Displaying 1 result from an estimated 1 matches for "certificatecommand".
2023 Mar 06
1
Feature request: a good way to supply short-lived certificates to openssh
...That is, very poorly indeed.)
So my feature request: a way to do this for real. Here are a couple of ideas:
PreAuthCommand: runs a command before reading any files associated with authentication. (This especially means that the command runs, and completes, before opening the CertificateFile.)
CertificateCommand: runs a command that outputs a certificate or perhaps just a CertificateFile directive.
I'm sure there are more ways to make this better, hence this feature request.
Thanks,
Andy