Displaying 2 results from an estimated 2 matches for "x509h".
Did you mean:
  x509
  
2008 Feb 20
4
OpenSSH and X.509 Certificate Support
Hi,
I need to add X.509 Certificate support to OpenSSH.
I came across the following post on the openssh-unix-dev mailing list 
that is very useful:
http://marc.info/?l=openssh-unix-dev&m=120298135706959&w=2 
<http://marc.info/?l=openssh-unix-dev&m=120298135706959&w=2>
And also, http://marc.info/?l=openssh-unix-dev&m=104395024824680&w=2 
2008 Mar 13
0
[Fwd: Re: OpenSSH and X.509 Certificate Support]
...which could look something like this:
x509v3-sign-rsa subject= 
/C=FR/ST=PARIS/L=DESEl/O=SSL/OU=VLSI/CN=10.244.82.83/emailAddress=client at company.com
This is extracted from the client certificate using openssl as described 
in the README file provided by you at 
http://roumenpetrov.info/openssh/x509h/README.x509v3
This system works fine, however my only concern is that I would like all 
Clients (possessing a valid Client-Certifcates signed by the CA) to be 
authenticated without having to place anything in the 
~/.ssh/authorized_keys file on the server.(i.e authenticate all users if 
they have...