Bug #6601

[API] Do not accept an empty SSH key as valid

Added by Brett Smith almost 4 years ago. Updated almost 4 years ago.

Status:
New
Priority:
Normal
Assigned To:
-
Category:
API
Target version:
Start date:
07/13/2015
Due date:
% Done:

0%

Estimated time:
Story points:
0.5

Description

When a user creates a new AuthorizedKey, the API server validates that the key represents real key material, to help avoid problems where a typo or mis-paste prevents the key from working.

The validation currently allows an empty public key as valid. This should be prohibited: it makes no more sense than having a malformed public key.

Also available in: Atom PDF