francoismichel / francoismichel/ssh3
Certs by SPIRE
Open
- Dominant language
- Go
- Stars
- 5k
- Forks
- 118
- PR merge metrics
- No merged PRs in 30d
Description
It would be really nice if the certificates for the servers could be fetched from SPIRE (https://github.com/spiffe/spire). This would allow things such as easily attesting the workload by hardware TPM and then giving access to a valid cert to ssh3.
Contributor guide
No contributing guide indexed for this repository
Research direction
No files or tests are named. Start by tracing how ssh3 servers currently obtain certificates, then review the linked SPIRE project and its workload-attestation flow. Done means servers can fetch a valid certificate from SPIRE after attestation and use it to provide access to ssh3.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100