ssh-ca

Certonid is a Serverless SSH Certificate Authority

Self-hosted web PKI for the full X.509 & SSH certificate lifecycle — private keys in Cosmian KMS, with a Kubernetes cert-manager external issuer and CRL/KRL revocation.

Zen Trust is a self-hosted SSH certificate authority, providing short-lived certificates for users and hosts.

SSH 暴力破解深度防御：从攻击链到六层防御体系。一本关于 SSH 纵深加固与堡垒机架构的电子书。by LeisureLinux

🔐 MCP Vault — Gestion sécurisée des secrets pour agents IA (OpenBao embedded). 39 outils MCP, SSH CA, policies, audit, 14 types de secrets style 1Password.

Ansible cloud-init role

Tutoriels Bastion OpenSSH 9.9/10.0 sur Debian 12 (Bookworm), Debian 13 (Trixie) & Debian 14 (Forky) : Cryptographie Post-Quantique ML-KEM (FIPS 203), Autorité SSH CA, Clés FIDO2 & Ed25519.

Modern cross-platform SSH, SFTP, S3 & Kubernetes client with smartcard/PKCS#11 auth, split terminal, dual-pane file manager, and sync. Team profile vaults

Access engine for the modern age

Certificate Authority (CA) Generator and SSH Key Pair Signing

Ansible role to configure SSH

Zero-trust SSH certificate authority and control plane for Mayfly

SSH certificate enrollment, renewal, and revocation for a small fleet on Smallstep step-ca; personal reference

SSH Certificate authority for private use

OpenSSH Certificate Authority backed by Cosmian KMS — technical reference, Docker PoC (UC1–UC9) and KMS-backed KRL distribution design. The CA private key never touches disk (PKCS#11).

Reproducible Docker lab demonstrating OpenSSH per-host user access blocks — ECIES-encrypted, Host-CA-signed per-host KRLs pulled by krl-client. Companion to pki-manager-web.

Zero-CGO Go 1.26 CLI & MCP Server for X.509 PKI, Mutual TLS (mTLS), OpenSSH User/Host CAs, Free Public ACME v2, and 7 target platform scaffolds (FastAPI, Spring Boot, MCP, NGINX, Vite, Proxmox VE, OpenSSH)