Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.security.ssh > #142

Re: Benefit of User certificates?

From Oliver <oliver@anonsphere.com>
Newsgroups comp.security.ssh
Subject Re: Benefit of User certificates?
Date 2011-07-13 15:47 +0200
Organization 1&1 Internet AG
Message-ID <ivk7r8$o4k$1@online.de> (permalink)
References <ivi774$h3m$1@online.de> <m2pqlen84j.fsf@darwin.oankali.net>

Show all headers | View raw


Am 13.07.2011 05:59, schrieb Richard E. Silverman:
> That public key will not be signed by the CA, and hence not trusted by
> the server.
> 
> - Richard

Are you?

$ ls -lah | grep ca_
-rw-------  1 oliver oliver 3,2K 2011-07-10 15:32 ca_rsa
-rw-r--r--  1 oliver oliver  750 2011-07-13 15:40 ca_rsa.pub

$ ssh -i ca_rsa guest@localhost
Permission denied (publickey).

$ ssh-keygen -s ca_rsa -I guest -n guest ca_rsa.pub
Signed user key ca_rsa-cert.pub: id "guest" serial 0 for guest valid forever

$ ssh -i ca_rsa guest@localhost
Last login: Sun Jul 10 21:35:05 2011 from oliver-virtualbox
guest@oliver-VirtualBox:~$

$ mv ca_rsa.pub ca_rsa.pub.original
$ rm ca_rsa-cert.pub

$ ssh-keygen -f ca_rsa -y > ca_rsa.pub

$ ssh-keygen -s ca_rsa -I guest -n guest ca_rsa.pub
Signed user key ca_rsa-cert.pub: id "guest" serial 0 for guest valid forever

$ ssh -i ca_rsa guest@localhost
Last login: Wed Jul 13 15:45:28 2011 from oliver-virtualbox
guest@oliver-VirtualBox:~$

Back to comp.security.ssh | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

Benefit of User certificates? Oliver <oliver@anonsphere.com> - 2011-07-12 21:24 +0200
  Re: Benefit of User certificates? Richard E. Silverman <res@qoxp.net> - 2011-07-12 23:59 -0400
    Re: Benefit of User certificates? Oliver <oliver@anonsphere.com> - 2011-07-13 15:47 +0200
      Re: Benefit of User certificates? Richard E. Silverman <res@qoxp.net> - 2011-07-13 11:45 -0400
        Re: Benefit of User certificates? Oliver <oliver@anonsphere.com> - 2011-07-13 21:52 +0200

csiph-web