Show HN: A simple SSH CA service with only 150 lines of Python code

#1

Post by lgxz » Wed, Sep 30, 2020, 2:54 PM UTC

Show HN: A simple SSH CA service with only 150 lines of Python code
github.com

Re: Show HN: A simple SSH CA service with only 150 lines of Python code

#2

Post by qatanah » Wed, Sep 30, 2020, 6:01 PM UTC

By any chance did you get inspired from this thread?

https://news.ycombinator.com/item?id=24157180

Re: Show HN: A simple SSH CA service with only 150 lines of Python code

#3

Post by lgxz » Wed, Sep 30, 2020, 6:06 PM UTC

qatanah wrote: post #2

By any chance did you get inspired from this thread? https://news.ycombinator.com/item?id=24157180

No. I haven’t see that thread before. I have thought the problem for a long time and just got the idea(use ssh to sign keys automatically) three days ago.

Re: Show HN: A simple SSH CA service with only 150 lines of Python code

#4

Post by lgxz » Wed, Sep 30, 2020, 6:20 PM UTC

qatanah wrote: post #2

By any chance did you get inspired from this thread? https://news.ycombinator.com/item?id=24157180

I tried Paramiko firstly. But it turns out it’s much easier with asyncssh. Then I tried to implement with scp because it’s user friendly, just “scp ca-server:ops.pub ~/.ssh/id_ed25519-cert.pub”. I want to hook the “scp” request and generate the cert file dynamically. But there are some bugs now so I switch to ssh.