Re:SSH3: SSHv2 using HTTP/3 and QUIC
by vetinari on Saturday December 16, 2023 @04:38PM
(#38667953)
Did you follow the link? The point was exactly setting up X.509 PKI for SSH authentication. Yes, it can be used with SSH, that was the GP's point.
[ Parent
| on HN ]
The link talks about setting up a ssh ca, not x509?
> For our part, the most recent release of step & step-ca (v0.12.0) adds basic SSH certificate support. In other words:
> step-ca is now an SSH CA (in addition to being an X.509 CA)
> step makes it easy for users and hosts to get certificates from step-ca
It's a tool that do x509 ca for x509 things and ssh ca for ssh.
I’m replying to parent not the overall post.
Re:SSH3: SSHv2 using HTTP/3 and QUIC
by whatisyour on Saturday December 16, 2023 @04:44PM
(#38668013)
you can disable X.509 for SSH