[{"_1":2,"_161":-5,"_162":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_140":141},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":-5,"_89":90,"_129":-5,"_130":11,"_131":21,"_132":11,"_133":-5,"_134":11,"_135":-5,"_136":137,"_138":91,"_139":-7},"canonicalUrl","https://hub.docker.com/r/nbeguier/cassh-server/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","nbeguier","reponame","cassh-server","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":62,"_64":65,"_66":-5,"_67":68,"_69":70,"_71":11,"_72":33,"_73":74,"_79":11,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2017-08-14T15:31:52.54195Z","description","CASSH Server Side","is_private","last_updated","2021-05-10T11:15:57.378205Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",1249,"repository_type","star_count",1,"status","status_description","active","source","collaborator_count",0,"full_description","# CASSH\n\n[![Build Status](https://travis-ci.com/nbeguier/cassh.svg?branch=master)](https://travis-ci.com/nbeguier/cassh) [![Python 3.5|3.9](https://img.shields.io/badge/python-3.5|3.9-green.svg)](https://www.python.org/) [![License](https://img.shields.io/github/license/nbeguier/cassh?color=blue)](https://github.com/nbeguier/cassh/blob/master/LICENSE)\n\nOpenSSH features reach their limit when it comes to industrialization. We don’t want an administrator to sign every user’s public key by hand every day, so we need a service for that. That is exactly the purpose of CASSH: **signing keys**!\nDevelopped for @leboncoin\n\nhttps://medium.com/leboncoin-engineering-blog/cassh-ssh-key-signing-tool-39fd3b8e4de7\n\n - [CLI version : **1.8.0** *(10/05/2021)*](src/client/CHANGELOG.md) ![leboncoin/cassh](https://img.shields.io/docker/pulls/leboncoin/cassh) + ![nbeguier/cassh-client](https://img.shields.io/docker/pulls/nbeguier/cassh-client) [![docker-build](https://img.shields.io/docker/cloud/automated/nbeguier/cassh-client)](https://hub.docker.com/r/nbeguier/cassh-client)\n - [WebUI version : **1.3.0** *(10/05/2021)*](src/server/web/CHANGELOG.md) ![nbeguier/cassh-web](https://img.shields.io/docker/pulls/nbeguier/cassh-web) [![docker-build](https://img.shields.io/docker/cloud/automated/nbeguier/cassh-web)](https://hub.docker.com/r/nbeguier/cassh-web)\n - [Server version : **2.2.0** *(10/05/2021)*](src/server/CHANGELOG.md) ![leboncoin/cassh-server](https://img.shields.io/docker/pulls/leboncoin/cassh-server) + ![nbeguier/cassh-server](https://img.shields.io/docker/pulls/nbeguier/cassh-server) [![docker-build](https://img.shields.io/docker/cloud/automated/nbeguier/cassh-server)](https://hub.docker.com/r/nbeguier/cassh-server)\n\n## Usage\n\n### Client CLI\n\nAdd new key to cassh-server :\n```\ncassh add\n```\n\nSign pub key :\n```\ncassh sign [--display-only] [--force]\n```\n\nGet public key status :\n```\ncassh status\n```\n\nGet ca public key :\n```\ncassh ca\n```\n\nGet ca krl :\n```\ncassh krl\n```\n\n### Admin CLI\n\n```\nusage: cassh admin [-h] [-s SET] [--add-principals ADD_PRINCIPALS]\n [--remove-principals REMOVE_PRINCIPALS]\n [--purge-principals]\n [--update-principals UPDATE_PRINCIPALS]\n [--principals-filter PRINCIPALS_FILTER]\n username action\n\npositional arguments:\n username Username of client's key, if username is 'all' status\n return all users\n action Choice between : active, delete, revoke, set, search,\n status keys\n\noptional arguments:\n -h, --help show this help message and exit\n -s SET, --set SET CAUTION: Set value of a user.\n --add-principals ADD_PRINCIPALS\n Add a list of principals to a user, should be\n separated by comma without spaces.\n --remove-principals REMOVE_PRINCIPALS\n Remove a list of principals to a user, should be\n separated by comma without spaces.\n --purge-principals Purge all principals to a user.\n --update-principals UPDATE_PRINCIPALS\n Update all principals to a user by the given\n principals, should be separated by comma without\n spaces.\n --principals-filter PRINCIPALS_FILTER\n Look for users by the given principals filter, should\n be separated by comma without spaces.\n```\n\nActive Client **username** key :\n```\ncassh admin active\n```\n\nRevoke Client **username** key :\n```\ncassh admin revoke\n```\n\nDelete Client **username** key :\n```\ncassh admin delete\n```\n\nStatus Client **username** key :\n```\ncassh admin status\n```\n\nSet Client **username** key :\n```\n# Set expiry to 7 days\ncassh admin set --set='expiry=7d'\n\n# Add principals to existing ones\ncassh admin set --add-principals foo,bar\n\n# Remove principals from existing ones\ncassh admin set --remove-principals foo,bar\n\n# Update principals and erease existsing ones\ncassh admin set --update-principals foo,bar\n\n# Purge principals\ncassh admin set --purge-principals\n```\n\nSearch **Principals** among clients :\n```\ncassh admin all search --principals-filter foo,bar\n```\n\n## Install\n\n### Server\n\n[INSTALL.md](src/server/INSTALL.md)\n\n### Client\n\n[INSTALL.md](src/client/INSTALL.md)\n\n### Cassh WebUI\n\n[INSTALL.md](src/server/web/INSTALL.md)\n\n\n## Quick test\n\n### Server side\n\nInstall docker : https://docs.docker.com/engine/installation/\n\n#### Prerequisites\n\n```bash\n# install utilities needed by tests/test.sh\nsudo apt install pwgen jq\n\n# Make a 'sudo' only if your user doesn't have docker rights, add your user into docker group\npip install -r tests/requirements.txt\n\ncp tests/cassh/cassh.conf.sample tests/cassh/cassh.conf\ncp tests/cassh/ldap_mapping.json.sample tests/cassh/ldap_mapping.json\n\n# Edit cassh.conf file to configure the hosts\n\n# Generate temporary certificates\nmkdir test-keys\nssh-keygen -C CA -t rsa -b 4096 -o -a 100 -N \"\" -f test-keys/id_rsa_ca # without passphrase\nssh-keygen -k -f test-keys/revoked-keys\n\n# /!\\ Wait for the container demo-postgres to be started\nsed -i \"s/host = localhost/host = $(docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' demo-postgres)/g\" tests/cassh/cassh.conf\n\n# Duplicate the cassh.conf\ncp tests/cassh/cassh.conf tests/cassh/cassh_2.conf\n# Generate another krl\nssh-keygen -k -f test-keys/revoked-keys-2\nsed -i \"s/revoked-keys/revoked-keys-2/g\" tests/cassh/cassh_2.conf\n```\n\n#### One instance\n\n\n```bash\n# Launch this on another terminal\nbash tests/launch_demo_server.sh --server_code_path ${PWD} --debug\n$ /opt/cassh/src/server/server.py --config /opt/cassh/tests/cassh/cassh.conf\n\n# When 'http://0.0.0.0:8080/' appears, start this script\nbash tests/test.sh\n```\n\n#### Multiple instances\n\nThe same as previsouly, but launch this to specify a second cassh-server instance\n\n```bash\n# Launch this on another terminal\nbash tests/launch_demo_server.sh --server_code_path ${PWD} --debug --port 8081\n$ /opt/cassh/src/server/server.py --config /opt/cassh/tests/cassh/cassh_2.conf\n```\n\n\n### Client side\n\nGenerate key pair then sign it !\n\n```bash\ngit clone https://github.com/nbeguier/cassh.git /opt/cassh\ncd /opt/cassh\n\n# Generate key pair\nmkdir test-keys\nssh-keygen -t rsa -b 4096 -o -a 100 -f test-keys/id_rsa\n\nrm -f ~/.cassh\ncat << EOF > ~/.cassh\n[user]\nname = user\nkey_path = ${PWD}/test-keys/id_rsa\nkey_signed_path = ${PWD}/test-keys/id_rsa-cert\nurl = http://localhost:8080\n\n[ldap]\nrealname = user@test.fr\nEOF\n\n# List keys\npython cassh status\n\n# Add it into server\npython cassh add\n\n# ADMIN: Active key\npython cassh admin user active\n\n# Sign it !\npython cassh sign [--display-only]\n```\n\n# License\nLicensed under the [Apache License](https://github.com/nbeguier/cassh/blob/master/LICENSE), Version 2.0 (the \"License\").\n\n# Copyright\nCopyright 2017-2021 Nicolas BEGUIER; ([nbeguier](https://beguier.eu/nicolas/) - nicolas_beguier[at]hotmail[dot]com)\n","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":21,"_83":11,"_84":11},"read","write","admin","user","storage_size",4458525602,"orgData","recentTags",[91],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":100,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":65,"_128":21},"content_type","creator",2048380,"full_size",348541584,"id",14057865,"images",[101],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":65,"_117":-5},"architecture","amd64","digest","sha256:926f8a7c7676cfd14951ffcd40a05342dd67870657a1653b0db4718c52aa4b05","features","","last_pulled","2026-09-25T00:45:12.990393561Z","last_pushed","2021-05-10T11:15:57Z","os","linux","os_features","os_version","size","variant","2021-05-10T11:15:57.039189Z","last_updater","last_updater_username","media_type","latest","repository",1734815,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":142,"_149":150,"_136":159,"_160":11},{"_40":143,"_42":144,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":145,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":62,"_64":65,"_66":-5,"_67":68,"_69":70,"_71":11,"_72":33,"_73":146,"_79":11,"_80":148,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":147},[78],{"_82":21,"_83":11,"_84":11},"tags",{"_151":62,"_152":-5,"_153":-5,"_154":155},"count","next","previous","results",[156],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":157,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":65,"_128":21},[158],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":65,"_117":-5},[],"canDeleteTags","actionData","errors"]

nbeguier/cassh-server

Tags for nbeguier/cassh-server