signed ssh key

[badsmoke]

is there a possibility to store a signed ssh key, which should be in the same folder as the pub-key.

https://access.redhat.com/documentation/de-de/red_hat_enterprise_linux/6/html/deployment_guide/sec-creating_ssh_ca_certificate_signing-keys

the procedure is relativ unknown but still very useful, with it you can give different public keys temporally access to different devices

[badsmoke]

seems to be too unknown, too bad.

[gitwittidbit]

I would also like to use signed keys with semaphore. Is this possible?

[Ducky6944]

Would love to see this implemented. Current work around is using the current unsigned public keys on the remote and restricting access to the semaphore host ip in the authorized keys file. Rotating both when signed public key expires.

on remote target eg:

from="10.x.x.x" ssh-ed25519 somekey unsigned-pub