openssh unix dev - Nov 2018 - Chain of trust

Hi,

Does OpenSSH support ssh certificate chain with trust anchored at the root cert?
From what I have read and experimented, it does not look so. But looking for a
confirmative answer from the experts.

Thanks
Manoj.

On 11/15/18 7:51 PM, Manoj Ampalam wrote:
> Does OpenSSH support ssh certificate chain with trust anchored at the
> root cert? From what I have read and experimented, it does not look
> so. But looking for a confirmative answer from the experts.
If you're asking about OpenSSH certs then look into:

https://github.com/openssh/openssh-portable/blob/master/PROTOCOL.certkeys

It says:

   "Chained" certificates, where the signature key type is a
certificate
   type itself are NOT supported.

Ciao, Michael.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3829 bytes
Desc: S/MIME Cryptographic Signature
URL:
<http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20181115/d46abd39/attachment.p7s>

Hello Manoj,

Manoj Ampalam wrote:
> Hi,
>
> Does OpenSSH support ssh certificate chain with trust anchored at the root
cert? From what I have read and experimented, it does not look so. But looking
for a confirmative answer from the experts.
Perhaps you would like to use this implementation 
http://roumenpetrov.info/secsh/ - with support of industrial standards.

Let me know if you need addition information in respective forum.

> Thanks
> Manoj.
Regards,
Roumen Petrov