https://github.com/markuman/hausschrat
the simplest ssh ca
https://github.com/markuman/hausschrat
Last synced: 8 months ago
JSON representation
the simplest ssh ca
- Host: GitHub
- URL: https://github.com/markuman/hausschrat
- Owner: markuman
- Created: 2020-11-24T15:26:24.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2020-11-30T18:55:32.000Z (over 5 years ago)
- Last Synced: 2025-03-12T09:44:42.326Z (over 1 year ago)
- Language: Python
- Homepage: https://hausschrat.eu
- Size: 80.1 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# hausschrat
The simplest SSH CA I can think of.
# design
Nowadays it's wide spread to save your public ssh keys in SCM Tools like GitLab, Gitea, Github etc.
So why not use this source for your SSH CA?
Most companies self-hosted a SCM Tool already and possible also bind it to a directory. When the linux server are also bind to the same directory - awesome. That are perfect conditions, because you even don't need to orchestrate the users to all your servers.
You only need to glue things together. Here comes _hausschrat_ to play.
A user needs to create an access token in their SCM Tool with `read_user` permissions only. With this access token, _hausschrat_ can verify the user, fetch the users belonging public key, sign them and response with the certificate.
# Documentation
Take a look at `docs/src/` folder or read it online: `https://hausschrat.eu`
# CLI - request a certificate
Users just needs a `~/.config/hausschrat.yml` file.
```yml
default:
server: http://localhost:8080 # hausschrat backend
scm_url: https://git.osuv.de
api_token: ... # go to your scm tool and create a `read_user` access token.
user: m
key: markus@dell
expire: +5h
cert_file: ~/.ssh/test-cert.pub
```
```shell
$ hausschrat
start issuing certificate for default
done
```
# SCM
Contributions and issues are welcome on github.com or gitlab.com
| **host** | **category** |
| --- | --- |
| https://git.osuv.de/m/hausschrat | origin |
| https://gitlab.com/markuman/hausschrat | pull mirror |
| https://github.com/markuman/hausschrat | push mirror |