Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ssh-ca-certificate ability #527

Closed
xundeenergie opened this issue Jul 25, 2019 · 4 comments
Closed

Add ssh-ca-certificate ability #527

xundeenergie opened this issue Jul 25, 2019 · 4 comments
Labels
A-auth Area: Connection and authentication C-feature Category: This is a feature request P-low Priority: low S-help-wanted Status: This issue could use external help with implementation
Milestone

Comments

@xundeenergie
Copy link

There is a some year old (relatively new) feature on openssh called "Certificates". (Look at https://framkant.org/2016/10/setting-up-a-ssh-certificate-authority-ca/)
This is a real cool feature and enhances ssh-security enormous.

What do i need for in Android-Password-Store?
I need the possibility to add a line in know_hosts file in format:

@cert-authority * ssh-rsa AAAAB3NzaC1yc2EAAAADAQABA

this is the public key from my own ssh-certification authority.
And i need to store the the certificate from my public key (generated with Password-Store, send to CA-Host, sign it, import certificate back) additionally to private and public key.

And Password-Store must support certificates for ssh althoug... ;-)

This is a real secure new feature. Please support it...

@msfjarvis msfjarvis added A-auth Area: Connection and authentication C-feature Category: This is a feature request P-low Priority: low labels Nov 5, 2020
@msfjarvis
Copy link
Member

SSHJ does not support this yet: hierynomus/sshj#281

@msfjarvis
Copy link
Member

hierynomus/sshj#703

Support for this is hopefully coming in the next release

@msfjarvis msfjarvis self-assigned this Nov 20, 2021
@msfjarvis msfjarvis added this to the v2.0.0 milestone Nov 20, 2021
@msfjarvis
Copy link
Member

SSHJ support for this feature is now available so I'll try to get it out over this weekend.

@msfjarvis msfjarvis removed their assignment Dec 2, 2021
@msfjarvis msfjarvis added S-help-wanted Status: This issue could use external help with implementation and removed S-blocked-on-upstream labels Dec 2, 2021
@msfjarvis
Copy link
Member

Closing as part of issue tracker cleanup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-auth Area: Connection and authentication C-feature Category: This is a feature request P-low Priority: low S-help-wanted Status: This issue could use external help with implementation
Projects
None yet
Development

No branches or pull requests

2 participants