This has actually been a feature in OpenSSH since 5.4, see https://blog.habets.s... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

lwf on Jan 22, 2017 | parent | context | favorite | on: OpenSSH Keys: A Walkthrough

This has actually been a feature in OpenSSH since 5.4, see https://blog.habets.se/2011/07/OpenSSH-certificates.html or the CERTIFICATES section of `ssh-keygen(1)`.

yusyusyus on Jan 23, 2017 [–]

similarly, x.509 is supported in a variant[0] of OpenSSH. For certain kinds of devices, this may be preferable.

[0]http://roumenpetrov.info/secsh/

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact