Hidden LeaseSet for SSH tunnel

[spencermp]

Are there any docs on using encrypted lease sets for a private SSH tunnel with i2pd?
There are some nice tutorials for the Java router but the documentation seems lacking on the i2pd front.

I currently have a configuration that looks like this:

# server config on host computer
[ssh-serv]
type = server
host = 127.0.0.1
port = 22
inbound.length = 1
outbound.length = 1
signaturetype = 11
i2cp.leaseSetType = 5
keys = ssh-server.dat

# client config on guest computer
type = client
host = 127.0.0.1
port = 1337
inbound.length = 1
outbound.length = 1
i2cp.dontPublishLeaseSet = true
destination = <b33 address from server's i2pd web>
keys = ssh-client.dat

If I try to connect I get the following result. I have confirmed that direct ssh works, so this is purely an I2P thing.

$ ssh -p 1337 [email protected]
kex_exchange_identification: read: Connection reset by peer
Connection reset by 127.0.0.1 port 1337

Any help is greatly appreciated, and thank you.

[spencermp]

I've figured it out.
The one line I was missing

i2cp.leaseSetPrivKey = <some b64 string>

So the full config is now

# server config on host computer
[ssh-serv]
type = server
host = 127.0.0.1
port = 22
inbound.length = 1
outbound.length = 1
signaturetype = 11
i2cp.leaseSetType = 5
# decodes to "private key example"
i2cp.leaseSetPrivKey = cHJpdmF0ZSBrZXkgZXhhbXBsZQo=
keys = ssh-server.dat

# client config on guest computer
type = client
host = 127.0.0.1
port = 1337
inbound.length = 1
outbound.length = 1
i2cp.dontPublishLeaseSet = true
i2cp.leaseSetPrivKey = cHJpdmF0ZSBrZXkgZXhhbXBsZQo=
destination = <b33 address from server's i2pd web>
keys = ssh-client.dat