4 ms·
What token hardware does support x509 certs (and thus compatible with an SSH CA?)
by elevation 6y ago
What token hardware does support x509 certs (and thus compatible with an SSH CA?)
- akerl_ 6y agoThe Yubikey supports x509 certs (this is the PIV app). And you can use them for SSH authentication via opensc or similar. But this just uses the RSA private key, not the cert. SSH’s built-in CA support uses a certificate authority private key to sign regular SSH public keys. The resulting public key cert isn’t compatible, as far as I know, with any hardware keys.