sshcerts (formerly rustica-keys) is the a library for parsing, creation, and signing of OpenSSH certificates. It was originally based on rust-sshkeys
by @dnaeon (and his licence is present at the top of mod.rs
in the ssh module) but has been significantly expanded to offer a greater writer API, certificate signature validation, issuing new certificates, and more.
The library optionally contains other functionality for Yubikey key management. The Yubikey management module can be used to provision slot with keys that can never leave the device. To enable this functionality use the feature yubikey
The API for this crate should not be considered stable and expect breaking changes between versions.
No review has been done. I built it because I thought people could find it useful. Be wary about using this in production without doing a thorough code review.
This software is provided under the MIT licence so you may use it basically however you wish so long as all distributions and derivatives (source and binary) include the copyright from the LICENSE
.