OpenSSH PKI support coming soon

by on December 4, 2006 · 1 comment· LAST UPDATED December 4, 2006

in

This project looks very promising and will probably be useful even at small sites.

In cryptography, a public key infrastructure (PKI) is an arrangement that provides for trusted third party vetting of, and vouching for, user identities. It also allows binding of public keys to users. This is usually carried out by software at a central location together with other coordinated software at distributed locations. The public keys are typically in certificates.

Most enterprise-scale PKI systems rely on certificate chains to establish a party's identity, as a certificate may have been issued by a certificate authority computer whose 'legitimacy' is established for such purposes by a certificate issued by a higher-level certificate authority, and so on. You may have use PKI in everyday, common examples are:
=> OpenGPG - Encryption and/or sender authentication of Email messages
=> Smart card logon
=> XML Signature for Encryption and/or authentication of documents etc

OpenBSD journal reporting that Daniel Hartmeier recently submitted to the OpenBSD tech mailing list a very interesting addition to OpenSSH, a PKI whose goal is to simplify host and user key administration.

( Via OpenBSD journal )



If you would like to be kept up to date with our posts, you can follow us on Twitter, Facebook, Google+, or even by subscribing to our RSS Feed.


{ 1 comment… read it below or add one }

1 Mark Seaborn February 9, 2007 at 3:30 pm

When is the target date to release openSSH with PKI support. I would be very interested in trying it out.

Reply

Leave a Comment

You can use these HTML tags and attributes for your code and commands: <strong> <em> <ol> <li> <u> <ul> <blockquote> <pre> <a href="" title="">
What is 8 + 2 ?
Please leave these two fields as-is:
Solve the simple math so we know that you are a human and not a bot.

Previous post:

Next post: