ZacharyZcR 32d77fc6d0 feat: Step CA SSH certificates as a host authentication type (#1340) ...

* feat: Step CA SSH certificates as a host authentication type

Issue short-lived SSH user certificates from a smallstep CA through its
OIDC provisioner, over the CA's HTTP API rather than the step binary.
Everything after issuance reuses the OPKSSH plumbing: the same encrypted
per-user/host token store, WebSocket dialog and ssh2 certificate
injection, with the connect paths branching on a shared
usesIssuedCertificate() predicate. Instance-wide CA settings live in the
admin panel, with a private-host allowlist for the SSRF guard.

* fix: harden Step CA callback flow

* style: format Step CA changes

2026-08-25 02:56:44 +08:00

..

readme

feat: Step CA SSH certificates as a host authentication type (#1340)

2026-08-25 02:56:44 +08:00

repo-images

release-2.5.1 (#1067)

2026-07-19 12:29:52 -05:00

do-not-place-files-here.txt

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00