openpubkey/opkssh
View on GitHub ↗ ★ 2,090 Go
opkssh (OpenPubkey SSH)
8 mentions on Hacker News by 4 people: 1 story, 7 comments · first 2025-03-25 · latest 2025-04-01
20082026
-
▲ 2
Use OIDC with SSH (Open Source)story by guptadeepak · 2025-04-01 · 0 comments
-
opkssh ( https://github.com/openpubkey/opkssh ) it lets you configure OpenSSH so you can ssh using your OpenID Connect identity without adding a trusted party other than the IDP. I'm trying to figure out how to TOFU a MFA HW token…
comment by EthanHeilman · 2025-03-30 · in Ask HN: What are you working on? (March 2025) -
…opkssh yet but we have an issue for it. If you want support for this add your usecase as a comment https://github.com/openpubkey/opkssh/issues/51
comment by EthanHeilman · 2025-03-26 · in Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH -
…discussion happening currently "Key management improvements on the client and SSH agent support": https://github.com/openpubkey/opkssh/issues/6#issuecomment-2...
comment by EthanHeilman · 2025-03-26 · in Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH -
…I really like this. I created an issue to track this. Let me knof you want to do the implementation https://github.com/openpubkey/opkssh/issues/44
comment by EthanHeilman · 2025-03-25 · in Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH -
…there. Is the JWKS response cached? Can it be pre-seeded and/or replaced with an offline copy? [1]: https://github.com/openpubkey/opkssh/blob/main/README.md#etc... [2]: https://github.com/openpubkey/opkssh/blob/main/README.md#etc...
comment by kbolino · 2025-03-25 · in Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH -
…tests don't current cover that case so I created an issue to add that to the integration tests: https://github.com/openpubkey/opkssh/issues/40
comment by EthanHeilman · 2025-03-25 · in Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH -
…certs anyway, so if your agent bounced you'd just get a fresh one without drama I do see < https://github.com/openpubkey/opkssh/issues/6#issuecomment-2... > so I'm glad it's conceptually on the radar, I'm just saying I'm surprised it…
comment by mdaniel · 2025-03-25 · in Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH