Zen Trust is a self-hosted SSH certificate authority, providing short-lived certificates for users and hosts.
- Short-lived certificates
- Revocation, renewal and rekeying
- SSH CA signing key rotation
- Fine-grained access control
- Certificate bundling
- SSH agent forwarding
- SSH certificate bundling
- Implement OAuth
- Use RFC9470 to swap the encryption session stuff for re-auth using stronger mechanisms
TODO
- Issue a CA root certificate
- Store the CA root certificate
- Issue an intermediate CA certificate
- Store the intermediate CA certificate
- Issue a certificate using the intermediate CA
Command line interface for zen
| Argument | Alias | Type | Description |
|---|---|---|---|
| name | n | string | Optional. |
| config | c | string | Optional. Path to a config file |
| help | h | boolean | Show this help message |
Made with <3 by Moritz Friedrich