aakso / ssh-inscribe Goto Github PK

Hi,

We are having an issue on which, if we have more than 256 principals, we get the following error from ssh-agent:

could not store certificate to an agent: could not add to agent: agent: failure

Regards,
Bruno Costa

It would be useful for ssh-inscribe to support multiple ssh-inscribe server side certificates, especially in a migration scenario where the ssh-ca nodes may (temporarily) serve multiple domains.

$ sshi req --identity id_ed25519
could not login: could not parse private key: sshkeys: unknown Cipher/KDF: aes256-ctr:bcrypt

Looks like aes256-ctr support was added to sshkeys in ScaleFT/sshkeys#3. Would be nice to have support for that in sshi.

HI,

I'm trying to setup ssh-inscribe with OIDC. I'm using a KeyCloak with external User Federation.

So far, ssh-inscribe is sending the requests to KeyCloak. The users are being correctly authenticated. But, we are strugling with the "redirectURL" option on config.yaml. What is the expected URL here? My understanding is that it should be an URL from ssh-inscribe itself, such as https://<ssh-inscribe-url>/oauth/verify, but I was enable to find the correct URL.

Can you add an example to the Documentation/Readme?

Regards,
Bruno Costa

Cobra v1.3.0 includes bunch of fixes to completions, would be nice to upgrade to it (or later, v1.4.0 is out already).

For my particular case, I'm looking forward to the nounset shell mode fixes (mentioned as "unbound variables" in the release notes).

Hi,

Any change to get ready build for arm mac's. Thanks
https://github.com/aakso/ssh-inscribe/releases/tag/0.9.1

HI,

Any chance to get MFA/OTP support?

Regards,
Bruno Costa