warp-tech / warpgate

Smart SSH, HTTPS and MySQL bastion that requires no additional client-side software
Apache License 2.0
3.78k stars 117 forks source link

Add support for SSH certificates #26

Open adontz opened 2 years ago

adontz commented 2 years ago

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/sec-using_openssh_certificate_authentication https://smallstep.com/blog/use-ssh-certificates/ https://www.vaultproject.io/docs/secrets/ssh/signed-ssh-certificates

kzshantonu commented 1 year ago

+1

aderumier commented 1 year ago

+1 for this,

it can be used with smallstep step-ca, to generate ssh certificate with oidc .

https://smallstep.com/blog/diy-single-sign-on-for-ssh/

csudderth commented 1 week ago

Would love to +1 this. Support for Warp to use a short lived SSH cert as opposed to distributing its SSH keys would be huge.