ssh-cert-authority
ssh-cert-authority copied to clipboard
An implementation of an SSH certificate authority.
I'm unable to sign requests as ssh-cert-authority doesn't seem to be able to find the keys that are stored in ssh-agent. # Steps to reproduce ## Server Generating CA key:...
I was trying to build the current master branch as per https://github.com/cloudtools/ssh-cert-authority/blob/master/BUILDING.rst. After executing ... ``` docker run \ -v `pwd`:/build/ssh-cert-authority/go/src/github.com/cloudtools/ssh-cert-authority \ -t cloudtools/ssh-cert-authority-buildenv \ bash build.sh ``` ... the...
Using ssh-cert-authority version 2.0.0-6-g59dae40 built with go version go1.17 linux/amd64 when I run `ssh-cert-authority request -e production -r "Testing" -p vendion -c /home/vendion/.config/ssh_ca/requester_config.json` it errors out with the following error:...
Create a wrapper for SSH Agent Signing to allow using more secure signing algorithms. The default RSA-SHA1 is obsolete and will no longer work with OpenSSH 8.2. This fixes issue...
OpenSSH 8.2 has deprecated rsa-sha signatures in certificates. If you try to use an SSH Certificate to login to a system upgraded to 8.2 that was previously working, you will...
Hey, thank you for your project. I think your project could hit a sweet spot for me/us between manually signing keys and setting up a complete vault. But I'm still...
Would it be possible to support SHA256 fingerprints in the config? The latest Ubuntu LTS release defaults to SHA256 fingerprints. I realize that I can list the MD5 fingerprint, but...
I'd like to add a feature to make sure a requester can't request a cert for a Principal that has a different user's name (e.g. if Alice is an AuthorizedRequester,...
Flag fix
Seems `-c` isn't universally valid as a short form for `--config-file`; I've added it to "get" and "runserver."
Support a wildcard AuthorizedUser and a wildcard AuthorizedSigner