Fedora Account System
Red Hat Associate
Red Hat Customer
Spec URL: https://mikel.olasagasti.info/tmp/fedora/opkssh.spec SRPM URL: https://mikel.olasagasti.info/tmp/fedora/opkssh-0.10.0-1.fc43.src.rpm Description: opkssh is a tool which enables ssh to be used with OpenID Connect allowing SSH access to be managed via identities like alice instead of long-lived SSH keys. It does not replace SSH, but instead generates SSH public keys containing PK Tokens and configures sshd to verify them. These PK Tokens contain standard OpenID Connect ID Tokens. This protocol builds on the OpenPubkey which adds user public keys to OpenID Connect without breaking compatibility with existing OpenID Provider. Fedora Account System Username: mikelo2
Copr build: https://copr.fedorainfracloud.org/coprs/build/9896609 (succeeded) Review template: https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2421125-opkssh/fedora-rawhide-x86_64/09896609-opkssh/fedora-review/review.txt Please take a look if any issues were found. --- This comment was created by the fedora-review-service https://github.com/FrostyX/fedora-review-service If you want to trigger a new Copr build, add a comment containing new Spec and SRPM URLs or [fedora-review-service-build] string.
Hi Mikel, I have recently started to work on opkssh as well, as I missed your review request: https://bugzilla.redhat.com/show_bug.cgi?id=2432005 I put some additional work into packaging the server-side bits (opkssh config, sshd config, selinux, etc.) such that you can just run `dnf install opkssh-server` and modify the config without any additional necessary setup. Would you be interested in working on this package together? Would you mind starting from my spec file at https://bugzilla.redhat.com/show_bug.cgi?id=2432005, which has those additions?
Closing in favor of #2432005, which has been reviewed and built https://src.fedoraproject.org/rpms/opkssh I'm happy to welcome co-maintainers! *** This bug has been marked as a duplicate of bug 2432005 ***
> I put some additional work into packaging the server-side bits (opkssh config, sshd config, selinux, etc.) such that you can just run `dnf install opkssh-server` and modify the config without any additional necessary setup. Your version is way more advanced than the version in this BZ! > Would you be interested in working on this package together? Package has been reviewed, but I'll test it and send PRs if required. And thanks for contacting!