join.scan(/-(.)\[e|Kk(\S*)|le.l(..)e|#!(\S*)/) {|r| a <<
r.compact.first };puts "\n>#{a.join(%q/ /)}<\n\n"'

 

[Aredridel]

1) Add the missing features to Ruby/OpenSSL and then submit patches,

hoping they'll get integrated into the main distro, or

This option. definately. Why reinvent the wheel?

 

[gabriele renzi]

Well, the thunderous silence that followed my query prompted me to
continue with my self-assigned task to implement Net::SSH in solitude.

I forgot to point you to this thread on ruby-core:
http://blade.nagaokaut.ac.jp/cgi-bin/vframe.rb/ruby/ruby-core/2804?2699-2915+split-mode-vertical

it seem there is someone working on RSA stuff at least, that may be of
help to you. Sorry for ignoring the other message my memory is bad :/

 

[Jamis Buck]

I forgot to point you to this thread on ruby-core:
http://blade.nagaokaut.ac.jp/cgi-bin/vframe.rb/ruby/ruby-core/2804?2699-2915+split-mode-vertical

Um... maybe I'm just looking at it wrong, but it doesn't look like that
thread has anything to do with openssl or RSA... Could you double check
it, and if it is correct, help me understand how it applies?

it seem there is someone working on RSA stuff at least, that may be of
help to you. Sorry for ignoring the other message my memory is bad :/

No worries. The list has been pretty busy lately--I just figured my
lone message got out-shouted by the really busy threads.

--
Jamis Buck
(e-mail address removed)
http://www.jamisbuck.org/jamis

ruby -h | ruby -e
'a=[];readlines.join.scan(/-(.)\[e|Kk(\S*)|le.l(..)e|#!(\S*)/) {|r| a <<
r.compact.first };puts "\n>#{a.join(%q/ /)}<\n\n"'

 

[gabriele renzi]

Um... maybe I'm just looking at it wrong, but it doesn't look like that
thread has anything to do with openssl or RSA... Could you double check
it, and if it is correct, help me understand how it applies?

ooops, sorry, this was the one:
http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/2748

it seem mr. Evan Webb is working on Crypt::RSA , you could find it
here:
http://dark-ruby.org/

 

[GOTOU Yuuzou]

Hi,
I'm a maintainer of OpenSSL module.

Well, the thunderous silence that followed my query prompted me to
continue with my self-assigned task to implement Net::SSH in solitude.

However, I'm rapidly learning *why* Net::SSH has never, to date, been
implemented in Ruby--the OpenSSL module for Ruby leaves out some very
key features (no pun intended), namely:

1) It is frankly impossible to create an empty DH key with the Ruby
OpenSSL interface, and

2) There is no hook into the RSA_verify method.

Is OpenSSL:Key::RSA#verify not enough?

require "openssl"
rsa = OpenSSL:Key::RSA.new(512)
data = File.read(__FILE__)
signature = rsa.sign(OpenSSL:igest::SHA1.new, data)
p rsa.verify(OpenSSL:igest::SHA1.new, signature, data)

1) Add the missing features to Ruby/OpenSSL and then submit patches,
hoping they'll get integrated into the main distro, or

I hope this. I would be glad if you can help to improve our code.

regards,

 

[Jamis Buck]

Is OpenSSL:Key::RSA#verify not enough?

require "openssl"
rsa = OpenSSL:Key::RSA.new(512)
data = File.read(__FILE__)
signature = rsa.sign(OpenSSL:igest::SHA1.new, data)
p rsa.verify(OpenSSL:igest::SHA1.new, signature, data)

I acually discovered this shortly after my original post. I missed it
because I was grepping the sources for "RSA_verify", but
OpenSSL:Key.verify uses the EVP_Verify... family of functions, instead.

It should do nicely. Thanks.

I've already patched OpenSSL:Key:H and OpenSSL:Key::RSA to allow
creation of empty keys, and I added some new accessors to
OpenSSL:Key:H. The modifications seem to be working so far.

What is the best way to submit these changes? And against which version
of the sources should I be working?

--
Jamis Buck
(e-mail address removed)
http://www.jamisbuck.org/jamis

ruby -h | ruby -e
'a=[];readlines.join.scan(/-(.)\[e|Kk(\S*)|le.l(..)e|#!(\S*)/) {|r| a <<
r.compact.first };puts "\n>#{a.join(%q/ /)}<\n\n"'

 

[GOTOU Yuuzou]

I've already patched OpenSSL:Key:H and OpenSSL:Key::RSA to allow
creation of empty keys, and I added some new accessors to
OpenSSL:Key:H. The modifications seem to be working so far.

What is the best way to submit these changes? And against which version
of the sources should I be working?

Please post it to this mailing list. I'll examine it for
Ruby 1.9. If the patch simply adds features and is stable,
it will be integrated to ruby_1_8 branch.

I'm making unit tests for OpenSSL module now, however I'm
not touched to PKeys yet. Could you add test code even for
the new features?

regards,