4 ms·
To add to the blog post; you don't need brew or step or any of that nonsense to inspect certificates. $ ssh-keygen -Lf the-cert.pub
by aaronmdjones 6y ago
To add to the blog post; you don't need brew or step or any of that nonsense to inspect certificates.
$ ssh-keygen -Lf the-cert.pub
- dcow 6y agoYou can, but `ssh-keygen` is about as nice to use as `openssl` which practically means you spend a lot of time with your head in the manual. The `step` tools have a nicer UI: $ step ssh inspect the-cert.pub Also the post already mentions that using `step` instead of `ssh-keygen` is optional, so I'm not sure why you feel the need to repeat it...
- aaronmdjones 6y agoRight, you'd have to look up the switches in the manpage if you don't remember them, but that's already the case with the generation portion, which is why the post includes the switches for that. I'm just saying it could have included the inspect switches too.
- dcow 6y agoWe actually plan to update the post to demonstrate doing it entirely with the `step` tool. We just want to do a pass on the UX to make sure it is as easy an foolproof as possible before bringing more attention to it.