Feature consideration: OpenSSH Certificate Authority extension

cloudflare / cfssl

CFSSL: Cloudflare's PKI and TLS toolkit

https://cfssl.org/

BSD 2-Clause "Simplified" License

8.68k stars 1.1k forks source link

Feature consideration: OpenSSH Certificate Authority extension #890

Open cannadayr opened 6 years ago

cannadayr commented 6 years ago

I really like cfssl, and i find myself wanting something similar for running an openssh certificate authority. The private key format is the same, but the public key format is incompatible. ssh-keygen can be used to produce a valid openssh public key from a cfssl private key. However, the openssh CA portion is incompatible with x509.

I was curious if there was any project interest in evaluating this as a possibility, or if it was outside of current scope.

crrodriguez commented 5 months ago

Did you ever found a reasonable/useable open source solution to this problem ?

cannadayr commented 5 months ago

I did not, but I have not been looking. If you find anything please let me know!