francoismichel / francoismichel/ssh3

Certs by SPIRE

Open
#115 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
5k
Forks
118
PR merge metrics
No merged PRs in 30d

Description

It would be really nice if the certificates for the servers could be fetched from SPIRE (https://github.com/spiffe/spire). This would allow things such as easily attesting the workload by hardware TPM and then giving access to a valid cert to ssh3.

Contributor guide

No contributing guide indexed for this repository

Research direction

No files or tests are named. Start by tracing how ssh3 servers currently obtain certificates, then review the linked SPIRE project and its workload-attestation flow. Done means servers can fetch a valid certificate from SPIRE after attestation and use it to provide access to ssh3.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.