x/crypto/ssh/agent: honor constraints on keys in the keyring.

If a key is added to an agent keyring with constraints, honor them.
This will remove keys when they've been on the keyring for
LifetimeSecs seconds or longer and will ask the user to confirm a
signing operation if ConfirmBeforeUse is set.

Change-Id: I633713c5f78b13a628a5d752f11b306b6e16a2ef
Reviewed-on: https://go-review.googlesource.com/28956
Reviewed-by: Han-Wen Nienhuys <hanwen@google.com>
Run-TryBot: Han-Wen Nienhuys <hanwen@google.com>
TryBot-Result: Gobot Gobot <gobot@golang.org>

This commit is contained in:

Peter Moody

2016-09-22 17:06:29 +00:00

committed by

Han-Wen Nienhuys

parent 6ab629be5e

commit 8e06e8ddd9

3 changed files with 63 additions and 18 deletions

									
										ssh/agent/keyring_test.go
									
		+1
		-3
	
												View File
												
				@@ -4,9 +4,7 @@

				package agent

				import (

					"testing"

				)

				import "testing"

				func addTestKey(t *testing.T, a Agent, keyName string) {

					err := a.Add(AddedKey{