Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function

Using a Yubikey for SSH Authentication on Windows Seamlessly

CURSE is an SSH certificate signing server, built as an alternative to Netflix's BLESS tool, but without a dependency on AWS.

Short term certificate based identity system (ssh/x509 ca + openidc)

Certonid is a Serverless SSH Certificate Authority

An SSH agent for hardware backed keys on Windows

An SSHCA that uses a standard Yubikey to issue new host and user certificates.

Generate self-signed SAN CA Domain Name (TLS v3). For fast generate development and test certificates, internal platform authorization and private DevOps platform build.

Automatically use HashiCorp Vault SSH Client Key Signing with ssh(1)

A crate for reading, parsing, verifying, and generating OpenSSH certificates and keys.

Common Lisp library for encoding and decoding RFC 4251 compliant data

Example of using SSH certificates in connection with Vault

X509 and SSH Certificate Authority

Simple authentication toolkit for works with Yubikey

Zen Trust is a self-hosted SSH certificate authority, providing short-lived certificates for users and hosts.

sshmux frontend (ssh jumphost with ssh certificate support)

Collection of Ansible Roles for Smallstep - Debian/Ubuntu and RedHat/CentOS

list expiring ssh agent certificates

Solution to launch lightweight test and development virtual machines in Kubernetes

Terraform code to manage Schism for the simplest use cases