search

charmbracelet / soft-serve

The mighty, self-hostable Git server for the command line🍦
MIT License
5.42k stars 139 forks source link

Support ssh-certificates #393

Open tionis opened 1 year ago

tionis commented 1 year ago

Is your feature request related to a problem? Please describe. Some people or orgs manage their ssh keys using ssh-certificates

Describe the solution you'd like Allow the admin to specify ssh-keys that may sign ssh-certificates for users. Gitea for example allows using the emails/username of user to be used as principals to check requests. I suggest simply using the usernames as principals. Later it would also be awesome to allow users to specify their own cert-authority only for themselves and to use the principals to restrict keys only to some repos using the principals.

tionis commented 1 year ago

I've done some work with x/crypto/ssh and certificates before and would work on a PR for this if I end up using soft-serve. (Still evaluating)