Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SSH: Separate host CA from user CA #6

Open
edoput opened this issue Feb 16, 2017 · 1 comment
Open

SSH: Separate host CA from user CA #6

edoput opened this issue Feb 16, 2017 · 1 comment

Comments

@edoput
Copy link
Member

edoput commented Feb 16, 2017

We should really do this. The host CA can still be available to ansible but the user CA should not.

Moreover we should then separate them in the ansible playbook too
@cimbalo
Copy link
Contributor

cimbalo commented Mar 8, 2017

Since 42d2568 cas implementation have supported request type.
We can implement SSHHostAuthority and SSHUserAuthority that both inherit from SSHAuthority but only support respectively HostSSHRequest and UserSSHRequest request.

Take a look at compatible_requests attribute for ca [1].

[1] https://github.com/LILiK-117bis/ca_manager/blob/master/models/ssh.py#L71

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@edoput @cimbalo