RE: make x.509 certificate authentication work with ssh

Qing,

I've inquired on the list before and couldn't come up with any plans to incorporate any particular X.509 functionality into the code for OpenSSH.

However, I'm aware of two patches for OpenSSH for X.509:

http://satva.skalasoft.com/~rumen/openssh/ http://www.ncsa.uiuc.edu/Divisions/ACES/GSI/openssh/

I've had most luck with NCSA's GSI in standalone (without complete grid security). They just came out with 1.8 and it seems fairly mature. If you need additional doc let me know.

cs
-----Original Message-----
From: qing.lu@kodak.com [mailto:qing.lu@kodak.com] Sent: Thursday, February 20, 2003 5:18 PM To: secureshell@securityfocus.com
Subject: make x.509 certificate authentication work with ssh

Hello all,

I have ssh server on UNIX ---openssh 3.5p1 and ssh client on window or unix with Secure CRT (commertial version) or F-Secure (commertial version) client or openssh client. I can make public key authentication with user key work but not public key authentication with x.509 certificate. I have already got my CA, server and client certificate. I like to know what do I need to do on both server and client side in order to make it work. What options I need to set in configuration file? I found the help pages in openssh and SecureCRT, F-Secure are really laking of information in this regard.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

I apprecite any help from the group.

Thanks,
Qing Received on Fri Feb 21 13:12:41 2003