Bug 1776

Summary: Hostbased authentication with certificates
Product: Portable OpenSSH Reporter: Iain Morgan <imorgan>
Component: sshAssignee: Assigned to nobody <unassigned-bugs>
Status: CLOSED FIXED    
Severity: enhancement CC: djm
Priority: P2    
Version: -current   
Hardware: All   
OS: All   
Bug Depends on:    
Bug Blocks: 1708    
Attachments:
Description Flags
Add certificate support for hostbased authentication none

Description Iain Morgan 2010-06-05 03:41:57 AEST
Created attachment 1855 [details]
Add certificate support for hostbased authentication

It would be extremely useful to be able to use certificates with
hostbased authentication in environments such as compute clusters.

The attached patch adds this support. If the client has a host certificate,
it will be used for hostbased authentication. The server will use any
applicable @cert-authority entry in the ssh_known_hosts file to 
validate the cert.
Comment 1 Damien Miller 2010-08-05 13:08:12 AEST
Patch applied (with a small tweak). This will be in the soon-to-be-released OpenSSH 5.6.
Comment 2 Darren Tucker 2010-08-27 10:28:19 AEST
With the release of OpenSSH 5.6p1 this bug is now considered closed.  If you have further problems please reopen or file a new bug as appropriate.