Re: Benefit of User certificates?

Path	csiph.com!x330-a1.tempe.blueboxinc.net!newsfeed.hal-mli.net!feeder1.hal-mli.net!nx02.iad01.newshosting.com!newshosting.com!69.16.185.21.MISMATCH!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe16.iad.POSTED!b20e9f34!not-for-mail
From	Richard E. Silverman <res@qoxp.net>
Newsgroups	comp.security.ssh
Subject	Re: Benefit of User certificates?
References	<ivi774$h3m$1@online.de>
Message-ID	<m2pqlen84j.fsf@darwin.oankali.net> (permalink)
User-Agent	Gnus/5.13 (Gnus v5.13) Emacs/23.3 (darwin)
Cancel-Lock	sha1:ocSEe8dkQsCyt7UWwj5VGdBs4WA=
MIME-Version	1.0
Content-Type	text/plain; charset=us-ascii
Lines	17
X-Complaints-To	abuse@thundernews.com
NNTP-Posting-Date	Wed, 13 Jul 2011 03:59:24 UTC
Organization	Thundernews
Date	Tue, 12 Jul 2011 23:59:24 -0400
Xref	x330-a1.tempe.blueboxinc.net comp.security.ssh:138

Show key headers only | View raw

Oliver <oliver@anonsphere.com> writes:

> Hi,
>
> is there any benefit so far in using user certificates? If I send a
> private key with a certificate to a user, maybe with restrictions or a
> certain validity time. The user reconstructs the public key with
>
> ssh-keygen -f ca_rsa -y
>
> Now he is able to create a certificates without any restrictions. So
> what is this feature for?

That public key will not be signed by the CA, and hence not trusted by
the server.

- Richard

Back to comp.security.ssh | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Benefit of User certificates? Oliver <oliver@anonsphere.com> - 2011-07-12 21:24 +0200
  Re: Benefit of User certificates? Richard E. Silverman <res@qoxp.net> - 2011-07-12 23:59 -0400
    Re: Benefit of User certificates? Oliver <oliver@anonsphere.com> - 2011-07-13 15:47 +0200
      Re: Benefit of User certificates? Richard E. Silverman <res@qoxp.net> - 2011-07-13 11:45 -0400
        Re: Benefit of User certificates? Oliver <oliver@anonsphere.com> - 2011-07-13 21:52 +0200

csiph-web