使用 Homebrew 安装 signmykey

项目链接

• 主页
• 仓库
• 软件包管理器页面

命令和别名

• signmykey

项目历史

Signmykey was created as an automated SSH certificate-authority service. Its documented architecture separates user authentication, principal lookup, and certificate signing, allowing local or HashiCorp Vault-backed signing.

采用历史

The official documentation targets centrally managed SSH environments and integrates with Vault, LDAP, and OpenID Connect. The supplied package facts list Homebrew distribution, while the documentation also describes an Ubuntu package repository.

使用方式

Administrators configure a Signmykey server with authentication, principal, and signer backends. Users point the client at that server and request a certificate, while SSH servers trust the configured CA and authorize certificate principals.

为什么软件包爱好者会关心

Signmykey packages an SSH-certificate workflow into a single client/server tool with pluggable identity, principal, and signer backends. It is notable for joining SSH access, enterprise identity, and short-lived certificate issuance without distributing long-lived authorized keys to every host.

时间线

• 2018: Official examples show Signmykey issuing short-lived SSH user certificates.
• Current: Official documentation covers local and Vault signers plus LDAP and OIDC-oriented deployments.

Related projects

• OpenSSH consumes the user certificates issued by Signmykey.
• HashiCorp Vault can serve as the SSH signing backend.
• LDAP and OpenID Connect can provide authentication and principal data.

来源

• Official SSH-server integration guide: https://signmykey.io/getting-started/sshserver/
• Official Signmykey getting-started documentation: https://signmykey.io/getting-started/signmykey/
• Official signer-backend documentation: https://signmykey.io/backends/signer/