authorized_keys
bless
| authorized_keys | bless | |
|---|---|---|
| 1 | 6 | |
| 1 | 2,730 | |
| - | 0.3% | |
| 0.0 | 0.0 | |
| almost 2 years ago | 10 months ago | |
| Shell | Python | |
| - | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
authorized_keys
-
How often should I rotate my SSH keys?
Definitely not appropriate for protecting Real Infrastructure, but for my handful of personal machines I put my authorized keys in a Google Doc and configure hosts to download it using `AuthorizedKeysCommand`.
I have a hardware-backed "doomsday key" to use if the Google Doc stops working.
Writeup and script at https://github.com/mmdriley/authorized_keys
bless
-
What are SSH Certificate Authority solutions?
In the quick search I learned about ssh cert authority which looks very manual and also like a dead project smallstep's step-ca who put together very nice article about how to begin certificate authority process Netflix' BLESS is AWS only Cashier which also looks quite ok
-
What is the best way to manage SSH identities and access on scale?
NETFLIX BLESS - Bastion's Lambda Ephemeral SSH Service
- Has anyone here heard of the term “infrastructure access platform” or StrongDm or Teleport?
- Cryptojacking Attacks Continue To Target SSH Servers
- How often should I rotate my SSH keys?
-
Why SSH certificates are awesome
3. BLESS - By Netflix
What are some alternatives?
openssh-sk-winhello - A helper for OpenSSH to interact with FIDO2 and U2F security keys through native Windows Hello API
certificates - 🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
secretive - Store SSH keys in the Secure Enclave
the-bastion - Authentication, authorization, traceability and auditability for SSH accesses.
thoughts - Just my public thoughts, think of it like a blog I never update
cashier - A self-service CA for OpenSSH
keymaster - Short term certificate based identity system (ssh/x509 ca + openidc)
streamalert - StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
sekey - Use Touch ID / Secure Enclave for SSH Authentication!
bundlewrap - Config management with Python
pam-ussh - uber's ssh certificate pam module