x509 for hostkeys.

[Iain Morgan]

You may already be aware of this, but there is a variant of ssh (gsi-ssh)
that is included with the Globus Toolkit. GSI (Grid Security
Infrastructure) uses x509 certificates and thus gsi-ssh does. I would
imagine that the Globus group would be interested in x509 support
being added to OpenSSH.

A jumping-off point for information about GSI (and Globus) would be:

	www.globus.org/toolkit/security.html

On Fri Feb  8 04:59:21 2002, Markus Friedl wrote:
> 
> who did try this?
> no success stories?
> no feedback?
> no comments?
> no x509 in openssh-3.1?
> 
> On Thu, Jan 31, 2002 at 12:09:10PM +0100, Markus Friedl wrote:
> > This (very quick) patch allows you to connect with the commercial
> > ssh.com windows client and use x509 certs for hostkeys.  You have
> > to import your CA cert (ca.crt) in the windows client and certify
> > your hostkey:
> _______________________________________________
> openssh-unix-dev at mindrot.org mailing list
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
> 


--
Iain Morgan
NAS Desktop Support Group