ssh-ca

Certonid is a Serverless SSH Certificate Authority

Self-hosted web PKI for the full X.509 & SSH certificate lifecycle — private keys in Cosmian KMS, with a Kubernetes cert-manager external issuer and CRL/KRL revocation.

Zen Trust is a self-hosted SSH certificate authority, providing short-lived certificates for users and hosts.

SSH 暴力破解深度防御：从攻击链到六层防御体系。一本关于 SSH 纵深加固与堡垒机架构的电子书。by LeisureLinux

🔐 MCP Vault — Gestion sécurisée des secrets pour agents IA (OpenBao embedded). 39 outils MCP, SSH CA, policies, audit, 14 types de secrets style 1Password.

Tutoriels Bastion OpenSSH 9.9/10.0 sur Debian 12 (Bookworm), Debian 13 (Trixie) & Debian 14 (Forky) : Cryptographie Post-Quantique ML-KEM (FIPS 203), Autorité SSH CA, Clés FIDO2 & Ed25519.

Ansible cloud-init role

Modern cross-platform SSH, SFTP, S3 & Kubernetes client with smartcard/PKCS#11 auth, split terminal, dual-pane file manager, and sync. Team profile vaults

Access engine for the modern age

Certificate Authority (CA) Generator and SSH Key Pair Signing

Ansible role to configure SSH

SSH Certificate authority for private use

Zero-trust SSH certificate authority and control plane for Mayfly

OpenSSH Certificate Authority backed by Cosmian KMS — technical reference, Docker PoC (UC1–UC9) and KMS-backed KRL distribution design. The CA private key never touches disk (PKCS#11).

SSH certificate enrollment, renewal, and revocation for a small fleet on Smallstep step-ca; personal reference

Reproducible Docker lab demonstrating OpenSSH per-host user access blocks — ECIES-encrypted, Host-CA-signed per-host KRLs pulled by krl-client. Companion to pki-manager-web.

Zero-CGO Go 1.26 CLI & MCP Server for X.509 PKI, Mutual TLS (mTLS), OpenSSH User/Host CAs, Free Public ACME v2, and 7 target platform scaffolds (FastAPI, Spring Boot, MCP, NGINX, Vite, Proxmox VE, OpenSSH)