cfssl
cfssl copied to clipboard
Feature consideration: OpenSSH Certificate Authority extension
I really like cfssl, and i find myself wanting something similar for running an openssh certificate authority. The private key format is the same, but the public key format is incompatible. ssh-keygen can be used to produce a valid openssh public key from a cfssl private key. However, the openssh CA portion is incompatible with x509.
I was curious if there was any project interest in evaluating this as a possibility, or if it was outside of current scope.
Did you ever found a reasonable/useable open source solution to this problem ?
I did not, but I have not been looking. If you find anything please let me know!