sshcerts 0.11.1

A library for parsing, verifying, and creating SSH Certificates
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111

[package]
name = "sshcerts"
version = "0.11.1"
authors = ["Mitchell Grenier <mitchell@confurious.io>"]
edition = "2018"
license-file = "LICENSE"
description = "A library for parsing, verifying, and creating SSH Certificates"
repository = "https://github.com/obelisk/sshcerts"
homepage = "https://github.com/obelisk/sshcerts"
keywords = ["ssh", "yubikey", "certs", "certificates"]
categories = ["authentication"]

[features]
default = ["rsa-signing"]

all = ["encrypted-keys", "rsa-signing", "x509-support", "yubikey-support", "fido-support"]

encrypted-keys = ["aes", "bcrypt-pbkdf", "ctr"]

# Full FIDO support pulls in ctap-hid-fido2 with USB dependencies. Use fido-lite
# if you need to work with fido data, without needing to generate it.
fido-support = ["ctap-hid-fido2", "fido-lite"]
fido-lite = ["minicbor", "x509-parser"]
rsa-signing = ["simple_asn1", "num-bigint"]
x509-support = ["der-parser", "x509", "x509-parser"]
yubikey-support = ["rcgen", "yubikey", "yubikey-lite"]
yubikey-lite = ["x509-support"]

[dependencies]
base64 = "0.13"
ring = "0.16"
zeroize = {version = "1", features = ["zeroize_derive"]}

# Dependencies for rsa-signing
simple_asn1 = {version = "0.5", optional = true}
num-bigint = {version = "0.4", optional = true}

# Dependencies for yubikey-support
yubikey = {version = "0.5", features = ["untested"], optional = true}
lexical-core = {version = ">0.7.4", optional = true}
rcgen = {version = "0.8", optional = true}
x509 = {version = "0.2", optional = true}
x509-parser = {version = "0.13", features = ["verify"], optional = true}
der-parser = {version = "5", optional = true}

# Dependencies for encrypted-keys
aes = {version = "0.7", features = ["ctr"], optional = true}
bcrypt-pbkdf = {version = "0.6", optional = true}
ctr = {version = "0.8", optional = true}

# Dependencies for fido-support
ctap-hid-fido2 = {version = "3", optional = true}
minicbor = {version = "0.13", optional = true}
#ctap-hid-fido2 = {git = "https://github.com/gebogebogebo/ctap-hid-fido2", branch="master", optional = true}
#ctap-hid-fido2 = {git = "https://github.com/obelisk/ctap-hid-fido2", branch="device_by_path", optional = true}
#ctap-hid-fido2 = {path = "../ctap-hid-fido2", optional = true}

[dev-dependencies]
env_logger = "0.8.2"
hex = "0.4.2"
clap = "3.0.5"
criterion = "0.3"

[[bench]]
name = "certs_per_second"
harness = false
required-features = ["yubikey-support"]

[[example]]
name = "yk-fingerprint"
required-features = ["yubikey-support"]

[[example]]
name = "yk-provision"
required-features = ["yubikey-support"]

[[example]]
name = "sign-with-yubikey"
required-features = ["yubikey-support"]

[[example]]
name = "ssh-pkey-info"
required-features = ["encrypted-keys"]

[[example]]
name = "into-ssh-pubkey"
required-features = ["x509-support"]

[[example]]
name = "new-fido-sshkey"
required-features = ["fido-support"]

[[test]]
name = "privkey-encrypted"
path = "tests/privkey_encrypted.rs"
required-features = ["encrypted-keys"]

[[test]]
name = "cert-creation-parse-rsa"
path = "tests/cert-creation-parse-rsa.rs"
required-features = ["encrypted-keys"]

[[test]]
name = "fido-lite"
path = "tests/fido-lite.rs"
required-features = ["fido-support"]

[[test]]
name = "yubikey-lite"
path = "tests/yubikey-lite.rs"
required-features = ["yubikey-lite"]