x509   528

« earlier    

cloudflare/cfssl: CFSSL: Cloudflare's PKI and TLS toolkit
GitHub is where people build software. More than 28 million people use GitHub to discover, fork, and contribute to over 85 million projects.
go  golang  san  certificate  subject  alternate  sign  tool  pki  ssl  security  tls  cloudflare  ca  x509  devops 
8 weeks ago by vonc
CAC Card, PIV Card, PKI Authentication for SSH | SSH.COM
Tectia SSH supports PKI authentication as well as the use of certificates on hardware security tokens and smartcards, such as CAC. Using Tectia SSH with CAC requires no patching or additional components. CAC is supported out-of-the-box.
ssh  pki  x509  cots 
april 2018 by bwiese
public key infrastructure - How to set up OpenSSH to use x509 PKI for authentication? - Information Security Stack Exchange
I do not mean simply putting the public RSA key of a x.509 certificate into ~/.ssh/authorized_keys - I'm looking for a way to set up a ssh such that x.509 certificates signed by a pre-defined CA will automatically be granted access to the linked user account. RFC 6187 seems to suggest such a functionality, but I can't find any documentation on this, or whether it is implemented in OpenSSH at all.
ssh  pki  x509 
april 2018 by bwiese
Roumen Petrov - secure shell(ssh) page
secure shell with
X.509 v3 certificate support
ssh  pki  x509 
april 2018 by bwiese

« earlier    

related tags

acl  acme  alternate  android  api  app  asn  asn1  asp.net  asymmetrical  auth  authentication  authority  authorization  automated  awslabs  azure  backup  bouncycastle  c++  c  ca  cacert  centos  cert  certificate+authority  certificate  certificate_authority  certificate_transparency  certificates  certification  certlint  certs  cloud  cloudflare  code  codesigning  codesnippet  conversion  cots  crypto  cryptography  csr  cybersecurity  debian  debug  debugging  der  development  devops  distributed  distribution  docs  documentation  domain  email  encoding  encrypted  encryption  equivalence  expiration  fedora  file  fileextension  filesystem  floss  fs  fuckina  funneelback  fuse  generation  gmail  gnug  gnuk  gnupg  go  golang  google  gpg  guide  hashicorp  howto  http  identity  ietf  infosec  internal  ios  iot  iothub  is:repo  java  javascript  js  key  keys  keyusage  lang:go  lang:rust  letsencrypt  library  linux  lists  local  maintenance  microservices  microsoft  mobile  multiple  native  netsec  network  nfc  niap  node  nodejs  notification  number  ocsp  online  opensource  openssl  openvpn  overview  parser  pdf  peap  pem  personal  pgp  piv  pkcs  pkcs12  pki  pkix  powershell  privacy  private  programming  protocol  public  python  rapid  reference  rfc  rsa  san  sdk  security  selfsigned  serial  service  sign  signature  signtool  single  slack  smartcard  smime  snort  solution  sortof  specs  spiffe  spring  springboot  ssh  ssl  storage  store  structure  subject  sysadmin  tls  tomcat  tool  tutorial  validation  vault  visualstudiocode  vpn  webdevel  webmaster  windows  wireless  yubikey 

Copy this bookmark: