News for hackers. Stuff that matters.

A comment on Ask HN: How do you manage SSH keys and SSL certificates in your company?. Parent comment

Re:Ask HN: How do you manage SSH keys and SSL certificates i... by true_tuna on Friday May 12, 2017 @04:51PM (#14327815)
You have to build a new ssh CA for each class of server. There's no mechanism for granting access by host name. This becomes unmanageable fast.
[ Parent | on HN ]
Re:Ask HN: How do you manage SSH keys and SSL certificates i... by blue6249 on Saturday May 13, 2017 @07:32PM (#14333511)
You can represent that pretty easily with principals. Just make sure that each host has itself listed as a principal and generate keys that contain that same string. It's pretty common to have a set of increasingly general principals (I.e. Hostname, cluster, tier, root@everywhere).
[ Parent | on HN ]