Remote SSH Keys

Simple tool that uses a YAML file to lookup for SSH Keys.

Install

Once you have the binary, you just have to configure your SSH server to use it:

mv remote-ssh-keys /usr/bin
chmod 700 /usr/bin/remote-ssh-keys
chown root:root /usr/bin/remote-ssh-keys
touch /etc/remote-ssh-keys.conf
chmod 600 /etc/remote-ssh-keys.conf

Tell your SSH server

# /etc/ssh/sshd_config
AuthorizedKeysCommand /usr/bin/remote-ssh-keys %u %h %t %f %k
AuthorizedKeysCommandUser root

Then you need to configure the YAML file

Ex:

# /etc/remote-ssh-keys.conf
---
accounts:
    s.morel:
        github:
            - "plopix"
        url:
            - "https://somehere.com/Plopix.keys?%s"
        plain:
            - "plaintext_plopix"

Here that is pretty simple, if someone tries to login as s.morel, the system will loop and look online on each provider (github, url, and plain) to find public keys. If the SSH client matches a public key with a private proposed then the user is logged.

This little tool avoids you to manage your SSH AuthorizedKeys. (~/.ssh/authorized_keys)

/etc/init.d/ssh restart