As long as:
1) It isn't mandatory by default, and won't become.
2) It does not limit the ability as you can now to connect to any host
with a username and password
Then I agree. Otherwise I have enough certificate crap to deal with to
want this.
On Mon, May 16, 2011 at 16:28, Hans Witvliet
Any vague chance of getting the patch of Roumen Petrov applied? http://roumenpetrov.info/openssh/#features
With this patch, one can enjoy the security feautures supplied digital certificates (crl, ocsp, ...), like the one's used by openssl, apache, openvpn, strongswan etc etc.
pki support has been included for a long time in the commercial branch of ssh, but (i think) due to the conservative nature of the people of openbsd, who still seems to be in control of openssh, this patch never made it into the mainstream code
Patch is around since 2006, and still kept up-to-date
-- Med Vennlig Hilsen, A. Helge Joakimsen -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org