sshca: Configure user CA

SSHCA now supports issuing user certificates.  It uses OpenID Connect to
authenticate requests, and issues certificates based on the user's ID
token.
This commit is contained in:
2024-02-01 09:02:11 -06:00
parent 834d0f804f
commit 2cd4a8b097
4 changed files with 59 additions and 0 deletions

View File

@@ -110,6 +110,17 @@ identity_providers:
- email
- groups
- offline_access
- id: sshca
description: SSHCA
public: true
pre_configured_consent_duration: 4h
redirect_uris:
- http://127.0.0.1
scopes:
- openid
- profile
- email
- groups
log:
level: trace