[clue] GPG and SSH.

David L. Anselmi anselmi at anselmi.us
Mon Feb 13 22:41:15 MST 2012


I've thought, since we did a key signing in 2010, that it would be nice to be able to use GPG keys 
with SSH.  After all, a key is a key.  (At the time I found monkeysphere, which may be more PKI than 
just keys.  But it's more than what I wanted immediately and there hasn't been time to play with it.)

Today I see that "it's easy, just look *here*," which says, "I figured it all out, except for the 
important bits."  None the less, it may be as easy as running gpg-agent rather than ssh-agent (I'll 
let you know when I finish googling).

So imagine my surprise to find that SSH has a PKI built in.  Have a look at CERTIFICATES in 
ssh-keygen(1).  Yeah, so it is an SSH re-invention, not like it's integrated with anything else. 
But it's nice to see such progress and probably the GPG piece isn't any farther than finding the 
right link.

Anyone using SSH certificates, or GPG with SSH?

Dave


More information about the clue mailing list