yann/vault-cert-openssh
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
3 commits 1 branch 0 tags 51 KiB
Python 100%
Find a file
Yann Verry d062ceafa4
Add requirements.txt, handle an empty cert file
2019-05-05 23:07:14 +02:00
.gitignore Initial commit 2019-05-05 14:56:33 +02:00
README.md Add requirements.txt, handle an empty cert file 2019-05-05 23:07:14 +02:00
requirements.txt Add requirements.txt, handle an empty cert file 2019-05-05 23:07:14 +02:00
vault-cert-openssh.py Add requirements.txt, handle an empty cert file 2019-05-05 23:07:14 +02:00

README.md

Vault Certificate OpenSSH

This script check your current certificate expiration and ask to sign on your vault if needed

Usage

Vault

On your vault server you need to follow this documentation: https://www.vaultproject.io/docs/secrets/ssh/signed-ssh-certificates.html

SSH Wrapper

Before each SSH connection add this wrapper command:

python vault-cert-openssh.py ~/.ssh/<your SSH key>-cert.pub

Dev side

Prerequisite:

  • Python >=3.7
  • hvac
  • pipreqs
  • Vault