3 ms·
OpenSSH (or commonly used variants thereof?) supports X.509 certificates, would they really reimplement that can of worms instead of using already linked libssl
by fulafel 4y ago
OpenSSH (or commonly used variants thereof?) supports X.509 certificates, would they really reimplement that can of worms instead of using already linked libssl functions? Especially since on OpenSSH's home platform libssl is LibreSSL which they consider safer than OpenSSL.
Also, there already was one OpenSSL 3 crypto primitive caused vuln or at least security relevant bug in OpenSSH this year: https://thehackernews.com/2022/06/openssh-to-release-security-patch-for.html https://thehackernews.com/2022/06/openssh-to-release-securit...
- fulafel 4y agoCorrecting myself: in the ssh-keygen manpage it says that the cert format is not X.509: Note that OpenSSH certificates are a different, and much simpler, format to the X.509 certificates used in ssl(8).