admin 0fa7ea1da1 hub: wgsync fix — constrain HostKeyAlgorithms to the pinned key's type ...

Live S1 validation caught it: a stock multi-hostkey sshd presented ECDSA while
we pin ed25519 → FixedHostKey refused a legitimate server. Regression test with
an in-process dual-hostkey server (fails without the fix — red-proofed).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

2026-07-03 23:52:08 +02:00

..

client_test.go

hub: wgsync fix — constrain HostKeyAlgorithms to the pinned key's type

2026-07-03 23:52:08 +02:00

client.go

hub: wgsync fix — constrain HostKeyAlgorithms to the pinned key's type

2026-07-03 23:52:08 +02:00

reconciler_test.go

hub: S1 wgsync (pinned-SSH push + declarative reconciler) + /admin/wg API + env wiring

2026-07-03 23:40:22 +02:00

reconciler.go

hub: S1 wgsync (pinned-SSH push + declarative reconciler) + /admin/wg API + env wiring

2026-07-03 23:40:22 +02:00