Skip to content

vSSH is a command line utility which can help system administrators to request SSH credentials for authentication to their servers, request SSH credentials for the application or hosts that they manage.

License

Notifications You must be signed in to change notification settings

Venafi/vssh-cli

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

16 Commits
 
 
 
 

Repository files navigation

Apache 2.0 License Community Supported Compatible with TPP 21.4+
To report a problem or share an idea, use Issues; and if you have a suggestion for fixing the issue, please include those details, too. Got questions or want to discuss something with our team? Join us on Slack!

vSSH CLI

vSSH CLI is a command line utility designed to simplify generation and enrollment of machine identities for SSH access. System administrators can enroll SSH certificates from Venafi SSH Protect and use them to connect to their infrastructure. vSSH CLI can be used to enroll SSH certificates for applications and hosts.

Compatibility

vSSH CLI releases are tested using the latest version of Venafi SSH Protect. General functionality of the latest vSSH CLI release should be compatible with Venafi SSH Protect 21.4 or higher.

Links

Use these to quickly jump to a relevant section:

Quick installation of vSSH CLI

To quickly install vSSH CLI on Linux or macOS, run the following script. The script requires sudo and it will install vSSH CLI to /usr/local/bin/ directory.

Linux and macOS

curl -s https://raw.githubusercontent.com/Venafi/vssh-cli/main/.github/install.sh | sh

For Windows, you have to download one of the following archives and extract it yourself.

Short usage examples

The examples bellow applies to the latest version of vSSH CLI.

Example 1: Enrolling an SSH certificate for interactive logins to remote hosts

  1. Create a configuration profile in vSSH CLI, so that you can use vSSH CLI without passing any parameters to the vssh command.
user@workstation:~$ vssh profile configure --url tpp.example.com --user alice --template-login "Users - Web Admins"
? Profile name: default
? Service URL: tpp.example.com
? Username for authentication: alice
? [Login Operation] Template name: Users - ENG Admins
? [Enroll Operation] Template name: 
? Do you want to configure more settings? No
? Do you want to save the configuration (as 'default')? Yes
  Configuration profile 'default' was successfully saved.
  1. Enroll an SSH certificate for interactive logins. Before you perform the step below you need to complete the prerequisites to use vSSH CLI with Venafi SSH Protect
user@workstation:~$ vssh login
  Logging in as alice...              
? Enter password for user alice: [? for help] ************
  Authenticating...
  Logged in as alice                            
  One template (Users - Web Admins) found. Using it.    
  Your identity is alice            
  Your role is Users - Web Admins (expires in 12 hours) 
  Credentials have been added to your OpenSSH agent. 
  Now you can perform SSH logins to remote servers.
  1. Open an interactive SSH session to a remote host.
user@workstation:~$ ssh [email protected]
Linux web.example.com 5.10.0-10-amd64

You have new mail.
Last login: Tue May 17 13:20:12 2022 from 172.17.254.151

alice@web:~$ 

License

Copyright © Venafi, Inc. All rights reserved.

vSSH CLI is licensed under the Apache License, Version 2.0. See LICENSE for the full license text.

Please direct questions/comments to [email protected].

About

vSSH is a command line utility which can help system administrators to request SSH credentials for authentication to their servers, request SSH credentials for the application or hosts that they manage.

Resources

License

Security policy

Stars

Watchers

Forks

Packages

No packages published