pkg.soopen package index

brew / rank 9923

Install signmykey with Homebrew

Automated SSH Certificate Authority. Version 0.8.9 via Homebrew; verified 2026-09-13.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install signmykey

local Homebrew formula metadata

overview

Package summary

Automated SSH Certificate Authority

Commands and aliases

  • signmykey

history

Project history and usage

Signmykey is a client/server SSH certificate-authority tool that authenticates users and issues short-lived OpenSSH certificates.

Project history

Signmykey was created as an automated SSH certificate-authority service. Its documented architecture separates user authentication, principal lookup, and certificate signing, allowing local or HashiCorp Vault-backed signing.

Adoption history

The official documentation targets centrally managed SSH environments and integrates with Vault, LDAP, and OpenID Connect. The supplied package facts list Homebrew distribution, while the documentation also describes an Ubuntu package repository.

How it is used

Administrators configure a Signmykey server with authentication, principal, and signer backends. Users point the client at that server and request a certificate, while SSH servers trust the configured CA and authorize certificate principals.

Why package nerds care

Signmykey packages an SSH-certificate workflow into a single client/server tool with pluggable identity, principal, and signer backends. It is notable for joining SSH access, enterprise identity, and short-lived certificate issuance without distributing long-lived authorized keys to every host.

Timeline

  • 2018: Official examples show Signmykey issuing short-lived SSH user certificates.
  • Current: Official documentation covers local and Vault signers plus LDAP and OIDC-oriented deployments.

Related projects

  • OpenSSH consumes the user certificates issued by Signmykey.
  • HashiCorp Vault can serve as the SSH signing backend.
  • LDAP and OpenID Connect can provide authentication and principal data.

Sources

  • Official SSH-server integration guide: https://signmykey.io/getting-started/sshserver/
  • Official Signmykey getting-started documentation: https://signmykey.io/getting-started/signmykey/
  • Official signer-backend documentation: https://signmykey.io/backends/signer/

security posture

Risk level: blue

broad file, network, media, or database tool signal.

Risk classifier

blue risk · medium confidence · tool

Why

  • broad file, network, media, or database tool signal

Signals

  • text:ssh

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/etc/signmykey/server.yml/etc/signmykey/client.yml~/.signmykey.yml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
/etc/signmykey/server.yml/etc/signmykey/server.key

executables

Installed executables

CommandKindExposureNote
signmykeycliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-09-19
manager version0.8.9
manager updated2026-09-13
local dataok
upstreamcurrent
latest detectedv0.8.9

https://github.com/signmykeyio/signmykey

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:signmykey
Version0.8.9
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/signmykey
Homepagehttps://signmykey.io/
Repositoryhttps://github.com/signmykeyio/signmykey
Upstream docshttps://signmykey.io/
LicenseMIT
Source archivehttps://github.com/signmykeyio/signmykey/archive/refs/tags/v0.8.9.tar.gz
Last updated2026-09-13T02:25:45Z
Pulseupdated
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namesignmykey
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • goBuild dependency declared by Homebrew.

Same workflow

  • opksshShares pkgdb curated category or tags: cli, identity-access, security, ssh.
  • pocket-idShares pkgdb curated category or tags: cli, identity-access, security.
  • teleportShares pkgdb curated category or tags: cli, identity, security, ssh.
  • grantedShares pkgdb curated category or tags: cli, identity, security.
  • easy-rsaShares pkgdb curated category or tags: certificate-authority, cli, security.
  • skmShares pkgdb curated category or tags: cli, security, ssh.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation