Re: [Cryptography-dev] Generate a signed SSH user authorized key

2023-09-21 Thread Paul Kehrer
SSH certificates are not X.509, you’ll need to use https://cryptography.io/en/latest/hazmat/primitives/asymmetric/serialization/#ssh-certificate-builder for building them.-PaulOn Sep 21, 2023, at 9:59 AM, John Walstra via Cryptography-dev wrote:I’m trying to use cryptography to generate a SSH aut

[Cryptography-dev] Generate a signed SSH user authorized key

2023-09-21 Thread John Walstra via Cryptography-dev
I’m trying to use cryptography to generate a SSH authorized key that is use when the SSH server is set up with TrustedUserCAKeys. On the Linux command line, the keys are setup as follows $ ssh-keygen -t rsa -b 2048 -f test $ ssh-keygen -s /path/to/trusted_user_ca_pk -I test -V +52w test.pub Tha