Support for OpenSSH key pairs, certificates and KRLs
Brought to you by:
chris2511
Having exercised creation of keys, CAs, certificates and KRLs for hosts and users using ssh-keyxgen, I wrote a kind of TUI wrapper plus some shell scripts using that TUI to make running such CAs more comfortable (e.g. creating a log of certificates issued or revoked, manage the serial numbers for certificates and KRLs, etc.).
Now that xca does all that nicely for X.509 certificates, I wonder it it would be possible to add support for OpenSSH certificates also.