@@ -0,0 +1,26 @@
+// Copyright 2021 The Gitea Authors. All rights reserved.
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.

@@ -0,0 +1 @@
+agent_linux.go

@@ -239,6 +248,13 @@ func (c *Client) doRequest(method, path string, header http.Header, body io.Read
 		req.Header[k] = v
 	}
 
+	if c.httpsigner != nil {

@@ -113,2 +113,4 @@
 }
 
+// UseSSHCert is an option for NewClient to enable SSH certificate authentication via HTTPSign
+func UseSSHCert() func(client *Client) {

@@ -70,2 +70,4 @@
 		return nil, err
 	}
+	// we need version 1.17.0 or higher to support the new API
+	if err := client.checkServerVersionGreaterThanOrEqual(version1_17_0); err != nil {

@@ -115,0 +125,4 @@
+		if client.httpsigner.Signer == nil {
+			return fmt.Errorf("invalid fingerprint or ssh key")
+		}
+		client.mutex.Unlock()

@@ -115,0 +142,4 @@
+		if client.httpsigner.Signer == nil {
+			return fmt.Errorf("invalid fingerprint or ssh key")
+		}
+		client.mutex.Unlock()

@@ -0,0 +59,4 @@
+	var signer ssh.Signer
+
+	if config.sshKey != "" {
+		priv, err := ioutil.ReadFile(config.sshKey)

@@ -0,0 +70,4 @@
+		}
+
+		if config.cert {
+			certbytes, err := ioutil.ReadFile(config.sshKey + "-cert.pub")

@@ -0,0 +90,4 @@
+				return nil
+			}
+		}
+	} else {

@@ -0,0 +151,4 @@
+			return fmt.Errorf("getBody() failed: %s", err)
+		}
+
+		contents, err = ioutil.ReadAll(body)

@@ -0,0 +61,4 @@
+
+	if config.sshKey != "" {
+		priv, err := os.ReadFile(config.sshKey)
+		if err != nil {

@@ -0,0 +142,4 @@
+			r.Header.Add("x-ssh-certificate", certString)
+
+			headersToSign = append(headersToSign, "x-ssh-certificate")
+		}