Differentiate between ssh authentication keys and ssh signing keys #13679

Open
opened 2025-11-02 10:50:07 -06:00 by GiteaMirror · 3 comments
Owner

Originally created by @zwimer on GitHub (Nov 6, 2024).

Feature Description

It would be very nice if gitea made a distinction between ssh signing keys and ssh authentication keys like github does.

For various reasons (such as security with ssh agent forwarding) I use different keys for signing commits vs authentication, but because gitea does not distinguish between the two my signing key has been given authentication permissions. In my case, that means keys from a less-secure machine now have full authentication permissions to my gitea instance.

Screenshots

image
Originally created by @zwimer on GitHub (Nov 6, 2024). ### Feature Description It would be very nice if `gitea` made a distinction between `ssh` signing keys and `ssh` authentication keys like github does. For various reasons (such as security with ssh agent forwarding) I use different keys for signing commits vs authentication, but because `gitea` does not distinguish between the two my signing key has been given authentication permissions. In my case, that means keys from a less-secure machine now have full authentication permissions to my `gitea` instance. ### Screenshots <img width="859" alt="image" src="https://github.com/user-attachments/assets/d7a5fa92-b16b-47f0-986f-7a18d06dbd51">
GiteaMirror added the proposal/acceptedtype/proposal labels 2025-11-02 10:50:07 -06:00
Author
Owner

@cclvi256 commented on GitHub (Jan 14, 2025):

Is this issue solved or are there anyone working on it?

@cclvi256 commented on GitHub (Jan 14, 2025): Is this issue solved or are there anyone working on it?
Author
Owner

@BorzdeG commented on GitHub (Jan 14, 2025):

I was planning to take her on for work in the next few days...

@BorzdeG commented on GitHub (Jan 14, 2025): I was planning to take her on for work in the next few days...
Author
Owner

@lunny commented on GitHub (Jan 15, 2025):

We need a new column for public_key table or we can have a new value for the existed Type KeyType column.

@lunny commented on GitHub (Jan 15, 2025): We need a new column for `public_key` table or we can have a new value for the existed `Type KeyType` column.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#13679