hudson.plugins.sshslaves.verifiers

Class ManuallyTrustedKeyVerificationStrategy

java.lang.Object

hudson.plugins.sshslaves.verifiers.SshHostKeyVerificationStrategy

hudson.plugins.sshslaves.verifiers.ManuallyTrustedKeyVerificationStrategy

All Implemented Interfaces:

hudson.model.Describable<SshHostKeyVerificationStrategy>

public class ManuallyTrustedKeyVerificationStrategy
extends SshHostKeyVerificationStrategy

A host key verification strategy that works in a similar way to host key verification on Unix/Linux this host (depending on how this strategy has been configured), and manual verification if the key provided by the remote host differs from the one currently saved in as the known key for this host. This manual verification is achieved through adding a TrustHostKeyAction to the Computer the connection is being initiated for that can be actioned by a user with the appropriate permission to add a new key or replace an existing key in the known hosts database.

Since:

1.13

Author:

Michael Clarke

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	ManuallyTrustedKeyVerificationStrategy.ManuallyTrustedKeyVerificationStrategyDescriptor

Nested classes/interfaces inherited from class hudson.plugins.sshslaves.verifiers.SshHostKeyVerificationStrategy

SshHostKeyVerificationStrategy.SshHostKeyVerificationStrategyDescriptor

Constructor Summary

Constructors

Constructor and Description
ManuallyTrustedKeyVerificationStrategy(boolean requireInitialManualTrust)

Method Summary

Methods

Modifier and Type	Method and Description
String[]	getPreferredKeyAlgorithms(hudson.slaves.SlaveComputer computer) Provides a list of preferred key algorithms for this strategy and computer.
boolean	isRequireInitialManualTrust()
boolean	verify(hudson.slaves.SlaveComputer computer, HostKey hostKey, hudson.model.TaskListener listener) Check if the given key is valid for the host identifier.

Methods inherited from class hudson.plugins.sshslaves.verifiers.SshHostKeyVerificationStrategy

getDescriptor

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ManuallyTrustedKeyVerificationStrategy

@DataBoundConstructor
public ManuallyTrustedKeyVerificationStrategy(boolean requireInitialManualTrust)

Method Detail

isRequireInitialManualTrust

public boolean isRequireInitialManualTrust()

verify

public boolean verify(hudson.slaves.SlaveComputer computer,
             HostKey hostKey,
             hudson.model.TaskListener listener)
               throws IOException

Description copied from class: SshHostKeyVerificationStrategy

Check if the given key is valid for the host identifier.

Specified by:

verify in class SshHostKeyVerificationStrategy

Parameters:

computer - the computer this connection is being initiated for

hostKey - the key that was transmitted by the remote host for the current connection. This is the key that should be checked to see if we trust it by the current verifier.

listener - the connection listener to write any output log to

Returns:

whether the provided HostKey is trusted and the current connection can therefore continue.

Throws:

IOException

getPreferredKeyAlgorithms

public String[] getPreferredKeyAlgorithms(hudson.slaves.SlaveComputer computer)
                                   throws IOException

Description copied from class: SshHostKeyVerificationStrategy

Provides a list of preferred key algorithms for this strategy and computer.

Overrides:

getPreferredKeyAlgorithms in class SshHostKeyVerificationStrategy

Returns:

a list of algorithms; empty or null lists will be ignored

Throws:

IOException

See Also:

Connection.setServerHostKeyAlgorithms(java.lang.String[])