aakso / ssh-inscribe

SSH CA Client/Server
Apache License 2.0
56 stars 11 forks source link

feat: handle multiple cert versions #12

Closed aakso closed 2 years ago

aakso commented 2 years ago

This patch improves the UX when dealing with ssh servers from different eras. Some might not support ed25519, some might require sha2 signatures.

User can request multiple different certificates by using --keytype and --signing-option arguments. To overcome some servers not allowing more than a few auth attempts, a filtering agent is introduced for exec and ssh subcommands.