Re: extendible certificate

"DM" == Doug McIntyre <merlyn@xxxxxxxxx> writes:

DM> "Richard E. Silverman" <res@xxxxxxxx> writes:
>>>>>>> "iguchiyu" == iguchiyu <iguchiyu@xxxxxxxxx> writes:

iguchiyu> Well i want to use openSSH from the CA perspective. I want
iguchiyu> to issue certificates to my client machines and further my
iguchiyu> applications will take use these certificates.

iguchiyu> What kind of certificates are generated by the openSSH ? can
iguchiyu> you provide me link related to certificate generation format
iguchiyu> in the openSSH

>> I seem not to be getting my point across:

>> There. Are. No. Certificates. Anywhere.

DM> In openSSH.

DM> Other SSH implementations have added on some functionality with
DM> that reguard, mostly commercial versions.

Both ssh.com Tectia and vshell/SecureCRT from VanDyke support
certificates for client and server authentication. There is also a patch
to OpenSSH for certificate use, which allows you to specifiy DN's in the
authorized_keys file rather than bare keys.

DM> But, perhaps the OP is confusing SSH with SSL?

Yes, perhaps he really means "OpenSSL?"

--
Richard Silverman
res@xxxxxxxx

.

Relevant Pages

  • Re: extendible certificate
    ... iguchiyu> Well i want to use openSSH from the CA perspective. ... iguchiyu> applications will take use these certificates. ... iguchiyu> What kind of certificates are generated by the openSSH? ...
    (comp.security.ssh)
  • Re: extendible certificate
    ... iguchiyu> applications will take use these certificates. ... In openSSH. ... Other SSH implementations have added on some functionality with that ...
    (comp.security.ssh)
  • Re: extendible certificate
    ... I want to issue certificates to my client machines and further my ... applications will take use these certificates. ... What kind of certificates are generated by the openSSH? ...
    (comp.security.ssh)
  • Re: extendible certificate
    ... iguchiyu> Hi, I am using the latest version of the openssh. ... It doesn't use any kind of structured "certificate;" just bare public ... iguchiyu> the processor type, ...
    (comp.security.ssh)
  • Re: extendible certificate
    ... What version of OpenSSH are you using? ... Stock OpenSSH does not support ... iguchiyu> Hi All, I have several thin client machines available to ... I want to issue each of them client certificate based on ...
    (comp.security.ssh)