News for hackers. Stuff that matters.

A comment on Why aren’t we using SSH for everything? (2015). Parent comment

Re:Why aren’t we using SSH for everything? (2015) by nemoniac on Monday April 18, 2016 @07:54AM (#11519165)
If that's the case, how can I plug the HTTP/2 and TLS 1.3 stack into Linux-PAM and use it to login to my remote servers instead of using ssh?

Or are they not suitable for that?

[ Parent | on HN ]
Re:Why aren’t we using SSH for everything? (2015) by e12e on Monday April 18, 2016 @10:01AM (#11519899)
You could wrap TLS around telnetd (bound to localhost, with a TLS terminator in front) pretty trivially. I'm not sure I'd recommend it, but you certainly could. You could then login with openssl s_client.

Integration to the PAM-stack would be a little more complicated, but there are some tools for working with certificates[eg: 1]. I'm not aware of any that is designed to work for console-like login remotely, though.

[1] http://www.ftsafe.com/application/signon/linuxpampkcs11/

[ Parent | on HN ]