Support CertificateFile

[beyondbill]

Our bastion host verifies certificate in addition to SSH key.For example, to establish a SSH tunnel to a private Postgres DB server via bastion, we'll run

ssh -N -o CertificateFile=~/.ssh/cert.pub -L 5432:pg.foo.com:5432 [email protected]

I'd love to see a certificate_file option in the tunnel data source. Certificate is supported in the underlying Go lib golang.org/x/crypto/ssh. I would appreciate an assessment on whether this feature is relatively easy to implement. If so, I can spend time working on it with some general directions from project owner(s).

[stefansundin]

Great suggestion. I haven't used CertificateFile before but I'm excited to try it.

[stefansundin]

I just added this and it seems to be working fine in my tests: 588a0a9

Do you want me to compile a binary for you to test with?

I'll probably release a new version this coming week.

[beyondbill]

@stefansundin Wow this is amazing! Thanks so much for quickly adding the feature! I should be able to compile a binary by myself if I still remember how to do so three years ago. Will let you know how it works once I test it. Looking forward to the new release!

[beyondbill]

Compiled and tested on my Mac. It worked as expected 🎊

[stefansundin]

Released in v0.0.4.