java-http-signature

java-http-signature copied to clipboard

Bumps [testng](https://github.com/cbeust/testng) from 6.14.3 to 7.5.1. Release notes Sourced from testng's releases. TestNG v7.5.1 What's Changed Cherrypick Zip Slip Vulnerability to 7.5 release by @​prashil-g in cbeust/testng#2899 New Contributors @​prashil-g...

dependabot[bot]

Bumps `dependency.bouncycastle.version` from 1.65 to 1.68. Updates `bcpkix-jdk15on` from 1.65 to 1.68 Changelog Sourced from bcpkix-jdk15on's changelog. ... (truncated) Commits See full diff in compare view Updates `bcprov-jdk15on` from 1.65...

dependabot[bot]

indianwhocodes

Hi, I'm @msporny, primary author of the HTTP Signatures specification at IETF for many years now. You've implemented some variation of that specification. I need your help to move that...

msporny

[`Signer#sign(String, KeyPair, byte[])`](https://github.com/joyent/java-http-signature/blob/master/common/src/main/java/com/joyent/http/signature/Signer.java#L370)

tjcelaya

support Ed25519 keys

2

As of this writing Triton does not have server side support for Ed25519 keys and on first glance BouncyCastle does not support them either. However, we would eventually support them.

cburroughs

This is another kind of special openssh format that starts with `BEGIN OPENSSH PRIVATE KEY`. This format is always used for Ed25519 keys (#31) ``` * Add a new private...

cburroughs

support ssh-agent and/or ~/.ssh loading

1

Followup from #10. java-http-signature controls the fingerprint generation, and the user supplied fingerprint is only used (if at all) for sanity checking. This opens up the possibility to -- given...

cburroughs