| | |
| | | import java.text.MessageFormat; |
| | | import java.util.concurrent.atomic.AtomicBoolean; |
| | | |
| | | import org.apache.sshd.SshServer; |
| | | import org.apache.sshd.common.io.IoServiceFactoryFactory; |
| | | import org.apache.sshd.common.io.mina.MinaServiceFactoryFactory; |
| | | import org.apache.sshd.common.io.nio2.Nio2ServiceFactoryFactory; |
| | | import org.apache.sshd.common.keyprovider.FileKeyPairProvider; |
| | | import org.apache.sshd.common.util.SecurityUtils; |
| | | import org.apache.sshd.server.SshServer; |
| | | import org.apache.sshd.server.auth.CachingPublicKeyAuthenticator; |
| | | import org.bouncycastle.openssl.PEMWriter; |
| | | import org.eclipse.jgit.internal.JGitText; |
| | |
| | | |
| | | // Ensure that Bouncy Castle is our JCE provider |
| | | SecurityUtils.setRegisterBouncyCastle(true); |
| | | if (SecurityUtils.isBouncyCastleRegistered()) { |
| | | log.debug("BouncyCastle is registered as a JCE provider"); |
| | | } |
| | | |
| | | // Generate host RSA and DSA keypairs and create the host keypair provider |
| | | File rsaKeyStore = new File(gitblit.getBaseFolder(), "ssh-rsa-hostkey.pem"); |
| | |
| | | sshd.setKeyPairProvider(hostKeyPairProvider); |
| | | sshd.setPublickeyAuthenticator(new CachingPublicKeyAuthenticator(keyAuthenticator)); |
| | | sshd.setPasswordAuthenticator(new UsernamePasswordAuthenticator(gitblit)); |
| | | if (settings.getBoolean(Keys.git.sshWithKrb5, false)) { |
| | | sshd.setGSSAuthenticator(new SshKrbAuthenticator(settings, gitblit)); |
| | | } |
| | | sshd.setSessionFactory(new SshServerSessionFactory()); |
| | | sshd.setFileSystemFactory(new DisabledFilesystemFactory()); |
| | | sshd.setTcpipForwardingFilter(new NonForwardingFilter()); |
| | |
| | | } |
| | | |
| | | public String formatUrl(String gituser, String servername, String repository) { |
| | | if (sshd.getPort() == DEFAULT_PORT) { |
| | | IStoredSettings settings = gitblit.getSettings(); |
| | | |
| | | int port = sshd.getPort(); |
| | | int displayPort = settings.getInteger(Keys.git.sshAdvertisedPort, port); |
| | | String displayServername = settings.getString(Keys.git.sshAdvertisedHost, ""); |
| | | if(displayServername.isEmpty()) { |
| | | displayServername = servername; |
| | | } |
| | | if (displayPort == DEFAULT_PORT) { |
| | | // standard port |
| | | return MessageFormat.format("ssh://{0}@{1}/{2}", gituser, servername, |
| | | return MessageFormat.format("ssh://{0}@{1}/{2}", gituser, displayServername, |
| | | repository); |
| | | } else { |
| | | // non-standard port |
| | | return MessageFormat.format("ssh://{0}@{1}:{2,number,0}/{3}", |
| | | gituser, servername, sshd.getPort(), repository); |
| | | gituser, displayServername, displayPort, repository); |
| | | } |
| | | } |
| | | |
| | |
| | | try { |
| | | ((SshCommandFactory) sshd.getCommandFactory()).stop(); |
| | | sshd.stop(); |
| | | } catch (InterruptedException e) { |
| | | } catch (IOException e) { |
| | | log.error("SSH Daemon stop interrupted", e); |
| | | } |
| | | } |