oinit

Certificate-based OpenSSH for Federated Identities

This repository contains a collection of programs to enable OpenSSH login for federated identities based on certificates.

OpenID Connect access token for selected provider is loaded from oidc-agent.

Development

# Client application
$ make oinit

# oinit-shell and oinit-switch
$ make oinit-shell oinit-switch

# Server application (CA)
$ make oinit-ca

When changing the REST API annotations, run make swagger to generate the Swagger files.

Branches

Development happens on feature branches checked out from and merged back into prerel. When ready, commits are merged into main and tagged as release.

License

This project is licensed under the MIT License.