akamai / akamai/NetStorageKit-Node

September (was May) 2024 NetStorage SSH Upgrade

Open
#26 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
JavaScript
Stars
18
Forks
14
PR merge metrics
No merged PRs in 30d

Description

Hello,

Can someone confirm if this module is still going to work following the ongoing Akamai SSH upgrade?

https://community.akamai.com/customers/s/article/May-2024-NetStorage-SSH-Upgrade

Excerpt:

Dear Customer,

As part of continuous effort to comply with security guidelines and to harden our product security, the Akamai NetStorage ObjectStore platform will be removing support for older, weaker key signing algorithms from the SSH upload services. Once removed, SSH-based clients that do not support newer key-signing algorithms will fail to connect to NetStorage.
Details
As part of Akamai’s ongoing process for ensuring platform security, support for known weak key signing algorithms on NetStorage will be removed from SSH-based upload services (SSH, SCP, SFTP, RSYNC/SSH, Aspera).

We are upgrading the SSH version on the server side, which will disable all algorithms which use SHA1, including the signature algorithm ssh-rsa-sha1, originally the only signature algorithm used by ssh-rsa keys. RFC 8332 defined a mechanism by which ssh-rsa keys can negotiate the signature algorithm used, allowing users with ssh-rsa keys to use ssh-rsa-sha2-256 or ssh-rsa-sha2-512.
Next Steps

If you are using any of the following SSH-based clients you must upgrade to a version that is equal or newer to the one listed below:
• OpenSSH >= 7.2
• Putty >= .79
• libssh2 >= 1.11
• Aspera Desktop Client >= 4.4.3
If you are not using any of these clients, no action is required.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the Node module and its SSH-related dependencies, then compare their supported algorithms with Akamai's stated requirements for OpenSSH, libssh2, and related clients. A useful outcome would be a confirmed compatibility result and, if needed, a clearly documented upgrade or change request.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, nodejs
Domain
backend, networking
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.