Hacker GitHub

← All repos

Netflix/bless

View on GitHub ↗ ★ 2,758 Python

Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function

20 mentions on Hacker News by 20 people: 1 story, 19 comments · first 2016-05-20 · latest 2021-02-26

Mentions per year 20 mentions · busiest year 2016 (6)
20082026
AllStoriesComments NewestTopOldest
  1. …smaller enterprise customers. For others who might be interested, here's bless from Netflix: https://github.com/Netflix/bless edit: Oh, and just to be clear, 2FA for your SSH is not a silver bullet - even a yubikey. But it's a cheap,…
    comment by staticassertion · 2021-02-26 · in How often should I rotate my SSH keys?
  2. …Thers's also an open source re-implementation without this dependency, called CURSE[2]. [1]: https://github.com/Netflix/bless [2]: https://github.com/mikesmitty/curse
    comment by drybjed · 2020-11-17 · in Getting Started with Ansible
  3. If you’re on AWS and have credentials for users there, you can also run bless https://github.com/Netflix/bless
    comment by theatrus2 · 2020-07-04 · in SSH Emergency Access
  4. I'm one of the maintainers of https://github.com/gravitational/teleport Another one to look at is https://github.com/Netflix/bless Also, if you want to stick with what you have (most likely OpenSSH), we wrote an OpenSSH guide:…
    comment by old-gregg · 2020-05-07 · in Infrastructure Security Without Slowing Down Developers
  5. yes, it's called bless. https://github.com/Netflix/bless there's also cashier https://github.com/nsheridan/cashier
    comment by V-eHGsd_ · 2020-04-02 · in How to SSH Properly
  6. Have you looked at Netflix's BLESS: https://github.com/Netflix/bless
    comment by vs4vijay · 2019-06-29 · in Ask HN: How do you provide SSH access to developers in your infrastructure
  7. …certificates signed by the CA, the ssh session does not close when the login cert expires. See https://github.com/Netflix/bless and https://github.com/gravitational/teleport
    comment by wolf550e · 2019-04-21 · in Hardening SSH with 2FA
  8. …implementation is Netflix’s Bless [1]. [0] https://github.com/gravitational/teleport [1] https://github.com/Netflix/bless
    comment by twakefield · 2018-09-27 · in SSH known_hosts hash cracking with Hashcat
  9. …for a general product (has lots of the features of AWS Secrets Manager as well), or Netflix BLESS ( https://github.com/Netflix/bless ) for a very specific tool for just this.
    comment by skywhopper · 2018-04-05 · in AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
  10. …at Bless, which is Lambda-hosted and mints short-lived certificates with a command-line client: https://github.com/Netflix/bless
    comment by tptacek · 2018-03-19 · in Show HN: SSH Permit A38 – Central Managment and Deployment for SSH Keys
  11. …cool to see how Google does it as well. Googling for the usual terms doesn't return anything. [1] https://github.com/Netflix/bless
    comment by technofiend · 2017-10-23 · in Why ProtonMail is more secure than Gmail
  12. …they needed whilst being compatible with their network... But wouldn't BLESS [0], fit the bill? [0] https://github.com/Netflix/bless
    comment by shakna · 2017-02-09 · in Introducing the Uber SSH Certificate Authority
  13. …bit bare-bones. There are some tools written to use certificates though, such as Netflix's BLESS ( https://github.com/Netflix/bless ), Gravitational Teleport ( https://github.com/gravitational/teleport ) and my own (…
    comment by nsheridan · 2017-01-22 · in OpenSSH Keys: A Walkthrough
  14. Are you referring to one of these? https://github.com/Netflix/bless http://gravitational.com/teleport https://www.scaleft.com We have actually developed such a service for internal usage (could not use any of these three because of…
    comment by Artemis2 · 2017-01-06 · in Ask HN: What manual processes would you automate in your company?
  15. …to hear someones thoughts on using this in production, especially compared to BLESS by Netflix ( https://github.com/Netflix/bless ).
    comment by mcx · 2016-12-28 · in Teleport 1.3 adds support for SSH authentication with U2F keys
  16. …can be heavily audited and linked to an existing identity system. Netflix has open-sourced BLESS: https://github.com/Netflix/bless Lyft has adapted BLESS for use without a bastion, start at slide 28: http://www.slideshare.net/aspyker/netfli…
    comment by russell_h · 2016-09-17 · in Is your SSH password revealed when you attempt to connect to the wrong server?
  17. …SSH passwords: https://github.com/gravitational/teleport ( I work on this one with our team) and https://github.com/Netflix/bless (heard great things about it, especially if you are using AWS)
    comment by alexk · 2016-09-16 · in Is your SSH password revealed when you attempt to connect to the wrong server?
  18. https://github.com/Netflix/bless/blob/master/Makefile shows that it's pretty standard Python stuff, just wrapped up in a Makefile for ease of use. Packaging Python apps really really sucks - at least for Debian there's stdeb -…
    comment by voltagex_ · 2016-05-22 · in BLESS: SSH Certificate Authority for Ephemeral SSH Sessions
  19. …about integration with SSO - is there another piece that invokes bless and drops the cert on disk? https://github.com/Netflix/bless/blob/master/bless_client/bl...
    comment by bazzargh · 2016-05-20 · in Client Certificates at Netflix