certonid / certonid

Certonid is a Serverless SSH Certificate Authority

Certonid

Certonid is a Serverless SSH Certificate Authority.

Consists of two parts: CLI and serverless function.

Releases

Download latest releases

For Mac OS or Linux you can use Homebrew tap:

brew install certonid/tap/certonid

or another way:

brew tap certonid/tap
brew install certonid

Documentation

All information published at Wiki page

Articles

• [English] Certonid — the SSH Certificate Authority Deployed on AWS Lambda
• [Russian] Certonid — SSH центр сертификации, который работает на AWS Lambda

AWS Terraform module

To simplify setup on AWS, you can use Certonid AWS Terraform module

Binaries security

checksum.txt signed by gpg key. You can check its by downloading with archive it .sig file and verify signature:

$ gpg --verify checksums.txt.sig checksums.txt
gpg: Signature made Fri Jul 22 17:24:40 2022 EEST
gpg:                using RSA key 36E7986334C6DE2B41A29537A77A9969BEFF93AE
gpg: Good signature from "Certonid Sign Key (Certonid Sign Key) <[e-mail]>"

Each archive have SBOM file.

Dev build

$ cd serverless && GOOS=linux go build -o serverless main.go
$ cd ..
$ cd cli && go build -o certonid main.go

Roadmap

• Add tests
• Improve documentation
• Website and video
• Use serverless framework to automate deploy and setup
• Support AWS S3 for SSH CA key