2023internal
Temporary SSH certificate access
SSH authorization system based on OpenSSH CA, LDAP, a Python API and short-lived certificates.
Context
Designed a solution to control server access without manually distributing keys. The API validated users, servers and permissions in LDAP, verified cryptographic signatures and issued temporary SSH certificates through a trusted CA for each server.
Impact
Improved internal access control and turned an infrastructure need into a usable CLI-driven workflow.