Displaying 5 results from an estimated 5 matches for "geecert".
Did you mean:
geecee
2017 Feb 01
2
ssh-agent check for new fresh certificate (and key)? worthwhile doing?
...tool
which does SSO with Google Apps, then generates a new SSH key pair,
and sends this off to an internal service which verifies the request
and then issues a new short lived (24 hour) certificate (if interested
the code for the server and client is open-sourced here:
https://github.com/continusec/geecert), overwriting the previous
certificate and private key.
Some of our users like to use SSH agent forwarding, and while this
generally works fine, when our users run their daily command to get a
new certificate, their ssh-agent still holds the old one.
Would it be reasonable to write a patch to ssh...
2017 Feb 01
2
ssh-agent check for new fresh certificate (and key)? worthwhile doing?
...n Thu, Feb 2, 2017 at 1:16 AM, Peter Moody <mindrot at hda3.com> wrote:
> why not add the certificate to the running ssh-agent with a timeout
> that expires when the cert does?
That's an excellent idea. I've modified our tooling to do exactly that
(https://github.com/continusec/geecert/commit/dfeee14b278e28d15bf532bb6e6e8ffe530e6b11).
Thank you for the suggestion.
> I don't think ssh-agent exposes a "how long until this key expires"
> api, but you can at least use this method to see if the cert/key are
> *on* the agent and you can assume that if they'...
2017 Dec 25
3
OpenSSH key signing service?
> (Blargh is right (https://blog.habets.se/2011/07/OpenSSH-certificates.html <https://blog.habets.se/2011/07/OpenSSH-certificates.html>). Googling for this stuff is *hard*:)
Does https://www.sweharris.org/post/2016-10-30-ssh-certs/ help at all?
Stephen
2017 May 03
2
OpenSSH contract development / patch
Hi OpenSSH developers;
Thank you for your amazing work.
I?m emailing to see if any knowledgeable OpenSSH developer is willing to help us review / revamp some patches we have for OpenSSH, and provide advice on some of the more advanced uses of OpenSSH. This would be a for pay contract engagement. We are trying to be super respectful of the process, and are happy to be very creative ? we are
2017 Feb 02
2
ssh-agent check for new fresh certificate (and key)? worthwhile doing?
Damien Miller wrote:
> On Thu, 2 Feb 2017, Adam Eijdenberg wrote:
>
>> On Thu, Feb 2, 2017 at 10:42 AM Damien Miller <djm at mindrot.org> wrote:
>>> On Thu, 2 Feb 2017, Adam Eijdenberg wrote:
>>>> I guess a case could be made for ssh-add to always set a timeout when
>>>> adding a certificate with an expiry time, but I think for now I'm