Show HN: A simple SSH CA service with only 150 lines of Python code

Posted by lgxz on Wednesday September 30, 2020 @10:54AM
from the show-hn dept.

( 3 comments | 8 points | on HN )

Re:Show HN: A simple SSH CA service with only 150 lines of P... by qatanah on Wednesday September 30, 2020 @02:01PM (#24641604)

By any chance did you get inspired from this thread?

https://news.ycombinator.com/item?id=24157180

[ Parent | on HN ]

Re:Show HN: A simple SSH CA service with only 150 lines of P... by lgxz on Wednesday September 30, 2020 @02:20PM (#24641834)

I tried Paramiko firstly. But it turns out it’s much easier with asyncssh. Then I tried to implement with scp because it’s user friendly, just “scp ca-server:ops.pub ~/.ssh/id_ed25519-cert.pub”. I want to hook the “scp” request and generate the cert file dynamically. But there are some bugs now so I switch to ssh.

[ Parent | on HN ]

Re:Show HN: A simple SSH CA service with only 150 lines of P... by lgxz on Wednesday September 30, 2020 @02:06PM (#24641665)

No. I haven’t see that thread before. I have thought the problem for a long time and just got the idea(use ssh to sign keys automatically) three days ago.

[ Parent | on HN ]